JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.239.205.217

156.239.205.217 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	Wave Broadband
Usage Type	Fixed Line ISP
ASN	AS11404
Domain Name	astound.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.239.205.217

Whois 156.239.205.217

IP Abuse Reports for 156.239.205.217:

This IP address has been reported a total of 9 times from 7 distinct sources. 156.239.205.217 was first reported on May 15th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-09 19:22:46 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.205.217 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.205.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 14:22:37.967218 2026] [security2:error] [pid 1119:tid 1119] [client 156.239.205.217:13008] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.blacksheepoffroad.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.blacksheepoffroad.com"] [uri "/wp-login.php"] [unique_id "aWFVfdjPw6FgvcAnpsCOrQAAAAo"], referer: http://blacksheepoffroad.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-01-09 17:57:40 (9 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
Anonymous	2026-01-09 17:11:12 (9 months ago)	wordpress-trap	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:07 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-02 19:04:48 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.205.217 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.205.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:04:43.081986 2025] [security2:error] [pid 806:tid 806] [client 156.239.205.217:59821] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.humbliaslaw.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.humbliaslaw.com"] [uri "/wp-login.php"] [unique_id "aS84SxuaTzWM2tEP738aggAAAAQ"], referer: http://www.humbliaslaw.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-05 23:52:11 (1 year ago)	Attempted brute force login to web vpn 33 time(s); last attempt for 2025.08.05 is noted in report ti ... show more Attempted brute force login to web vpn 33 time(s); last attempt for 2025.08.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-07-31 12:55:30 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.07.31 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.07.31 is noted in report timestamp show less	Hacking Brute-Force
🇮🇳 wizard1411	2025-06-15 03:22:33 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
🇳🇱 maxxsense	2025-05-15 05:52:03 (1 year ago)	156.239.205.217 (US/United States/-), 12 distributed imapd attacks on account [redacted]	Brute-Force

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 155.2.215.39

🇺🇦 109.86.217.211

🇳🇱 45.148.10.151

🇹🇼 198.235.24.109

🇳🇱 193.47.62.187

🇦🇷 190.173.52.220

🇲🇽 187.190.199.83

🇲🇽 187.174.238.116

🇨🇴 186.27.182.27

🇺🇦 185.143.147.204

🇰🇷 118.38.44.223

🇯🇵 113.158.205.225

🇷🇴 80.94.92.55

🇷🇺 78.136.223.227

🇸🇬 34.126.176.123

🇬🇧 167.172.62.249

🇺🇸 154.206.89.53

🇺🇸 143.42.1.185

🇺🇸 136.70.226.125

🇩🇪 93.152.221.36