JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.56.168.39

72.56.168.39 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 17%: ?

17%

ISP	WS Telecom Inc
Usage Type	Fixed Line ISP
ASN	AS213541
Hostname(s)	undefined.hostname.localhost
Domain Name	wstelecom.us
Country	🇺🇸 United States of America
City	Houston, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.56.168.39

Whois 72.56.168.39

IP Abuse Reports for 72.56.168.39:

This IP address has been reported a total of 4 times from 4 distinct sources. 72.56.168.39 was first reported on July 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-21 21:32:18 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 72.56.168.39 (undefined.hostname.localhost): 1 ... show more (mod_security) mod_security (id:210730) triggered by 72.56.168.39 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:32:11.465314 2026] [security2:error] [pid 17576:tid 17576] [client 72.56.168.39:50319] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|new-bethel-baptist-church.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "new-bethel-baptist-church.com"] [uri "/home/tancedi1/new-bethel-baptist-church.com"] [unique_id "atkvWxW4KrEC1AD4wVY_jAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-18 02:19:32 (1 month ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 72.56.168.39 - - [18/Sep/2026:04:19:13 +0200] "GET /.git/HEAD HTTP/1.1" 403 5976 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" ... show less	Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-16 09:09:07 (1 month ago)	[WedSep1611:09:02.7617102026][security2:error][pid2781389:tid2781468][client72.56.168.39:0]ModSecuri ... show more [WedSep1611:09:02.7617102026][security2:error][pid2781389:tid2781468][client72.56.168.39:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"4server.biz\"][uri\"/.env\"][unique_id\"aqpcrtMVdXLtWzg3WxYTXgAAAMI\"] show less	Hacking Web App Attack
Anonymous	2026-07-22 06:19:45 (3 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 148.153.56.170

🇺🇸 34.86.252.55

🇨🇦 198.27.67.120

🇩🇪 194.187.176.95

🇪🇸 193.30.124.216

🇨🇦 192.99.7.229

🇳🇱 185.242.226.8

🇳🇱 185.136.15.111

🇺🇸 172.172.180.124

🇫🇮 157.22.125.79

🇵🇾 154.3.61.148

🇺🇸 136.108.94.124

🇺🇸 104.143.128.237

🇰🇪 102.68.79.255

🇩🇪 94.26.106.214

🇳🇱 89.248.168.227

🇩🇪 69.5.169.91

🇮🇪 52.50.130.49

🇮🇪 52.48.47.94

🇮🇱 34.165.214.5