JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.155.152.91

202.155.152.91 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 96%: ?

96%

ISP	RWIPXO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36530
Domain Name	ipxo.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.155.152.91

Whois 202.155.152.91

IP Abuse Reports for 202.155.152.91:

This IP address has been reported a total of 32 times from 21 distinct sources. 202.155.152.91 was first reported on August 1st 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Tsumugi Kotobuki	2026-07-15 19:33:17 (8 hours ago)	Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 234 \| Len: 44B ... show more Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 234 \| Len: 44B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-07-15T19:33:17Z show less	Port Scan Hacking
🇩🇪 phil2k	2026-07-14 19:02:40 (1 day ago)	portscan on multiple TCP ports : Firewall: Within 2026-07-13 07:14:33 - 2026-07-13 13:57:54 CEST(+02 ... show more portscan on multiple TCP ports : Firewall: Within 2026-07-13 07:14:33 - 2026-07-13 13:57:54 CEST(+0200) identified: port scan from 202.155.152.91/32 on uncommon port/s: 2095(tcp:2095),8090(tcp:8090),2086(gnunet),8000(tcp:8000) (4 trials) Fail2ban: Within 2026-07-13 07:14:33 - 2026-07-13 13:57:54 CEST(+0200) banned: 9 times by fail2ban[firewall]; 9 times by fail2ban[recidive] show less	Port Scan
🇩🇪 phil2k	2026-07-13 11:57:58 (2 days ago)	fail2ban:recidive:2026-07-13 08:49:57,037 fail2ban.actions [1023507]: NOTICE [firewall] Ban ... show more fail2ban:recidive:2026-07-13 08:49:57,037 fail2ban.actions [1023507]: NOTICE [firewall] Ban 202.155.152.91 2026-07-13 13:57:54,455 fail2ban.actions [1023507]: NOTICE [firewall] Ban 202.155.152.91 show less	DDoS Attack Port Scan Brute-Force
🇸🇰 KZP	2026-07-13 11:00:15 (2 days ago)	Automatic report from KZP firewall log.	Port Scan Hacking Brute-Force
🇫🇷 dusfor72	2026-07-13 07:09:54 (2 days ago)	aggressive portscan ...	Port Scan
🇩🇪 phil2k	2026-07-13 06:49:58 (2 days ago)	fail2ban:firewall:2026-07-13T07:14:33.626726+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-07-13T07:14:33.626726+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=202.155.152.91 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x20 TTL=238 ID=4541 PROTO=TCP SPT=59037 DPT=2095 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-13T08:49:56.654321+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=202.155.152.91 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x20 TTL=238 ID=34703 PROTO=TCP SPT=59037 DPT=8090 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇬🇧 pearbright	2026-07-12 14:40:32 (3 days ago)	2026-07-12T14:18:34.126480+00:00 srv1791811 kernel: [1134992.461105] [UFW BLOCK] IN=eth0 OUT= MAC=64 ... show more 2026-07-12T14:18:34.126480+00:00 srv1791811 kernel: [1134992.461105] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=202.155.152.91 DST=76.13.255.190 LEN=40 TOS=0x1C PREC=0xE0 TTL=238 ID=46927 PROTO=TCP SPT=42600 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-12T14:23:33.536465+00:00 srv1791811 kernel: [1135291.871046] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=202.155.152.91 DST=76.13.255.190 LEN=40 TOS=0x1C PREC=0xE0 TTL=238 ID=35174 PROTO=TCP SPT=42600 DPT=9443 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-12T14:27:57.673525+00:00 srv1791811 kernel: [1135556.008730] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=202.155.152.91 DST=76.13.255.190 LEN=40 TOS=0x1C PREC=0xE0 TTL=238 ID=13566 PROTO=TCP SPT=42600 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-12T14:32:58.397959+00:00 srv1791811 kernel: [1135856.733519] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=202.155.15 ... show less	Port Scan
🇺🇸 arqueiro	2026-07-12 14:13:49 (3 days ago)	Port scan: IP 202.155.152.91 tentou 6 portas distintas ([5001, 8082, 8388, 9443, 10000, 40000]) em 1 ... show more Port scan: IP 202.155.152.91 tentou 6 portas distintas ([5001, 8082, 8388, 9443, 10000, 40000]) em 10min. show less	Port Scan
🇺🇸 micropedro	2026-07-12 13:27:47 (3 days ago)	5 incidents: web scanning/attack, port scanning. First: 2026-07-12 09:24, Last: 2026-07-12 09:27 UTC ... show more 5 incidents: web scanning/attack, port scanning. First: 2026-07-12 09:24, Last: 2026-07-12 09:27 UTC. Triggers: port-trap,non-public-port,firewall-http,non-public-port,firewall-tcp. show less	Port Scan Web App Attack
🇩🇪 EinfxchFinn	2026-07-08 22:20:50 (1 week ago)	Unauthorized connection attempt to port 2083 from 202.155.152.91	Port Scan
🇩🇪 sbajic	2026-07-08 21:19:25 (1 week ago)	...	Brute-Force
🇫🇮 mikethemagic	2026-07-08 21:01:47 (1 week ago)	2026-07-08 19:00:41,361 fail2ban.actions [3555564]: NOTICE [threat-detection] Ban 202.155.15 ... show more 2026-07-08 19:00:41,361 fail2ban.actions [3555564]: NOTICE [threat-detection] Ban 202.155.152.91 2026-07-08 21:01:07,513 fail2ban.actions [3555564]: NOTICE [threat-detection] Ban 202.155.152.91 ... show less	Brute-Force
🇫🇮 kumiko	2026-07-08 20:34:34 (1 week ago)	[2026-07-08 23:34:33] Unauthorized port scan/probing (3 times on ports 2052, 10808, 60000) Blocked ... show more [2026-07-08 23:34:33] Unauthorized port scan/probing (3 times on ports 2052, 10808, 60000) Blocked by UFW show less	Port Scan
🇩🇪 EinfxchFinn	2026-07-08 20:01:53 (1 week ago)	Unauthorized connection attempt to port 9090 from 202.155.152.91	Port Scan
🇩🇪 ValtonTahiri	2026-07-08 19:58:33 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=202.155.152.91; proto=TCP; source_port=51089; target_port=54321; flags=SYN show less	Port Scan

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.212

🇳🇱 185.189.182.234

🇵🇱 166.88.23.7

🇳🇬 152.32.142.86

🇺🇸 151.246.219.219

🇭🇰 104.208.92.111

🇫🇷 91.231.89.205

🇳🇴 87.120.104.75

🇺🇸 66.132.172.238

🇺🇸 65.49.1.34

🇸🇦 51.36.232.210

🇱🇹 45.227.254.170

🇸🇬 45.82.78.106

🇨🇳 14.103.122.180

🇬🇧 2.57.17.192

🇨🇳 210.13.99.66

🇧🇷 191.242.78.10

🇺🇸 162.216.150.91

🇺🇸 162.216.149.14

🇫🇮 147.185.133.202