JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.155.152.192

216.155.152.192 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	Vultr Holdings, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	216.155.152.192.vultrusercontent.com
Domain Name	vultr.com
Country	🇺🇸 United States of America
City	Piscataway, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.155.152.192

Whois 216.155.152.192

IP Abuse Reports for 216.155.152.192:

This IP address has been reported a total of 43 times from 37 distinct sources. 216.155.152.192 was first reported on July 27th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxpower	2026-07-28 23:31:52 (3 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 216.155.152.192 (US/United States/216.15 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 216.155.152.192 (US/United States/216.155.152.192.vultrusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.155.152.192 - - [29/Jul/2026:01:31:42 +0200] "GET /.aws/credentials HTTP/1.1" 404 10392 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" host=51.89.2.97 show less	Port Scan
🇳🇱 homeshowdomain.nl	2026-07-28 22:02:47 (4 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-27. show less	Web App Attack SSH Hacking
🇺🇸 HamSammich	2026-07-28 21:41:18 (5 hours ago)	Automated sensor: 113 HTTP, HTTPS connection/probe attempts over the last 24h (latest 2026-07-28T21: ... show more Automated sensor: 113 HTTP, HTTPS connection/probe attempts over the last 24h (latest 2026-07-28T21:41Z). show less	Brute-Force Web App Attack
🇨🇳 WMK965	2026-07-28 20:48:24 (6 hours ago)	216.155.152.192 - - [29/Jul/2026:04:48:23 +0800] "GET /.env.dev HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Li ... show more 216.155.152.192 - - [29/Jul/2026:04:48:23 +0800] "GET /.env.dev HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Mobile Safari/537.36" "-" 216.155.152.192 - - [29/Jul/2026:04:48:23 +0800] "GET /app/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0" "-" 216.155.152.192 - - [29/Jul/2026:04:48:23 +0800] "GET /server/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Mobile Safari/537.36" "-" show less	Port Scan Web App Attack
🇧🇪 voormedia	2026-07-28 20:10:09 (6 hours ago)	Accessed trap at '/.git/config'	Web App Attack
🇮🇪 AutosOnShow	2026-07-28 19:57:04 (6 hours ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-07-28 19:56:25.534 \|	Web App Attack
🇩🇪 s@ch@	2026-07-28 19:15:01 (7 hours ago)	Jail: plesk-modsecurity \| Web application attack (Plesk ModSecurity)	Web App Attack
🇩🇪 sdos.es	2026-07-28 16:25:58 (10 hours ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env.bkp"	Web App Attack
🇨🇦 Bots.go.to.hell	2026-07-28 15:41:20 (11 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-07-28 11:51:12 (15 hours ago)	[Tue Jul 28 14:51:10.327301 2026] [authz_core:error] [pid 28129] [client 216.155.152.192:37708] AH01 ... show more [Tue Jul 28 14:51:10.327301 2026] [authz_core:error] [pid 28129] [client 216.155.152.192:37708] AH01630: client denied by server configuration: /var/www/html/.npmrc [Tue Jul 28 14:51:10.345786 2026] [authz_core:error] [pid 28127] [client 216.155.152.192:37802] AH01630: client denied by server configuration: /var/www/html/.envrc [Tue Jul 28 14:51:10.347986 2026] [authz_core:error] [pid 28131] [client 216.155.152.192:37722] AH01630: client denied by server configuration: /var/www/html/.git show less	Bad Web Bot
🇫🇷 Baking333	2026-07-28 10:09:56 (16 hours ago)	[redacted] 216.155.152.192 - - [28/Jul/2026:11:09:54 +0100] "GET /app/.env HTTP/1.1" 307 379 "-" "Mo ... show more [redacted] 216.155.152.192 - - [28/Jul/2026:11:09:54 +0100] "GET /app/.env HTTP/1.1" 307 379 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" [redacted] 216.155.152.192 - - [28/Jul/2026:11:09:54 +0100] "GET /config/.env HTTP/1.1" 307 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" show less	Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-07-28 08:04:46 (18 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 216.155.152.192 (US/United States/216.1 ... show more (mod_security) mod_security triggered on hostname [redacted] 216.155.152.192 (US/United States/216.155.152.192.vultrusercontent.com): (CF_ENABLE) show less	SQL Injection
Anonymous	2026-07-28 07:21:00 (19 hours ago)	657 malicious request(s) between 2026-07-27 - 2026-07-28 (JST, UTC+9). Probed for: exposed .env fil ... show more 657 malicious request(s) between 2026-07-27 - 2026-07-28 (JST, UTC+9). Probed for: exposed .env files, nonexistent/suspicious paths, configuration files, credential files (.aws/id_rsa/keys), .git repository files, WordPress endpoints, backup archives, RCE/CGI exploit attempts. show less	Web App Attack Hacking
🇩🇪 Progetto1	2026-07-28 06:54:01 (19 hours ago)	Detected via HAProxyScanner at 2026-07-28 06:54:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-07-28 06:54:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇩🇪 v1nc	2026-07-28 06:52:02 (19 hours ago)	216.155.152.192 - - [28/Jul/2026:06:52:01 +0000] "GET /configuration.php HTTP/1.1" 301 162 "-" "Mozi ... show more 216.155.152.192 - - [28/Jul/2026:06:52:01 +0000] "GET /configuration.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" ... show less	Hacking

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.234.199.75

🇳🇱 203.55.131.4

🇳🇱 193.176.31.198

🇷🇴 193.32.162.42

🇳🇱 185.242.226.85

🇨🇴 181.119.204.181

🇺🇸 104.167.25.5

🇹🇷 94.154.43.99

🇳🇱 81.19.216.88

🇺🇸 20.163.60.199

🇧🇷 196.18.166.59

🇳🇱 188.166.99.91

🇧🇷 179.93.11.59

🇧🇷 164.163.225.204

🇨🇳 150.158.29.138

🇫🇮 147.185.133.119

🇧🇬 79.124.62.134

🇺🇸 47.251.142.244

🇬🇧 35.203.210.233

🇩🇪 213.209.159.11