JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 99.155.75.155

99.155.75.155 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 49%: ?

49%

ISP	AT&T Enterprises, LLC
Usage Type	Mobile ISP
ASN	AS7018
Domain Name	att.com
Country	🇺🇸 United States of America
City	Tulsa, Oklahoma

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 99.155.75.155

Whois 99.155.75.155

IP Abuse Reports for 99.155.75.155:

This IP address has been reported a total of 14 times from 13 distinct sources. 99.155.75.155 was first reported on February 18th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 kk_it_man	2026-10-25 02:16:03 (2 days ago)	hack	Hacking
🇬🇧 Celtic	2026-10-24 22:10:57 (2 days ago)	Blocked by Fail2Ban with Jail (plesk-wordpress)	Brute-Force SSH
🇩🇪 big-cloud.nl	2026-10-24 21:13:46 (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 adlp.org	2026-10-21 21:53:06 (5 days ago)	Oct 21 21:52:59 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;99.155.75.155;;blob@adlp. ... show more Oct 21 21:52:59 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;99.155.75.155;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill Oct 21 21:53:02 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;99.155.75.155;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill Oct 21 21:53:05 nginx-mua ==imap/[email protected]== : TRAKEUR-Out;0;127.0.0.1;99.155.75.155;;[email protected];imap;plain;1;@adlp.org$;10.0.10.2;143;Licence to kill ... show less	Brute-Force
🇨🇦 Mediashaker	2026-10-17 23:09:34 (1 week ago)	99.155.75.155 (US/United States/-), 5 distributed imapd attacks on account [redacted]	Brute-Force
🇺🇸 TPI-Abuse	2026-10-17 08:48:06 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 99.155.75.155 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 99.155.75.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 04:48:01.178460 2026] [security2:error] [pid 11719:tid 11719] [client 99.155.75.155:50620] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|greatchristianadventure.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greatchristianadventure.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atM2QWwnQZlL_8lT08n72QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 14:17:12 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 99.155.75.155 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 99.155.75.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:17:07.059646 2026] [security2:error] [pid 11775:tid 11775] [client 99.155.75.155:59944] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|globalweb123.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "globalweb123.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atIx4_Ws0Rc6EYkESmEMLAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 xveil	2026-10-04 16:32:13 (3 weeks ago)	2026-10-04T23:32:10.883136 mail-honeypot postfix/submission/smtpd[20429]: warning: unknown[99.155.75 ... show more 2026-10-04T23:32:10.883136 mail-honeypot postfix/submission/smtpd[20429]: warning: unknown[99.155.75.155]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇳🇱 Mangelot Hosting	2026-09-30 10:16:04 (3 weeks ago)	(dovecot_invalid_user) srv102 Dovecot login on non-existent account 99.155.75.155 (US/United States/ ... show more (dovecot_invalid_user) srv102 Dovecot login on non-existent account 99.155.75.155 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Sep 30 12:16:00 dovecot[792]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 9 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=99.155.75.155, lip=0.0.0.x, session=<ZlRwlbBcbtdjm0ub> show less	Web App Attack
🇫🇷 dynamix	2026-09-28 22:20:50 (4 weeks ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-01 11:46:10 (1 month ago)	Distributed web scraper targeting /store/filtered/ on www.mywineandspirits.com. Residential proxy - ... show more Distributed web scraper targeting /store/filtered/ on www.mywineandspirits.com. Residential proxy - IP+timestamp provided for ISP DHCP log attribution. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Zkillu	2026-08-19 22:29:22 (2 months ago)	UDP flood (DDoS) vs AS215599: 108 pkts / 0.15 MB to UDP 80/8443 across 91 dst IP(s), 2026-08-19 21:4 ... show more UDP flood (DDoS) vs AS215599: 108 pkts / 0.15 MB to UDP 80/8443 across 91 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 botreporter	2026-06-24 00:07:23 (4 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇮🇹 VHosting	2026-02-18 23:10:44 (8 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.32

🇨🇳 118.186.18.243

🇺🇸 68.183.31.55

🇬🇧 57.128.190.44

🇳🇱 45.148.10.151

🇨🇳 39.105.108.6

🇨🇳 8.155.160.186

🇩🇪 167.94.146.72

🇷🇺 95.31.220.49

🇺🇸 91.230.168.219

🇵🇱 83.24.6.105

🇺🇸 50.6.111.141

🇳🇱 45.148.10.21

🇧🇷 35.198.1.42

🇹🇭 27.254.190.148

🇮🇱 2.55.122.202

🇭🇰 216.118.231.170

🇳🇱 138.226.239.53

🇩🇪 130.12.180.163

🇨🇳 123.13.50.189