This IP address has been reported a total of
48
times from
8 distinct
sources.
156.242.44.55 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.14 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.09.14 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.09.12 is noted in report tim ...
show moreAttempted brute force login to web vpn 4 time(s); last attempt for 2025.09.12 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.11 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.09.11 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.08 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.09.08 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.07 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.09.07 is noted in report timestamp
show less
(mod_security) mod_security (id:210350) triggered by 156.242.44.55 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:210350) triggered by 156.242.44.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 04:48:13.168133 2025] [security2:error] [pid 26282:tid 26282] [client 156.242.44.55:39129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||192.64.150.220:443|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "192.64.150.220"] [uri "/"] [unique_id "aLlSTeqbMYsahg6S9calEAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Credential stuffing on VPN endpoint
Brute-Force
Anonymous
Credential stuffing on VPN endpoint
Brute-Force
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.02 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.09.02 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.08.31 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.08.31 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.08.30 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.08.30 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.08.26 is noted in report tim ...
show moreAttempted brute force login to web vpn 4 time(s); last attempt for 2025.08.26 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Dictionary attack on Palo Alto GlobalProtect VPN portal (port 443) detected via repeated login failu ...
show moreDictionary attack on Palo Alto GlobalProtect VPN portal (port 443) detected via repeated login failures with varying usernames.
show less
Brute-Force
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.08.25 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.08.25 is noted in report timestamp
show less
Hacking
Brute-Force
Showing 1 to
15
of 48 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩