This IP address has been reported a total of
2
times from
2 distinct
sources.
198.167.206.220 was first reported on
July 16th 2025 , and the most recent report was
3 weeks ago Germany
with 1
report.
The only category in these recent reports was:
Brute-Force
1
time.
Old Reports
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-09-21 09:00:36
(3 weeks ago)
2026-09-21 00:01:18,169 fail2ban.actions [4163759]: NOTICE [tor] Ban 198.167.206.220
2026-09 ...
show more
2026-09-21 00:01:18,169 fail2ban.actions [4163759]: NOTICE [tor] Ban 198.167.206.220
2026-09-21 03:00:34,983 fail2ban.actions [4163759]: NOTICE [tor] Ban 198.167.206.220
2026-09-21 06:00:39,104 fail2ban.actions [4163759]: NOTICE [tor] Ban 198.167.206.220
2026-09-21 09:00:47,693 fail2ban.actions [4163759]: NOTICE [tor] Ban 198.167.206.220
2026-09-21 12:00:36,054 fail2ban.actions [4163759]: NOTICE [tor] Ban 198.167.206.220
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-07-16 16:03:51
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 198.167.206.220 (c6a7cedc.vpn.njalla.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 198.167.206.220 (c6a7cedc.vpn.njalla.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 12:03:40.832954 2025] [security2:error] [pid 23937:tid 23937] [client 198.167.206.220:64881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crixbot.com"] [uri "/.env"] [unique_id "aHfNXGRdBvcTLT0QtJEQXgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
2
of 2 reports
