AbuseIPDB » 156.59.197.102

156.59.197.102 was found in our database!

This IP was reported 486 times. Confidence of Abuse is 100%: ?

100%
ISP ZEN-HK
Usage Type Data Center/Web Hosting/Transit
ASN AS21859
Domain Name zenlayer.com
Country ๐Ÿ‡ญ๐Ÿ‡ฐ Hong Kong
City Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 156.59.197.102:

This IP address has been reported a total of 486 times from 116 distinct sources. 156.59.197.102 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡จ๐Ÿ‡ญ ScanThe.Net
ID: 4033625410 | PORT: 18080 | https://156-59-197-102.scanthe.net
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Axel
[2026-06-08 21:29:34 UTC] Honeypot HTTPS-Alt connection attempt | AXFRA HONEYPOT
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช anycast_ac
DDoS Attack IoT Targeted Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช guldkage
Unauthorized connection attempt detected from IP address 156.59.197.102 to port 8443 (ger-03) [O]
Brute-Force Exploited Host
๐Ÿ‡ฐ๐Ÿ‡ท enp0s1
Auto-reported by Fail2Ban (UFW Block, Port Scan)
Port Scan
๐Ÿ‡ฏ๐Ÿ‡ต mkaraki
1780757817 # Service_probe # SIGNATURE_SEND # source_ip:156.59.197.102 # dst_port:3344 ...
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช femboy.cat
Port scan to tcp/3034 from 156.59.197.102
Brute-Force
๐Ÿ‡ฏ๐Ÿ‡ต S.O.B.A. Dev.
Persistent port scanning or vulnerability scanning
Port Scan
Anonymous
$f2bV_matches
Port Scan Hacking Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช Axel
[2026-06-03 22:31:35 UTC] Honeypot HTTPS-Alt connection attempt | AXFRA HONEYPOT
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท pm33
Probing for resource vulnerabilities HTTP(S)
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช femboy.cat
Port scan to tcp/4567 from 156.59.197.102
Brute-Force
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Incoming HTTP traffic on port 81
Web App Attack Bad Web Bot
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Unauthorized traffic (70 bytes of payload); 3889 [1] TCP
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท pm33
Probing for resource vulnerabilities HTTP(S)
Web App Attack

Showing 1 to 15 of 486 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ธ๐Ÿ‡ช 162.158.182.203
๐Ÿ‡ฎ๐Ÿ‡ณ 117.213.202.34
๐Ÿ‡จ๐Ÿ‡ณ 223.109.255.154
๐Ÿ‡ต๐Ÿ‡พ 186.16.46.105
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.121
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.55
๐Ÿ‡ฉ๐Ÿ‡ช 47.91.79.97
๐Ÿ‡ธ๐Ÿ‡ฌ 43.134.96.24
๐Ÿ‡ง๐Ÿ‡ช 34.156.248.95
๐Ÿ‡ฒ๐Ÿ‡ฝ 187.170.65.227
๐Ÿ‡น๐Ÿ‡ญ 159.192.132.34
๐Ÿ‡จ๐Ÿ‡ณ 125.94.146.123
๐Ÿ‡ฉ๐Ÿ‡ช 92.211.89.198
๐Ÿ‡ท๐Ÿ‡ด 85.121.176.178
๐Ÿ‡ฎ๐Ÿ‡ณ 66.116.232.20
๐Ÿ‡ธ๐Ÿ‡ฌ 47.79.206.237
๐Ÿ‡ฟ๐Ÿ‡ฆ 41.168.10.139
๐Ÿ‡ฏ๐Ÿ‡ต 34.104.199.73
๐Ÿ‡บ๐Ÿ‡ธ 18.232.11.247
๐Ÿ‡ณ๐Ÿ‡ฑ 5.61.209.224