AbuseIPDB » 156.155.16.2
156.155.16.2
This IP was reported 4 times. Confidence of
Abuse
is 20% : ?
ISP
Axxess Networks
Usage Type
Fixed Line ISP
ASN
AS37611
Hostname(s)
156-155-16-2.ip.internet.co.za
Domain Name
axxess.co.za
Country
๐ฟ๐ฆ
South Africa
City
Cape Town, Western Cape
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 156.155.16.2 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
156.155.16.2 was first reported on
July 4th 2026 , and the most recent report was
5 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
SX Communications
2026-10-11 14:45:23
(5 days ago)
HTTP application-layer DoS / botnet traffic from 156.155.16.2: repeated high-cost dynamic page and f ...
show more
HTTP application-layer DoS / botnet traffic from 156.155.16.2: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
๐ฎ๐ฉ
hermawan
2026-10-11 03:18:22
(5 days ago)
[Sun Oct 11 10:18:22.540031 2026] [security2:error] [pid 519397:tid 140628922963648] [client 156.155 ...
show more
[Sun Oct 11 10:18:22.540031 2026] [security2:error] [pid 519397:tid 140628922963648] [client 156.155.16.2:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "asr__toPLrxf2Ur6nnEqjAAAANc"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[519459] [N6SpCAifXCc] [asr__toPLrxf2Ur6nnEqjAAAANc] keep_alive=[0] [2026-10-11 10:18:22.540040] [R:asr__toPLrxf2Ur6nnEqjAAAANc] UA:'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122
...
show less
Email Spam
Hacking
๐ต๐น
Subnet Phantom Veil
2026-10-03 17:08:57
(1 week ago)
[CRITICAL][Security Alert: Bot Masquerading] Spoofed Google-InspectionTool User-Agent from unverifie ...
show more
[CRITICAL][Security Alert: Bot Masquerading] Spoofed Google-InspectionTool User-Agent from unverified ASN/IP. [IP Address]: 156.155.16.2 [User-Agent]: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0) [IoA Datetime]: 2026-10-03 18:08:57 UTC +1.
show less
Port Scan
Hacking
Spoofing
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlackCrowy
2026-07-04 17:52:28
(3 months ago)
Connection closed. Duration: 0 ัะตะบ..
Port Scan
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: