JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.2.216.17

155.2.216.17 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 61%: ?

61%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.2.216.17

Whois 155.2.216.17

IP Abuse Reports for 155.2.216.17:

This IP address has been reported a total of 129 times from 60 distinct sources. 155.2.216.17 was first reported on April 12th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-07 10:22:05 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.17 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 06:21:58.296778 2026] [security2:error] [pid 13668:tid 13668] [client 155.2.216.17:59045] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.stbms.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stbms.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aiVGRlwE5Q1x2Lv9w-K1ugAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 hostseries	2026-06-06 08:29:12 (2 days ago)	Trigger: LF_SMTPAUTH	Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 17:34:13 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.17 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:34:07.858412 2026] [security2:error] [pid 13724:tid 13724] [client 155.2.216.17:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vertubet.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vertubet.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aiMIjw51Rde3gfa4ERp0EwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 chronos	2026-06-04 02:50:26 (4 days ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 6844 \| Proto: TCP \| Locat ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 6844 \| Proto: TCP \| Location: Japan, Tokyo show less	Port Scan Hacking
🇨🇳 pengpeng	2026-05-30 01:15:58 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 4153 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇯🇵 demonsword	2026-05-23 07:16:22 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: one.one.one.one:443 show less	Open Proxy Port Scan
🇩🇪 grassau.com	2026-05-22 05:56:21 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 155.2.216.17 (JP/Japan/Tokyo/Tokyo/-)	Brute-Force
🇺🇸 xmission.com	2026-05-22 03:37:39 (2 weeks ago)	Blocked by UFW (TCP on 54579) Source port: 56010 TTL: 118 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 54579) Source port: 56010 TTL: 118 Packet length: 52 TOS: 0x08 This report (for 155.2.216.17) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 pcpiefke	2026-05-22 00:13:10 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 155.2.216.17 (JP/Japan/-)	Brute-Force
🇩🇪 wp1web.com	2026-05-20 14:52:24 (2 weeks ago)	env-file - Search for .env data weakness (/.env) by 155.2.216.17 (Tokyo; JPN) - collected by docker ... show more env-file - Search for .env data weakness (/.env) by 155.2.216.17 (Tokyo; JPN) - collected by docker http-honeypot show less	Web App Attack
🇨🇳 pengpeng	2026-05-19 12:05:01 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 19089 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 19089 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 interbiznw.com	2026-05-15 06:34:52 (3 weeks ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 knock	2026-05-15 06:09:25 (3 weeks ago)	Knock-Knock honeypot brute-force: SMTP (1 total hits)	Brute-Force
🇨🇳 pengpeng	2026-05-14 14:40:13 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 36844 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 36844 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 CrystalMaker	2026-05-14 14:24:06 (3 weeks ago)	Vulnerability scan - GET /.env	Hacking

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.104.78.72

🇺🇸 205.185.127.250

🇺🇸 172.253.9.221

🇺🇸 172.178.16.179

🇩🇪 165.154.164.24

🇭🇰 101.32.1.25

🇫🇷 91.196.152.211

🇸🇪 90.231.80.167

🇳🇱 2.59.183.60

🇺🇸 216.218.206.69

🇺🇬 197.221.130.58

🇲🇴 182.93.50.90

🇧🇷 177.129.12.2

🇩🇪 167.94.146.58

🇨🇳 115.190.45.48

🇨🇬 102.129.75.102

🇺🇸 91.230.168.147

🇺🇸 66.116.237.163

🇨🇳 47.99.115.135

🇧🇷 45.181.237.45