JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.228.182.42

156.228.182.42 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS17561
Domain Name	cloudinnovation.org
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.228.182.42

Whois 156.228.182.42

IP Abuse Reports for 156.228.182.42:

This IP address has been reported a total of 30 times from 12 distinct sources. 156.228.182.42 was first reported on October 5th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-29 18:25:51 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 29 14:25:46.680687 2025] [security2:error] [pid 7068:tid 7068] [client 156.228.182.42:16847] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|walkerweb.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "walkerweb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aNrPKt7vWxfwq0ne4qdigQAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Carsten	2025-09-11 19:15:15 (9 months ago)	GET [config.php%7C/.env%7Csettings.py]	Port Scan
🇺🇸 TPI-Abuse	2025-09-07 03:48:19 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 23:48:15.970383 2025] [security2:error] [pid 3945:tid 3945] [client 156.228.182.42:38687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clowaterart.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aL0AfzWF4NyGGEdPPIOZfQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-07 01:48:11 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 21:48:05.285234 2025] [security2:error] [pid 2658420:tid 2658435] [client 156.228.182.42:26927] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.deutschlandtickets-de.online.djkirby.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.deutschlandtickets-de.online.djkirby.com"] [uri "/s3cmd.ini"] [unique_id "aLzkVQ6AWwQTGDCUrKgFOAAAAM0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-06 08:46:31 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 04:46:26.159020 2025] [security2:error] [pid 30862:tid 30862] [client 156.228.182.42:34737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.mosherpit.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aLv04uJ-zAexRg9iCf5YaQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 findlab	2025-06-24 00:00:05 (11 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-03-24 15:46:49 (1 year ago)	(From [email protected]) Dear northshorechiropractic.com Webmaster Are you ready to take ... show more (From [email protected]) Dear northshorechiropractic.com Webmaster Are you ready to take control of your Google Maps Rankings and boost your business visibility? Would you like to learn more about our "Google Maps Ranking" service and how it can help you secure a top spot in local search results, attract more customers, and stand out from the competition? Let us know, and we’ll share all the details with you! Reply to this email, and I'll be happy to share more details with you. Best regards, Bryan Laseron Italy, CE, Gricignano Di Aversa, 81030, Via Cavour 104 To stop any further communication through your website form, Please reply with subject: Unsubscribe !northshorechiropractic.com show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-19 06:59:48 (1 year ago)	(From [email protected]) Hi wittnerchiro.com Owner Are you ready to take control of your ... show more (From [email protected]) Hi wittnerchiro.com Owner Are you ready to take control of your Google Maps Rankings and boost your business visibility? Would you like to learn more about our "Google Maps Ranking" service and how it can help you secure a top spot in local search results, attract more customers, and stand out from the competition? Let us know, and we’ll share all the details with you! Reply to this email, and I'll be happy to share more details with you. Best regards, Jonas Gilruth Italy, PA, Santa Cristina Gela, 90030, Via Genova 79 To stop any further communication through your website form, Please reply with subject: Unsubscribe !wittnerchiro.com show less	Phishing Web Spam
🇦🇺 MAGIC	2025-03-16 14:05:44 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇵🇱 sefinek.net	2025-03-12 12:00:58 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE ASN: 200373 (DREI ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE ASN: 200373 (DREI-K-TECH-GMBH) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-03-12T10:22:20Z Ray ID: 91f291e04914711d UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2025-03-07 03:07:47 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-03-04 23:47:02 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 156.228.182.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 18:46:56.921191 2025] [security2:error] [pid 3732391:tid 3732391] [client 156.228.182.42:24023] [client 156.228.182.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/usage_202503.html"] [unique_id "Z8eQ8PmRdttpWXiFPCCIAwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-01-25 11:42:08 (1 year ago)	(From [email protected]) Hi wittnerchiro.com Webmaster	Phishing Web Spam
Anonymous	2024-12-30 06:37:58 (1 year ago)	Attempted brute force login to web vpn 14 time(s); last attempt for 2024.12.30 is noted in report ti ... show more Attempted brute force login to web vpn 14 time(s); last attempt for 2024.12.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2024-12-24 08:26:54 (1 year ago)	Trawling for Open Source CMS installs	Hacking Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.76.241.18

🇨🇴 181.129.31.42

🇮🇳 122.161.245.16

🇳🇱 45.156.87.216

🇩🇴 38.191.88.241

🇺🇸 13.89.125.22

🇱🇰 220.247.247.150

🇨🇴 200.189.27.76

🇭🇺 185.189.114.116

🇺🇸 162.216.150.35

🇪🇸 151.237.57.13

🇹🇷 91.241.49.92

🇫🇷 91.231.89.53

🇮🇳 61.95.198.38

🇰🇷 59.16.212.232

🇺🇸 52.165.82.6

🇧🇷 45.164.251.106

🇮🇩 43.157.248.178

🇯🇵 40.74.68.248

🇰🇼 37.34.237.45