JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.239.217.134

156.239.217.134 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Wave Broadband
Usage Type	Fixed Line ISP
ASN	AS11404
Domain Name	astound.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.239.217.134

Whois 156.239.217.134

IP Abuse Reports for 156.239.217.134:

This IP address has been reported a total of 15 times from 9 distinct sources. 156.239.217.134 was first reported on April 12th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-30 07:56:52 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 02:56:47.450067 2026] [security2:error] [pid 10454:tid 10454] [client 156.239.217.134:19232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.velvetculture.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.velvetculture.com"] [uri "/wp-login.php"] [unique_id "aXxkP_9teF6f7d1-A6EMjgAAAAg"], referer: http://velvetculture.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-12 08:11:44 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 03:11:40.153449 2026] [security2:error] [pid 2310203:tid 2310203] [client 156.239.217.134:35518] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.passy.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.passy.us"] [uri "/wp-login.php"] [unique_id "aWSsvNMz7gr_rnXktl4LHwAAAAo"], referer: http://passy.us/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-09 22:41:31 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 17:41:26.107698 2026] [security2:error] [pid 12779:tid 12779] [client 156.239.217.134:60246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.vanmeer.info\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vanmeer.info"] [uri "/wp-login.php"] [unique_id "aWGEFpJTCk3T0KIJhg7OVwAAABM"], referer: http://vanmeer.info/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mrcrassi	2026-01-04 21:25:23 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:56 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-10 07:11:19 (10 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-23 13:53:06 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 08:53:02.710707 2025] [security2:error] [pid 19743:tid 19743] [client 156.239.217.134:52833] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|genevaatlantic.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "genevaatlantic.com"] [uri "/login/"] [unique_id "aSMRvhX1ObVmzHjFzgBYxAAAABQ"], referer: https://genevaatlantic.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-18 06:33:35 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 156.239.217.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 01:33:09.367967 2025] [security2:error] [pid 5106:tid 5106] [client 156.239.217.134:49685] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bzbdesigns.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bzbdesigns.com"] [uri "/wp-login.php"] [unique_id "aRwTJdPOatnvJBmkozdZ0wAAAAQ"], referer: http://www.bzbdesigns.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-05 23:09:04 (1 year ago)	Attempted brute force login to web vpn 41 time(s); last attempt for 2025.08.05 is noted in report ti ... show more Attempted brute force login to web vpn 41 time(s); last attempt for 2025.08.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-08-01 01:52:23 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.08.01 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.08.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-07-31 17:32:56 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.07.31 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.07.31 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-06-14 23:22:12 (1 year ago)	156.239.217.134 (US/United States/-), 10 distributed imapd attacks on account [redacted]	Brute-Force
🇮🇳 wizard1411	2025-06-14 16:56:19 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
🇮🇹 Progetto1	2025-04-22 20:36:02 (1 year ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇨🇭 backslash	2025-04-12 11:45:04 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 161.142.156.8

🇳🇱 151.245.151.225

🇳🇱 151.245.151.81

🇳🇱 151.245.151.61

🇺🇸 136.67.146.90

🇺🇸 98.118.254.148

🇳🇱 89.248.163.168

🇷🇸 87.116.164.167

🇬🇧 77.67.26.253

🇬🇧 64.205.72.36

🇱🇹 62.60.130.253

🇬🇧 31.14.254.100

🇺🇸 216.25.89.133

🇨🇭 209.99.190.113

🇫🇮 193.187.110.159

🇺🇸 172.190.10.217

🇺🇸 162.215.175.52

🇺🇸 147.185.132.159

🇲🇲 136.228.161.66

🇮🇳 125.21.59.218