JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.212.39.199

155.212.39.199 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 11%: ?

11%

ISP	Fine Group Servers Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.212.39.199

Whois 155.212.39.199

IP Abuse Reports for 155.212.39.199:

This IP address has been reported a total of 19 times from 8 distinct sources. 155.212.39.199 was first reported on November 13th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-07-18 19:28:40 (5 days ago)	(XMLRPC) WP XMLRPC Attack 155.212.39.199 (DE/Germany/Hesse/Frankfurt am Main/-/[AS43444 BNS-AS]): 1 ... show more (XMLRPC) WP XMLRPC Attack 155.212.39.199 (DE/Germany/Hesse/Frankfurt am Main/-/[AS43444 BNS-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 155.212.39.199 - - [18/Jul/2026:22:28:35 +0300] "POST /xmlrpc.php HTTP/1.1" 503 7311 "-" "Wget/1.21.4" show less	Port Scan
🇫🇷 masterguru	2026-06-18 00:52:03 (1 month ago)	(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 155.212.39.199 (DE/Germany/-): 1 in ... show more (modsec_2000110) ModSec 2000110: Malicious username admlnlx from 155.212.39.199 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-06-07 06:38:40 (1 month ago)	(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 155.212.39.199 (DE/Germany/-): 1 in ... show more (modsec_2000110) ModSec 2000110: Malicious username admlnlx from 155.212.39.199 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-29 09:17:11 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (NL/The Netherlands/-): 1 in th ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-05-19 04:12:44 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 155.212.39.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 155.212.39.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 00:12:37.487109 2026] [security2:error] [pid 2648:tid 2648] [client 155.212.39.199:30009] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gonzalez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agvjNU1v23IlTOKgQcFLRAAAABA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-19 01:42:30 (2 months ago)	Web password guessing	Brute-Force
🇺🇸 nationaleventpros.com	2026-05-14 19:23:38 (2 months ago)	WordPress login attempt	Brute-Force
🇺🇸 kosada.com	2026-04-11 05:29:51 (3 months ago)	Web password guessing	Brute-Force
🇺🇸 kosada.com	2026-03-22 09:16:09 (4 months ago)	Web password guessing	Brute-Force
🇫🇷 masterguru	2026-03-05 07:25:50 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (NL/The Netherlands/-): 1 in th ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (NL/The Netherlands/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-03-05 06:19:49 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (EE/Estonia/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (EE/Estonia/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-03-05 04:25:17 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (EE/Estonia/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (EE/Estonia/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-02-23 15:20:33 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (EE/Estonia/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.39.199 (EE/Estonia/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-01-22 14:37:35 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 155.212.39.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 155.212.39.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 09:37:28.209085 2026] [security2:error] [pid 24364:tid 24364] [client 155.212.39.199:27845] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|doctoredwinalvarez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "doctoredwinalvarez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXI2KLWABi78HJk6ZVozVQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-22 13:01:49 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 155.212.39.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 155.212.39.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 08:01:43.966635 2026] [security2:error] [pid 22018:tid 22050] [client 155.212.39.199:45889] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|duplexgoldmine.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "duplexgoldmine.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIft-iejmNp-BFaIRjZ6AAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.236

🇲🇽 187.170.224.116

🇨🇴 181.79.92.28

🇨🇳 123.14.121.3

🇳🇱 104.28.155.241

🇳🇱 80.79.7.241

🇺🇸 50.17.193.48

🇳🇱 45.148.10.151

🇬🇧 45.133.173.38

🇺🇸 45.3.62.255

🇨🇳 43.248.108.75

🇧🇷 187.12.48.70

🇳🇱 185.226.197.50

🇧🇷 177.66.82.225

🇺🇸 162.216.149.202

🇫🇮 147.185.133.239

🇮🇳 139.5.1.153

🇱🇹 77.90.185.20

🇩🇪 69.5.169.242

🇩🇪 64.89.163.82