JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.53.180

212.56.53.180 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 16%: ?

16%

ISP	VPN Consumer Los Angeles, United States
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4213
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.53.180

Whois 212.56.53.180

IP Abuse Reports for 212.56.53.180:

This IP address has been reported a total of 13 times from 8 distinct sources. 212.56.53.180 was first reported on May 24th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-06-19 17:43:18 (1 week ago)	2026-06-19 @ 19:43:18 (CET) ~ Blocked for trying to access: /include/file.php	Web App Attack
🇫🇷 tilellit.pro	2026-06-16 06:59:27 (2 weeks ago)	Fail2Ban banned 212.56.53.180 for security violations in jail wp-armour. Log: 2026/06/16 06:59:26 [e ... show more Fail2Ban banned 212.56.53.180 for security violations in jail wp-armour. Log: 2026/06/16 06:59:26 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 212.56.53.180 \| Target: wplogin" , client: 212.56.53.180, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED] ... show less	Web Spam
Anonymous	2026-05-14 07:08:47 (1 month ago)	tls scan	Port Scan
🇦🇺 oncord	2026-02-23 04:09:48 (4 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-01-29 23:57:30 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 18:57:24.072260 2026] [security2:error] [pid 17475:tid 17475] [client 212.56.53.180:14840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|keithwillwynne.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "keithwillwynne.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXvz5HJ4Qzun3v2Bk8gW_gAAABE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 11:37:34 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 06:37:30.177671 2026] [security2:error] [pid 22215:tid 22215] [client 212.56.53.180:23210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lekacos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lekacos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXtGenjAgB5Xb3u3QLOUOAAAABc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 11:15:30 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 06:15:23.001574 2026] [security2:error] [pid 1033965:tid 1033965] [client 212.56.53.180:49106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXtBSoSTQsE2UtJJzsE7BAAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kimax	2026-01-15 22:33:19 (5 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇺🇸 TPI-Abuse	2025-11-06 18:37:08 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 13:37:03.737997 2025] [security2:error] [pid 27066:tid 27066] [client 212.56.53.180:33946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ammatusk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ammatusk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQzqz33ovkCbFYHgk29ybwAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-11-06 17:15:03 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-06 13:00:30 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 08:00:21.016212 2025] [security2:error] [pid 25455:tid 25455] [client 212.56.53.180:10247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gangnagel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gangnagel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQyb5WAlfl6KaaVLZ_DC4wAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-06 10:53:58 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.53.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 05:53:53.133179 2025] [security2:error] [pid 32403:tid 32403] [client 212.56.53.180:52654] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|comunicacion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "comunicacion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQx-QTE4HNfdc7VeJIljBQAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2025-05-24 01:16:53 (1 year ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880:a000::bd

🇬🇧 193.163.125.105

🇩🇪 192.250.229.40

🇫🇷 89.159.136.43

🇺🇸 67.207.93.64

🇳🇱 45.148.10.59

🇸🇬 4.193.115.79

🇺🇸 2a04:c300:400::132

🇬🇧 217.39.53.55

🇺🇸 216.73.216.36

🇧🇷 200.216.246.30

🇧🇷 177.160.136.132

🇧🇷 168.90.211.134

🇻🇳 160.22.170.237

🇺🇸 119.12.191.188

🇧🇩 103.213.238.91

🇮🇳 103.176.16.30

🇮🇳 103.173.244.249

🇷🇺 94.247.63.116

🇺🇸 52.186.182.85