JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.239.198.56

156.239.198.56 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	Cloud Innovation Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS17561
Domain Name	cloudinnovation.org
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.239.198.56

Whois 156.239.198.56

IP Abuse Reports for 156.239.198.56:

This IP address has been reported a total of 9 times from 4 distinct sources. 156.239.198.56 was first reported on July 31st 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-11 22:39:49 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 17:39:44.452618 2026] [security2:error] [pid 139980:tid 139980] [client 156.239.198.56:60766] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.passy.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.passy.us"] [uri "/wp-login.php"] [unique_id "aY0FMG7tNHPB0sKzmlgmYwAAABg"], referer: http://passy.us/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-01-17 21:08:54 (4 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2026-01-01 23:39:21 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 18:39:16.592453 2026] [security2:error] [pid 1837:tid 1837] [client 156.239.198.56:53362] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|insidepublications.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "insidepublications.com"] [uri "/wp-login.php"] [unique_id "aVcFpCPU7A58bpbISRxfswAAAAw"], referer: http://insidepublications.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-17 06:18:09 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 01:18:02.202026 2025] [security2:error] [pid 30348:tid 30348] [client 156.239.198.56:51422] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.humbliaslaw.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.humbliaslaw.com"] [uri "/wp-login.php"] [unique_id "aUJLGoXiC_XJzMvRtpHhjQAAAAA"], referer: http://www.humbliaslaw.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 00:23:51 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 19:23:45.236122 2025] [security2:error] [pid 22717:tid 22717] [client 156.239.198.56:30326] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|disio.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "disio.com"] [uri "/wp-login.php"] [unique_id "aTTJEaMYomLNnU2FUlJpswAAAAg"], referer: http://disio.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-11-28 22:05:09 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-23 23:51:53 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 18:51:46.359503 2025] [security2:error] [pid 6130:tid 6130] [client 156.239.198.56:42507] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.accommodation-perthairport.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.accommodation-perthairport.com"] [uri "/wp-login.php"] [unique_id "aSOeEollPlXBTxqojKZyigAAAB4"], referer: http://accommodation-perthairport.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-05 21:05:26 (10 months ago)	Attempted brute force login to web vpn 61 time(s); last attempt for 2025.08.05 is noted in report ti ... show more Attempted brute force login to web vpn 61 time(s); last attempt for 2025.08.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-07-31 19:43:09 (10 months ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.07.31 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.07.31 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.170.150.247

🇺🇸 146.235.195.46

🇨🇦 142.44.225.112

🇮🇳 117.223.152.94

🇧🇬 91.191.209.198

🇬🇧 87.236.176.170

🇨🇦 85.217.149.69

🇺🇸 47.253.11.8

🇵🇱 46.203.196.162

🇺🇸 38.154.206.53

🇺🇸 18.221.179.104

🇨🇳 221.233.30.68

🇩🇪 103.241.51.126

🇱🇹 62.60.130.231

🇺🇸 54.157.84.74

🇺🇸 38.34.175.146

🇷🇺 176.77.61.21

🇨🇱 136.248.242.166

🇨🇳 125.39.148.106

🇫🇷 82.29.210.86