JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.212.108.121

155.212.108.121 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 24%: ?

24%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.212.108.121

Whois 155.212.108.121

IP Abuse Reports for 155.212.108.121:

This IP address has been reported a total of 11 times from 7 distinct sources. 155.212.108.121 was first reported on January 18th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 www.winos.me	2026-08-28 04:32:12 (16 hours ago)	Scanning for sensitive files/paths: /xmlrpc.php	Hacking Web App Attack
🇮🇹 mgarofano80	2026-08-26 02:33:17 (2 days ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 20:42:27 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 155.212.108.121 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 155.212.108.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 16:42:19.554008 2026] [security2:error] [pid 686257:tid 686364] [client 155.212.108.121:22041] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sattraffic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sattraffic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amkUK065d-a8hY0Bp93lZwAAAVc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 DRI	2026-07-28 01:14:59 (1 month ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 02:10:40 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 155.212.108.121 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 155.212.108.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 22:10:31.967122 2026] [security2:error] [pid 26013:tid 26013] [client 155.212.108.121:41421] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hamson.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hamson.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alwyF-qzWIxnxjqZXG_mnAAAABc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-05-16 16:42:01 (3 months ago)	block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-10 15:03:56 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 155.212.108.121 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 155.212.108.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 11:03:50.060390 2026] [security2:error] [pid 10978:tid 10978] [client 155.212.108.121:56335] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|phoneresponse.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "phoneresponse.com"] [uri "/"] [unique_id "agCeVuwSVSHOX3MNSK1YwwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-02-06 23:10:27 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.108.121 (ES/Spain/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.108.121 (ES/Spain/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇪🇸 10dencehispahard SL	2026-01-28 06:53:03 (7 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇫🇷 masterguru	2026-01-18 14:30:45 (7 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.108.121 (ES/Spain/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.108.121 (ES/Spain/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-01-18 14:15:06 (7 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.108.121 (ES/Spain/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.108.121 (ES/Spain/-): 1 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:986:1000:845d:70d:4eb0:ac1b

🇳🇱 178.224.53.154

🇷🇺 147.45.211.26

🇺🇸 134.209.215.49

🇹🇭 101.51.157.107

🇫🇷 85.217.140.42

🇳🇱 85.136.182.85

🇺🇸 18.234.87.137

🇳🇱 195.178.110.30

🇭🇰 150.109.48.34

🇰🇿 95.58.255.251

🇺🇸 52.12.102.61

🇳🇱 45.148.10.238

🇬🇧 35.203.211.103

🇺🇸 34.171.91.11

🇫🇮 2.26.136.243

🇺🇸 192.178.65.21

🇷🇺 178.178.222.58

🇷🇺 178.178.194.123

🇨🇷 172.69.167.151