JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.2.216.2

155.2.216.2 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 29%: ?

29%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.2.216.2

Whois 155.2.216.2

IP Abuse Reports for 155.2.216.2:

This IP address has been reported a total of 61 times from 18 distinct sources. 155.2.216.2 was first reported on April 21st 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 22:23:14 (4 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:23:06.818187 2026] [security2:error] [pid 22258:tid 22258] [client 155.2.216.2:22951] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|waterjetsolutions.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "waterjetsolutions.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akg2SoxSksdUor-WpjuGMQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 22:06:44 (5 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:06:40.292571 2026] [security2:error] [pid 30112:tid 30112] [client 155.2.216.2:36143] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jnpmarinesolutions.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jnpmarinesolutions.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgycLEyPU9w6Hn4e-x_CwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 21:42:06 (5 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:42:02.073990 2026] [security2:error] [pid 11336:tid 11336] [client 155.2.216.2:58737] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|3dsportschannel.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3dsportschannel.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgsqg-N8aavQMDHeHVPhgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 21:21:16 (5 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:21:12.090726 2026] [security2:error] [pid 13652:tid 13652] [client 155.2.216.2:47049] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|agenticapocalypse.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agenticapocalypse.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgnyG8U1mCSY4z2T9grpgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 21:03:53 (6 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:03:47.417032 2026] [security2:error] [pid 2972:tid 2972] [client 155.2.216.2:22785] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cypraea.info\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cypraea.info"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgjswNDpXtYp9KguKtKTwAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:44:39 (6 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:44:34.327222 2026] [security2:error] [pid 17953:tid 17953] [client 155.2.216.2:64287] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.rimworld.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rimworld.com"] [uri "/notra/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgfMrgNkqNEyfhuLX58zQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:20:41 (6 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:20:34.364884 2026] [security2:error] [pid 31811:tid 31811] [client 155.2.216.2:63387] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.d365geek.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.d365geek.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgZklIZBdx8fZdr2I6XcgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:00:09 (7 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:00:03.248089 2026] [security2:error] [pid 26201:tid 26201] [client 155.2.216.2:55287] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|patanthony.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "patanthony.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgUwwRHsUJDfmnuKeKCbwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:39:57 (7 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:39:52.860622 2026] [security2:error] [pid 23584:tid 23584] [client 155.2.216.2:48707] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|angelachawkins.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "angelachawkins.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgQCMGOpEa5A9tBNSBtLQAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:19:26 (7 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:19:18.857143 2026] [security2:error] [pid 4170:tid 4170] [client 155.2.216.2:37069] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|viajeofdesign.bond\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "viajeofdesign.bond"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgLNv59BdM1MPxTscTFsQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 18:53:11 (8 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:53:06.742062 2026] [security2:error] [pid 28459:tid 28459] [client 155.2.216.2:59699] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|twtcsl.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "twtcsl.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgFEhbTh7br1bg6jP_zuwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 18:36:06 (8 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:36:02.738688 2026] [security2:error] [pid 7901:tid 7949] [client 155.2.216.2:51317] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|chelseyrae.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chelseyrae.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akgBEh_kPW8e2YOeA1Gk1QAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 18:06:11 (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:06:03.169849 2026] [security2:error] [pid 8562:tid 8562] [client 155.2.216.2:59747] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lcssouth.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lcssouth.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "akf6CyDafM3Up44hpPLu-gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-03 11:11:34 (16 hours ago)	Automatically blocked after 1 security event. Observed PHPUnit exploit probes. Source: Cloudflare se ... show more Automatically blocked after 1 security event. Observed PHPUnit exploit probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
🇯🇵 demonsword	2026-07-01 11:52:04 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.cloudflare.com:443 show less	Open Proxy Port Scan

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.49

🇧🇪 207.175.47.52

🇩🇪 143.14.44.139

🇺🇸 91.230.168.166

🇫🇷 45.91.22.43

🇬🇧 37.156.64.9

🇬🇧 35.203.210.217

🇩🇪 193.124.20.250

🇷🇴 151.242.191.232

🇺🇸 147.185.132.163

🇨🇳 123.122.33.97

🇮🇳 98.70.127.17

🇳🇱 91.92.40.231

🇳🇱 85.11.167.7

🇺🇸 75.80.69.106

🇺🇸 66.132.172.106

🇳🇱 64.34.87.191

🇳🇱 45.153.34.15

🇺🇸 20.65.195.108

🇺🇸 20.29.47.111