JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 56.155.140.164

56.155.140.164 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 40%: ?

40%

ISP	Amazon Data Services Osaka
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-56-155-140-164.ap-northeast-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 56.155.140.164

Whois 56.155.140.164

IP Abuse Reports for 56.155.140.164:

This IP address has been reported a total of 8 times from 6 distinct sources. 56.155.140.164 was first reported on June 27th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-28 22:01:25 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-27. show less	Web App Attack SSH Hacking
🇦🇹 René Hickersberger	2026-06-27 08:28:50 (4 days ago)	malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Macintosh; Intel Mac OS ... show more malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 08:18:37 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 56.155.140.164 (ec2-56-155-140-164.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 56.155.140.164 (ec2-56-155-140-164.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 04:18:30.951185 2026] [security2:error] [pid 22468:tid 22468] [client 56.155.140.164:36904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reneehill.mydobdate.net"] [uri "/.git/config"] [unique_id "aj-HVmOPSU1cpZyzR_USqAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 08:00:38 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 56.155.140.164 (ec2-56-155-140-164.ap-northeast ... show more (mod_security) mod_security (id:210492) triggered by 56.155.140.164 (ec2-56-155-140-164.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 04:00:33.033245 2026] [security2:error] [pid 30746:tid 30746] [client 56.155.140.164:54668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rendermatrix.com"] [uri "/.git/config"] [unique_id "aj-DIbIoeu-yhGkYDt-27wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-27 07:37:14 (4 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-27 07:22:48 (4 days ago)	Aggressive web search of vulnerable pages: / /.env /.env.local /wp-env.php /app/.env /apps/.env ...	Web App Attack
🇱🇻 garmtech.com	2026-06-27 07:07:20 (4 days ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇱🇻 garmtech.com	2026-06-27 07:07:18 (4 days ago)	IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ... show more IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) show less	Hacking

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.107

🇨🇳 124.66.77.53

🇺🇸 66.132.172.151

🇲🇾 47.250.80.106

🇰🇭 203.189.134.85

🇹🇼 198.235.24.90

🇧🇷 191.6.25.239

🇹🇷 188.3.66.216

🇭🇰 152.32.171.213

🇨🇳 124.66.77.238

🇨🇳 124.66.76.81

🇩🇪 118.193.59.142

🇺🇸 8.229.222.20

🇹🇭 223.205.37.172

🇻🇳 180.93.138.150

🇺🇸 172.238.188.122

🇧🇩 151.158.51.160

🇨🇳 124.66.76.217

🇳🇵 124.41.248.204

🇨🇳 124.31.106.125