JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

156.245.136.144

Neutral Activity

Abuse confidence score ?

0% Low Risk

17 reports

5 reporters · latest 3 years ago

ISP	Arisk Communications inc
Usage Type	Fixed Line ISP
ASN	AS9304
Domain Name	nuukcommunications.com
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

156.245.136.144 has been reported 17 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 156.245.136.144

Export CSV

This IP address has been reported a total of 17 times from 5 distinct sources. 156.245.136.144 was first reported on August 23rd 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2023-09-25 19:49:43 (3 years ago)	47 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2023-09-25 19:08:41 (3 years ago)	600 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2023-09-25 06:43:31 (3 years ago)	99 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2023-09-25 05:57:03 (3 years ago)	15 attempts against mh-misc-ban on redirect	Web App Attack
🇺🇸 kernelmanic	2023-09-15 14:44:26 (3 years ago)	UNAUTHORIZED and unwanted Web app vulnerability scan - sql injection ; login attempts; enumeration; ... show more UNAUTHORIZED and unwanted Web app vulnerability scan - sql injection ; login attempts; enumeration; etc etc show less	Hacking SQL Injection Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-09-06 14:02:44 (3 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
🇺🇦 URAN Publishing Service	2023-08-29 04:41:30 (3 years ago)	156.245.136.144 - - [29/Aug/2023:07:41:30 +0300] "GET /wp-content/plugins/amministrazione-aperta/wpg ... show more 156.245.136.144 - - [29/Aug/2023:07:41:30 +0300] "GET /wp-content/plugins/amministrazione-aperta/wpgov/dispatcher.php?open=../../../../../../../../../../etc/passwd HTTP/1.1" 404 5066 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2023-08-26 08:33:56 (3 years ago)	156.245.136.144 - - [26/Aug/2023:11:33:55 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 5066 " ... show more 156.245.136.144 - - [26/Aug/2023:11:33:55 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 5066 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" ... show less	Web App Attack
🇩🇪 DAILYKANBAN.COM	2023-08-26 01:17:47 (3 years ago)	Port Scan detected from 156.245.136.144 (HK/Hong Kong/-). 9 hits in the last 95 seconds; Ports: ; ... show more Port Scan* detected from 156.245.136.144 (HK/Hong Kong/-). 9 hits in the last 95 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 26 01:17:23 albert kernel: Firewall: TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=7321 DF PROTO=TCP SPT=50682 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 26 01:17:24 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=7322 DF PROTO=TCP SPT=50682 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 26 01:17:26 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=7323 DF PROTO=TCP SPT=50682 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 26 01:17:30 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00: show less	Port Scan
🇩🇪 DAILYKANBAN.COM	2023-08-26 00:04:42 (3 years ago)	Port Scan detected from 156.245.136.144 (HK/Hong Kong/-). 9 hits in the last 276 seconds; Ports: * ... show more Port Scan detected from 156.245.136.144 (HK/Hong Kong/-). 9 hits in the last 276 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 26 00:03:04 albert kernel: Firewall: TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=38551 DF PROTO=TCP SPT=54796 DPT=7001 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 26 00:03:05 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=38552 DF PROTO=TCP SPT=54796 DPT=7001 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 26 00:03:07 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=38553 DF PROTO=TCP SPT=54796 DPT=7001 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 26 00:03:11 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4 show less	Port Scan
🇩🇪 DAILYKANBAN.COM	2023-08-25 22:17:27 (3 years ago)	Port Scan detected from 156.245.136.144 (HK/Hong Kong/-). 9 hits in the last 35 seconds; Ports: ; ... show more Port Scan* detected from 156.245.136.144 (HK/Hong Kong/-). 9 hits in the last 35 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 25 22:17:05 albert kernel: Firewall: TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50251 DF PROTO=TCP SPT=58452 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 22:17:06 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50252 DF PROTO=TCP SPT=58452 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 22:17:08 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=156.245.136.144 DST=213.136.66.2 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50253 DF PROTO=TCP SPT=58452 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 22:17:12 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4: show less	Port Scan
🇺🇦 URAN Publishing Service	2023-08-24 21:37:35 (3 years ago)	156.245.136.144 - - [25/Aug/2023:00:37:34 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 5066 " ... show more 156.245.136.144 - - [25/Aug/2023:00:37:34 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 5066 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2023-08-24 04:35:05 (3 years ago)	156.245.136.144 - - [24/Aug/2023:07:35:05 +0300] "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1" 404 5249 "-" ... show more 156.245.136.144 - - [24/Aug/2023:07:35:05 +0300] "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1" 404 5249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2023-08-23 19:11:49 (3 years ago)	156.245.136.144 - - [23/Aug/2023:22:11:48 +0300] "GET /wp-content/plugins/wechat-broadcast/wechat/Im ... show more 156.245.136.144 - - [23/Aug/2023:22:11:48 +0300] "GET /wp-content/plugins/wechat-broadcast/wechat/Image.php?url=../../../../../../../../../../etc/passwd HTTP/1.1" 404 5066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2023-08-23 15:09:29 (3 years ago)	156.245.136.144 - - [23/Aug/2023:18:09:28 +0300] "GET /wp-content/plugins/localize-my-post/ajax/incl ... show more 156.245.136.144 - - [23/Aug/2023:18:09:28 +0300] "GET /wp-content/plugins/localize-my-post/ajax/include.php?file=../../../../../../../../../../etc/passwd HTTP/1.1" 404 5066 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.179.138.197

🇺🇸 191.96.106.161

🇩🇪 167.94.145.17

🇺🇸 162.216.149.230

🇺🇸 147.185.132.88

🇩🇪 147.90.72.151

🇺🇸 146.94.198.144

🇺🇸 104.243.133.18

🇵🇱 193.8.187.3

🇷🇺 188.227.111.138

🇩🇪 185.45.204.129

🇺🇸 178.16.55.50

🇳🇱 176.65.148.96

🇺🇸 167.89.99.20

🇭🇰 154.92.17.128

🇨🇳 121.46.239.196

🇮🇳 103.248.35.78

🇮🇩 103.155.47.50

🇱🇹 62.60.130.201

🇮🇩 2402:8780:1063:5e0:7182:b99f:c2c6:b1bc