JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

156.239.195.135

Neutral Activity

Abuse confidence score ?

0% Low Risk

16 reports

4 reporters · latest 8 months ago

ISP	Telconet S.A
Usage Type	Fixed Line ISP
ASN	AS27947
Domain Name	telconet.net
Country	🇪🇨 Ecuador
City	Guayaquil, Guayas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

156.239.195.135 has been reported 16 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 156.239.195.135

Export CSV

This IP address has been reported a total of 16 times from 4 distinct sources. 156.239.195.135 was first reported on July 31st 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-21 03:28:39 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 22:28:32.812339 2026] [security2:error] [pid 18648:tid 18648] [client 156.239.195.135:40740] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|activethinkers.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "activethinkers.net"] [uri "/wp-login.php"] [unique_id "aZkmYJ4cKE3VCHc3lQebCAAAAAo"], referer: https://activethinkers.net/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-08 14:18:17 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 09:18:10.114104 2026] [security2:error] [pid 3208183:tid 3208220] [client 156.239.195.135:32008] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|woofnrose.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "woofnrose.com"] [uri "/wp-login.php"] [unique_id "aYibIiHwDXK93Bv3rJ-KIAAAAAM"], referer: https://woofnrose.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-06 08:54:35 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 03:54:30.373419 2026] [security2:error] [pid 23896:tid 23896] [client 156.239.195.135:33998] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|disio.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "disio.com"] [uri "/wp-login.php"] [unique_id "aYWsRgWxaxvm_tPyG-nsaQAAABc"], referer: http://disio.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-25 09:21:42 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 04:21:36.074085 2026] [security2:error] [pid 14633:tid 14633] [client 156.239.195.135:33134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.prostar.industries\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.prostar.industries"] [uri "/wp-login.php"] [unique_id "aXXgoO0xXnfW4q0KD40jOwAAAAI"], referer: http://prostar.industries/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 07:01:17 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 02:01:09.300855 2026] [security2:error] [pid 9472:tid 9472] [client 156.239.195.135:43192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.humbliaslaw.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.humbliaslaw.com"] [uri "/wp-login.php"] [unique_id "aWXttVq29Ut6xCL-8JV6vAAAAAY"], referer: http://humbliaslaw.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-06 09:10:32 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 06 04:10:26.188403 2026] [security2:error] [pid 20731:tid 20731] [client 156.239.195.135:40502] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|schmitzcomm.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "schmitzcomm.net"] [uri "/wp-login.php"] [unique_id "aVzRgnzzRY_wQ9zqJ0lMzwAAAAA"], referer: http://schmitzcomm.net/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-05 04:20:01 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 23:19:57.983535 2026] [security2:error] [pid 27350:tid 27350] [client 156.239.195.135:23014] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.staben.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.staben.com"] [uri "/wp-login.php"] [unique_id "aVs77anl4MoUe-1SMn1hZgAAAAk"], referer: https://www.staben.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-31 00:07:27 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 19:07:20.125879 2025] [security2:error] [pid 11745:tid 11745] [client 156.239.195.135:34674] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.method1.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.method1.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVRpOD0FHl4hPaeFoOfyJQAAAAs"], referer: http://method1.net/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-30 04:45:53 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 23:45:46.945267 2025] [security2:error] [pid 6574:tid 6574] [client 156.239.195.135:16428] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kawkacevents.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kawkacevents.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVNY-qdcQdk3M1CUiUYmPQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Jaime	2025-12-21 21:53:15 (10 months ago)	This day 1 times ... Access forbidden - 403: - ... /wp-login.php	Brute-Force
🇺🇸 TPI-Abuse	2025-12-17 18:57:36 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 13:57:30.040107 2025] [security2:error] [pid 29407:tid 29427] [client 156.239.195.135:47352] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.guitarprimer.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.guitarprimer.com"] [uri "/wp-login.php"] [unique_id "aUL9Gvwlu7bN5AEalD9_ZgAAARA"], referer: https://www.guitarprimer.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 14:20:56 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:20:53.300191 2025] [security2:error] [pid 16963:tid 16963] [client 156.239.195.135:46448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barigby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTWNRYNOv81Nce4ePRnjSAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-17 04:43:07 (11 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 23:43:01.235014 2025] [security2:error] [pid 10374:tid 10374] [client 156.239.195.135:35983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.realclean.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.realclean.net"] [uri "/wp-login.php"] [unique_id "aRqn1UMEqbwy8Q_Yk1DMbgAAACY"], referer: http://www.realclean.net/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 06:54:07 (11 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.195.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 01:54:00.609556 2025] [security2:error] [pid 10322:tid 10444] [client 156.239.195.135:48603] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|pref-realestate.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pref-realestate.com"] [uri "/wp-login.php"] [unique_id "aRbSCMfexcLhmv9xLuu1SAAAAIc"], referer: https://pref-realestate.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-10-04 02:40:14 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 23.109.155.204

🇿🇦 165.0.137.228

🇺🇸 162.216.150.72

🇪🇬 156.221.61.194

🇮🇳 135.235.196.148

🇳🇱 77.91.71.92

🇸🇳 41.214.24.66

🇯🇵 8.216.9.236

🇨🇳 218.94.4.146

🇺🇸 216.25.89.93

🇹🇿 197.186.0.119

🇳🇱 194.88.98.83

🇮🇩 180.245.164.76

🇧🇷 179.176.210.17

🇧🇷 177.66.185.122

🇳🇱 138.226.239.233

🇮🇩 119.235.221.192

🇿🇦 102.182.190.164

🇩🇪 69.5.169.18

🇩🇪 69.5.169.10