AbuseIPDB » 152.56.143.73
152.56.143.73
This IP was reported 4 times. Confidence of
Abuse
is 2% : ?
ISP
Reliance Jio Infocomm Limited
Usage Type
Mobile ISP
ASN
AS55836
Domain Name
jio.com
Country
🇮🇳
India
City
Lucknow, Uttar Pradesh
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 152.56.143.73 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
152.56.143.73 was first reported on
August 30th 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
CoreTech srl
2026-07-23 10:56:35
(1 day ago)
cloudlinux2 fail2ban: 2026-07-23 12:33:51,619 fail2ban.filter [1589]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-23 12:33:51,619 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 135.116.18.122 - 2026-07-23 12:33:50cloudlinux2 fail2ban: 2026-07-23 12:34:17,988 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 152.56.143.73 - 2026-07-23 12:34:17cloudlinux2 fail2ban: 2026-07-23 12:34:23,908 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 103.225.138.118 - 2026-07-23 12:34:23cloudlinux2 fail2ban: 2026-07-23 12:34:24,161 fail2ban.filter [1589]: INFO [recidive] Found 103.225.138.118 - 2026-07-23 12:34:24cloudlinux2 fail2ban: 2026-07-23 12:34:24,154 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 103.225.138.118cloudlinux2 fail2ban: 2026-07-23 12:34:30,246 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 73.138.87.26 - 2026-07-23 12:34:30cloudlinux2 fail2ban: 2026-07-23 12:34:41,548 fail2ban.filter [1589]: INFO [recidive] Found 73.138.87.26 - 2026-07-23 12:34:41cloudlinux2 fail2ban: 2026-07-23 1
show less
Web App Attack
🇺🇸
RAP
2026-05-12 14:26:43
(2 months ago)
2026-05-12 14:26:43 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
2026-05-10 19:18:26
(2 months ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-08-30 11:17:53
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 152.56.143.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 152.56.143.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 07:17:45.228305 2025] [security2:error] [pid 5499:tid 5499] [client 152.56.143.73:53248] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vangentholding.com|F|2"] [data ".yolasite.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vangentholding.com"] [uri "/tag/du-hoc-han-quoc/cohoiduhoc.yolasite.com"] [unique_id "aLLd2f84Ra6eqpRUbvmVoAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: