JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.254.40.92

155.254.40.92 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 14%: ?

14%

ISP	SYN LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50077
Domain Name	syn.one
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.254.40.92

Whois 155.254.40.92

IP Abuse Reports for 155.254.40.92:

This IP address has been reported a total of 42 times from 12 distinct sources. 155.254.40.92 was first reported on May 18th 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-09-01 21:14:11 (10 hours ago)	[TueSep0123:14:05.2383892026][security2:error][pid524788:tid524838][client155.254.40.92:0]ModSecurit ... show more [TueSep0123:14:05.2383892026][security2:error][pid524788:tid524838][client155.254.40.92:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"webdisk.gmint.ch\"][uri\"/.well-known/farcaster.json\"][unique_id\"apdAHSqQjl8JsPa9DOrRCwAAAE4\"] show less	Port Scan Brute-Force Web App Attack
🇹🇼 tyetriiix	2026-08-27 04:18:58 (6 days ago)	Wazuh Alert Evidence: 155.254.40.92 - - [27/Aug/2026:04:18:56 +0000] "GET /.well-known/farcaster.jso ... show more Wazuh Alert Evidence: 155.254.40.92 - - [27/Aug/2026:04:18:56 +0000] "GET /.well-known/farcaster.json HTTP/1.1" 404 134 "-" "Python/3.10 aiohttp/3.8.4" "-" Origin: "-" CORS_Header: "" Sent_allow_origin: "" show less	Web App Attack
🇹🇼 tyetriiix	2026-08-06 22:27:55 (3 weeks ago)	Wazuh Alert Evidence: 155.254.40.92 - - [06/Aug/2026:22:27:52 +0000] "GET /.well-known/farcaster.jso ... show more Wazuh Alert Evidence: 155.254.40.92 - - [06/Aug/2026:22:27:52 +0000] "GET /.well-known/farcaster.json HTTP/1.1" 404 124 "-" "Python/3.10 aiohttp/3.8.4" "-" Origin: "-" CORS_Header: "" Sent_allow_origin: "" show less	Web App Attack
🇩🇪 4server	2026-07-02 20:08:20 (1 month ago)	104.164.126.121-dcblockaid[07/02/2026:20:08:05-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhome ... show more 104.164.126.121-dcblockaid[07/02/2026:20:08:05-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryfordcblockaid45.67.220.130-dcblockaid[07/02/2026:20:08:17-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryfordcblockaid144.48.82.14-dcblockaid[07/02/2026:20:07:56-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryfordcblockaid103.4.250.193-dcblockaid[07/02/2026:20:08:00-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryfordcblockaid155.254.40.92-dcblockaid[07/02/2026:20:08:08-0000]\"GET\"FAILEDLOGINcpdavd:CouldnotfetchsystemhomedirectoryfordcblockaidIPAddressesBlocked:104.164.126.121\(US/UnitedStates/-\)45.67.220.130\(DE/Germany/-\)144.48.82.14\(DE/Germany/-\)103.4.250.193\(US/UnitedStates/-\) show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-06-21 21:13:41 (2 months ago)	[SunJun2123:13:37.9247062026][security2:error][pid689619:tid689642][client155.254.40.92:0]ModSecurit ... show more [SunJun2123:13:37.9247062026][security2:error][pid689619:tid689642][client155.254.40.92:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"webmail.gmint.ch\"][uri\"/.well-known/farcaster.json\"][unique_id\"ajhUAW8SvKX2_DN02nF8awAAABQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 Lee Daniel	2026-06-18 14:02:06 (2 months ago)	155.254.40.92 - - [18/Jun/2026:10:02:05 -0400] "GET /user/login%3Fdestination%3D/property/mullins-ba ... show more 155.254.40.92 - - [18/Jun/2026:10:02:05 -0400] "GET /user/login%3Fdestination%3D/property/mullins-bay-6-jasmine HTTP/1.1" 404 56504 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 - - [18/Jun/2026:10:02:05 -0400] "GET /property/%23off-canvas HTTP/1.1" 404 64699 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 - - [18/Jun/2026:10:02:05 -0400] "GET /property/tel%3A%2B12465370864 HTTP/1.1" 404 64752 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 - - [18/Jun/2026:10:02:05 -0400] "GET /user/login%3Fdestination%3D/property/mullins-bay-6-jasmine%23check-reviews HTTP/1.1" 404 56595 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 - - [18/Jun ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇳🇱 DrLex0	2026-06-16 21:46:02 (2 months ago)	Crap requests that makes no sense, coming from various IPs at the same time 155.254.40.92 443 - [16 ... show more Crap requests that makes no sense, coming from various IPs at the same time 155.254.40.92 443 - [16/Jun/2026:21:46:01 +0000] "GET / HTTP/1.1" 301 5508 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 443 - [16/Jun/2026:21:46:01 +0000] "GET /https%3A/www.redacted/ HTTP/1.1" 404 2711 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 443 - [16/Jun/2026:21:46:02 +0000] "GET / HTTP/1.1" 200 7050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
🇫🇷 IRISIO	2026-06-02 08:29:50 (2 months ago)	scans/SQL injection/spam posts : 1 queries	Web App Attack SQL Injection
🇩🇪 Carsten	2026-05-25 07:15:22 (3 months ago)	Bad web bot [Python/3.10 aiohttp/3.8.4]	Bad Web Bot
🇩🇪 Carsten	2026-02-28 05:14:12 (6 months ago)	Bad web bot [Python/3.10 aiohttp/3.8.4]	Bad Web Bot
🇧🇪 DrLex0	2026-02-16 12:44:56 (6 months ago)	Stupid broken requests indicating this crawler was written by a total fucktard 155.254.40.92 443 - ... show more Stupid broken requests indicating this crawler was written by a total fucktard 155.254.40.92 443 - [16/Feb/2026:12:44:56 +0000] "GET [redacted] HTTP/1.1" 404 6029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 443 - [16/Feb/2026:12:44:56 +0000] "GET [redacted] HTTP/1.1" 404 6029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 443 - [16/Feb/2026:12:44:56 +0000] "GET [redacted] HTTP/1.1" 404 6029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 155.254.40.92 443 - [16/Feb/2026:12:44:56 +0000] "GET [redacted] HTTP/1.1" 404 6029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Bad Web Bot
🇺🇸 ipblock.com	2026-01-16 16:15:00 (7 months ago)	IPBlock protected site ID [669-fx]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-01-06 11:15:00 (7 months ago)	magento vulnerability login bot	Fraud Orders Brute-Force Web App Attack
🇨🇭 Origon	2025-12-10 23:38:51 (8 months ago)	http-probing - IP: 155.254.40.92 - time="2025-12-11T00:38:51+01:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 155.254.40.92 - time="2025-12-11T00:38:51+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 155.254.40.92 (NL/50077) : 4h ban on Ip 155.254.40.92" module=db show less	Web App Attack
Anonymous	2025-11-25 14:36:31 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.26

🇩🇪 167.94.145.27

🇨🇳 112.28.153.193

🇫🇷 90.126.6.149

🇨🇳 81.70.104.19

🇦🇺 40.82.214.8

🇬🇧 35.203.211.49

🇵🇭 203.177.36.178

🇳🇱 195.234.109.102

🇺🇸 195.184.76.153

🇨🇴 190.70.97.233

🇮🇩 182.8.131.85

🇹🇼 110.25.107.25

🇫🇷 91.196.152.120

🇷🇺 80.234.43.21

🇩🇪 69.5.169.193

🇩🇪 69.5.169.180

🇩🇪 69.5.169.168

🇰🇼 62.150.237.107

🇨🇭 34.65.66.230