JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.226.56.168

185.226.56.168 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	LM Layer and Mesh AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS400909
Domain Name	fiberdirekt.se
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.226.56.168

Whois 185.226.56.168

IP Abuse Reports for 185.226.56.168:

This IP address has been reported a total of 11 times from 6 distinct sources. 185.226.56.168 was first reported on January 19th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Brian	2026-04-08 20:29:00 (4 months ago)	185.226.56.168	SQL Injection
🇺🇸 TPI-Abuse	2026-01-21 11:05:56 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 06:05:52.221218 2026] [security2:error] [pid 30271:tid 30271] [client 185.226.56.168:55713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.footballxp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.footballxp.com"] [uri "/kyc-aml-policy/"] [unique_id "aXCzEH75bCFrW3II2Nv_sgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-21 02:04:55 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 21:04:50.223020 2026] [security2:error] [pid 20998:tid 20998] [client 185.226.56.168:58531] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.aktkaro.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.aktkaro.com"] [uri "/pwTHEART2/about.php"] [unique_id "aXA0QgptbGebpRz_onZwoAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-21 00:41:41 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 19:41:14.952251 2026] [security2:error] [pid 32528:tid 32528] [client 185.226.56.168:52119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|chinookdrivingacademy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chinookdrivingacademy.com"] [uri "/Contract_For_Life.htm"] [unique_id "aXAgqlYrpYs-DvsrBcZwPwAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 23:54:03 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 18:53:55.939920 2026] [security2:error] [pid 10477:tid 10477] [client 185.226.56.168:46959] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cauchosindustrialesespeciales.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cauchosindustrialesespeciales.com"] [uri "/"] [unique_id "aXAVk4AhWHtLAPWSL5l-HgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-01-20 23:41:59 (7 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇫🇷 Dechavanne	2026-01-20 19:00:04 (7 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 18:45:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 13:45:02.528127 2026] [security2:error] [pid 392726:tid 392743] [client 185.226.56.168:33537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adultbaja.com"] [uri "/.env"] [unique_id "aW_NLvFo96XyHXSRcglZUgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 01:34:36 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 185.226.56.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 20:34:15.133378 2026] [security2:error] [pid 24411:tid 24485] [client 185.226.56.168:42977] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.seips.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.seips.org"] [uri "/viewitem.php"] [unique_id "aW7bl7X3eOkUxb8GjOS55AAAAc0"], referer: http://www.seips.org/viewitem.php?ID=421+AND+0+IN+%28SELECT+CAST%28%40%40VERSION+AS+NVARCHAR%284000%29%29+%2B+%27%27%29 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-19 22:00:05 (7 months ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Hacking SQL Injection Web App Attack
🇱🇻 garmtech.com	2026-01-19 21:35:40 (7 months ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.79

🇺🇸 205.169.39.4

🇹🇼 198.235.24.88

🇬🇧 195.224.203.50

🇮🇳 180.188.253.150

🇪🇸 161.22.45.81

🇨🇱 159.112.138.47

🇺🇸 104.168.90.90

🇧🇩 103.162.209.59

🇺🇸 91.193.232.62

🇱🇹 62.60.130.201

🇺🇸 52.91.24.24

🇺🇸 43.130.79.67

🇺🇸 35.150.165.159

🇬🇷 31.217.179.113

🇬🇷 31.217.179.49

🇱🇰 220.247.224.226

🇩🇪 212.132.120.41

🇩🇪 195.37.190.88

🇦🇷 190.113.161.241