JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.239.198.167

156.239.198.167 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	Wave Broadband
Usage Type	Fixed Line ISP
ASN	AS11404
Domain Name	astound.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.239.198.167

Whois 156.239.198.167

IP Abuse Reports for 156.239.198.167:

This IP address has been reported a total of 8 times from 5 distinct sources. 156.239.198.167 was first reported on May 21st 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:23 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-24 05:18:05 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 00:17:58.977208 2025] [security2:error] [pid 6910:tid 6910] [client 156.239.198.167:20440] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tedharris.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tedharris.com"] [uri "/wp-login.php"] [unique_id "aUt3hjrOrkoVSdsUus4crwAAABI"], referer: https://tedharris.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 02:32:32 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 21:32:26.143561 2025] [security2:error] [pid 5294:tid 5294] [client 156.239.198.167:39759] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|persnicketyinc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/wp-login.php"] [unique_id "aS5PupdW9FE4BLM26S_DGAAAAAw"], referer: http://persnicketyinc.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 03:34:48 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 22:34:42.215239 2025] [security2:error] [pid 1865:tid 1865] [client 156.239.198.167:20635] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|barigby.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "barigby.com"] [uri "/wp-login.php"] [unique_id "aSKA0hP2Jx8pwHYQrowAfwAAAAo"], referer: https://barigby.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-17 05:41:56 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.198.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 00:41:46.894491 2025] [security2:error] [pid 2343:tid 2343] [client 156.239.198.167:18397] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.staben.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.staben.com"] [uri "/wp-login.php"] [unique_id "aRq1mvgHGv1IwuqHRC23XQAAABc"], referer: https://www.staben.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-31 20:25:30 (1 year ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2025.07.31 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2025.07.31 is noted in report timestamp show less	Hacking Brute-Force
🇮🇳 wizard1411	2025-06-15 03:22:44 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
🇨🇭 backslash	2025-05-21 23:00:11 (1 year ago)	block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1	Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇰 217.16.88.18

🇱🇹 213.176.24.43

🇮🇪 162.158.6.147

🇹🇼 111.70.38.53

🇭🇰 101.36.107.233

🇺🇸 100.49.117.77

🇷🇴 2.57.122.168

🇨🇳 211.95.159.159

🇨🇳 203.6.235.51

🇳🇱 195.178.110.217

🇨🇳 182.117.69.129

🇧🇷 177.131.169.153

🇩🇪 128.14.225.164

🇧🇩 103.35.156.238

🇳🇱 45.148.10.151

🇺🇸 195.184.76.48

🇨🇳 183.36.126.68

🇿🇦 165.16.187.114

🇨🇲 154.70.102.114

🇮🇳 103.91.246.101