JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.2.228.196

155.2.228.196 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	iway AG
Usage Type	Fixed Line ISP
ASN	AS8758
Domain Name	iway.ch
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.2.228.196

Whois 155.2.228.196

IP Abuse Reports for 155.2.228.196:

This IP address has been reported a total of 44 times from 38 distinct sources. 155.2.228.196 was first reported on May 27th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Webhoster	2026-06-04 12:11:58 (3 hours ago)	{"ClientAddr":"162.158.217.132:11145","ClientHost":"155.2.228.196","ClientPort":"11145","ClientUsern ... show more {"ClientAddr":"162.158.217.132:11145","ClientHost":"155.2.228.196","ClientPort":"11145","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":21528622,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":21528622,"RequestAddr":"memo.timvdberg.dev","RequestContentSize":0,"RequestCount":137225,"RequestHost":"memo.timvdberg.dev","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"memo@file","StartLocal":"2026-06-04T12:11:57.862651789Z","StartUTC":"2026-06-04T12:11:57.862651789Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"155.2.228.196","request_X-Forwarded-For":"155.2.228.196","request_X-Real-Ip":"162.158.217.132","time":"2026-06-04T12:11:57Z"} {"ClientAddr":"172.71.99.75:12154","ClientHost":"155.2.228.196","ClientPort":"12154","ClientUsername":"-","DownstreamContentSi ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 arthome.info	2026-06-03 09:05:00 (1 day ago)	404 /bot-connect.js / 4x every day	Port Scan
Anonymous	2026-06-03 08:07:20 (1 day ago)	155.2.228.196 - - [03/Jun/2026:10:07:00 +0200] "GET /js/lkk_ch.js HTTP/1.1" 404 30394 155.2.228.196 ... show more 155.2.228.196 - - [03/Jun/2026:10:07:00 +0200] "GET /js/lkk_ch.js HTTP/1.1" 404 30394 155.2.228.196 - - [03/Jun/2026:10:07:00 +0200] "GET /assets/js/auth.js HTTP/1.1" 404 30393 155.2.228.196 - - [03/Jun/2026:10:07:03 +0200] "GET /assets/js/message.js HTTP/1.1" 404 30393 155.2.228.196 - - [03/Jun/2026:10:07:06 +0200] "GET /static/style/protect/index.js HTTP/1.1" 404 30393 155.2.228.196 - - [03/Jun/2026:10:07:08 +0200] "GET /js/lkk_ch.js HTTP/1.1" 404 30394 155.2.228.196 - - [03/Jun/2026:10:07:08 +0200] "GET /assets/js/auth.js HTTP/1.1" 404 30394 155.2.228.196 - - [03/Jun/2026:10:07:11 +0200] "GET /static/style/protect/index.js HTTP/1.1" 404 30393 155.2.228.196 - - [03/Jun/2026:10:07:14 +0200] "GET /static/style/sys_files/index.js HTTP/1.1" 404 30392 155.2.228.196 - - [03/Jun/2026:10:07:14 +0200] "GET /static/style/sys_files/index.js HTTP/1.1" 404 30395 155.2.228.196 - - [03/Jun/2026:10:07:16 +0200] "GET /js/twint_ch.js HTTP/1.1" 404 30393 ... show less	Web Spam Web App Attack
🇮🇹 ciccio diddo	2026-06-02 20:59:58 (1 day ago)	CMS/WP Exploit multiple 404 port:Tcp/80,443	Brute-Force Web App Attack
🇳🇱 Yachiyo Runami	2026-06-02 19:07:54 (1 day ago)	Web Scan (L7) \| Paths: /static/style/sys_files/index.js, /assets/js/message.js \| Codes: 200(2x) \| F2 ... show more Web Scan (L7) \| Paths: /static/style/sys_files/index.js, /assets/js/message.js \| Codes: 200(2x) \| F2B/angie-honeypot@2026-06-02T19:07:54Z show less	Bad Web Bot Web App Attack Hacking
Anonymous	2026-06-02 16:10:13 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 big-cloud.nl	2026-06-02 11:41:18 (2 days ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇳🇱 Ed_Infrared	2026-06-02 08:57:20 (2 days ago)	2026-06-02 10:57:19,060 fail2ban.filter [1351]: INFO [forgejo] Found 155.2.228.196 - 2026 ... show more 2026-06-02 10:57:19,060 fail2ban.filter [1351]: INFO [forgejo] Found 155.2.228.196 - 2026-06-02 10:57:18 2026-06-02 10:57:19,661 fail2ban.filter [1351]: INFO [forgejo] Found 155.2.228.196 - 2026-06-02 10:57:19 2026-06-02 10:57:19,661 fail2ban.filter [1351]: INFO [forgejo] Found 155.2.228.196 - 2026-06-02 10:57:19 ... show less	Brute-Force
🇳🇱 ConsulHosting	2026-06-01 22:36:17 (2 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 ELYAZ	2026-06-01 21:54:52 (2 days ago)	(y3) Failed access -byebye- from 155.2.228.196 (CH/Switzerland/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-01 21:52:09 (2 days ago)	Reported from Nginx log analysis 6. Log: 155.2.228.196 - - [01/Jun/2026:xx:xx:xx 0200] "GET / HTTP/ ... show more Reported from Nginx log analysis 6. Log: 155.2.228.196 - - [01/Jun/2026:xx:xx:xx 0200] "GET / HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36" "-" "CH Switzerland Dietikon" "AS8758" "Iway AG" show less	Port Scan Brute-Force SSH
🇫🇮 as211431.net	2026-06-01 20:07:49 (2 days ago)	Triggered Cloudflare WAF (ratelimit) from CH. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endp ... show more Triggered Cloudflare WAF (ratelimit) from CH. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /assets/js/message.js UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-01 20:00:20 (2 days ago)	155.2.228.196 - - [01/Jun/2026:22:00:19 +0200] "GET /css/support_parent.css HTTP/1.1" 404 503 "-" "M ... show more 155.2.228.196 - - [01/Jun/2026:22:00:19 +0200] "GET /css/support_parent.css HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36" ... show less	Web App Attack
🇮🇹 sssrit	2026-06-01 18:27:22 (2 days ago)	155.2.228.196 - - [01/Jun/2026:20:27:21 +0200] "GET /assets/js/auth.js HTTP/2.0" 404 5310 "-" "Mozil ... show more 155.2.228.196 - - [01/Jun/2026:20:27:21 +0200] "GET /assets/js/auth.js HTTP/2.0" 404 5310 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36" ... show less	Web App Attack
🇩🇪 webanyone	2026-06-01 15:30:21 (3 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.36

🇺🇸 20.96.179.87

🇰🇪 196.216.85.237

🇺🇸 195.184.76.162

🇳🇱 192.142.24.39

🇺🇸 185.152.66.173

🇭🇰 152.32.129.110

🇵🇰 139.135.40.194

🇨🇳 110.40.200.115

🇺🇸 108.165.20.123

🇷🇺 81.177.101.45

🇩🇪 64.89.163.235

🇭🇰 43.128.60.40

🇨🇦 37.120.237.223

🇺🇸 18.119.209.50

🇺🇸 165.154.173.35

🇺🇸 162.216.150.234

🇧🇬 78.128.112.6

🇳🇱 45.198.224.5

🇬🇧 35.203.210.100