JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.59.80.211

156.59.80.211 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 88%: ?

88%

ISP	Zenlayer IP Block @Hong Kong
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21859
Domain Name	zenlayer.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.59.80.211

Whois 156.59.80.211

IP Abuse Reports for 156.59.80.211:

This IP address has been reported a total of 21 times from 15 distinct sources. 156.59.80.211 was first reported on July 11th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Threat.live	2026-07-12 23:25:02 (1 hour ago)	Suspicious Connection Attempts	Brute-Force
🇨🇿 lp	2026-07-12 20:58:17 (3 hours ago)	anomaly: tcp_port_scan, 501 > threshold 500, repeats 59094 times	Port Scan
🇧🇷 diego	2026-07-12 17:20:23 (7 hours ago)	[rede-168-134] Port Scan detected from 156.59.80.211 (HK/Hong Kong/-). 11 hits in the last 205 sec ... show more [rede-168-134] Port Scan detected from 156.59.80.211 (HK/Hong Kong/-). 11 hits in the last 205 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 12 14:17:22 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=156.59.80.211 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=36334 PROTO=TCP SPT=61000 DPT=5918 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 14:17:38 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=156.59.80.211 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=29807 PROTO=TCP SPT=61000 DPT=5967 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 diego	2026-07-12 16:21:40 (8 hours ago)	[rede-164-29] Port Scan detected from 156.59.80.211 (HK/Hong Kong/-). 11 hits in the last 281 seco ... show more [rede-164-29] Port Scan detected from 156.59.80.211 (HK/Hong Kong/-). 11 hits in the last 281 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 12 13:17:35 kernel: [15484553.667019] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=156.59.80.211 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=19934 PROTO=TCP SPT=61000 DPT=5959 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 13:17:52 kernel: [15484571.023508] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=156.59.80.211 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=21907 PROTO=TCP SPT=61000 DPT=59 show less	Port Scan
🇩🇪 Axel	2026-07-12 12:53:38 (11 hours ago)	[2026-07-12 12:53:38 UTC] Honeypot CouchDB connection attempt \| AXFRA HONEYPOT	Hacking
🇹🇷 SeczarSecureOps	2026-07-12 08:29:28 (16 hours ago)	Seczar SecureOps — Port Scan Detection (15 events) — quarantined 43200m on Skyart-FW	Port Scan
🇭🇺 DumaNet	2026-07-12 08:23:00 (16 hours ago)	Blocked for port scanning. Time: Sun Jul 12. 09:41:19 2026 +0200 IP: 156.59.80.211 (HK/Hong Kong/- ... show more Blocked for port scanning. Time: Sun Jul 12. 09:41:19 2026 +0200 IP: 156.59.80.211 (HK/Hong Kong/-) Sample of block hits: Jul 12 09:37:42 vserv kernel: [51825849.593025] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=156.59.80.211 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=64268 PROTO=TCP SPT=61000 DPT=5971 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 09:37:45 vserv kernel: [51825852.707062] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=156.59.80.211 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=65159 PROTO=TCP SPT=61000 DPT=5980 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 09:38:41 vserv kernel: [51825908.647518] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=156.59.80.211 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=49362 PROTO=TCP SPT=61000 DPT=5929 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 09:38:47 vserv kernel: [51825914.914781] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=156.59.80.211 DST=[removed] LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=52446 PROTO=TCP SPT=61000 DPT=5962 WINDOW show less	Port Scan
🇹🇷 SeczarSecureOps	2026-07-12 08:13:52 (16 hours ago)	Auto-blocked by Seczar SecureOps — Port Scan Detection (29 events in 10min) at 2026-07-12 08:13	Port Scan
🇹🇷 SeczarSecureOps	2026-07-12 07:58:43 (16 hours ago)	Seczar SecureOps — Port Scan Detection (6 events) — quarantined 43200m on optimumofis	Port Scan
🇺🇸 sandap1	2026-07-12 07:50:04 (17 hours ago)	Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=5928,5931,5934,5952,5968,5976,5979,src_ip=156.59.8 ... show more Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=5928,5931,5934,5952,5968,5976,5979,src_ip=156.59.80.211 show less	Port Scan Hacking
🇺🇸 sandap1	2026-07-12 07:30:03 (17 hours ago)	Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=5932,5944,5957,5978,5989,5995,5999,src_ip=156.59.8 ... show more Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=5932,5944,5957,5978,5989,5995,5999,src_ip=156.59.80.211 show less	Port Scan Hacking
🇺🇸 sandap1	2026-07-12 07:10:03 (17 hours ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=5912,5914,5919,5930,5933,5942,5964,5972,5974,5998 ... show more Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=5912,5914,5919,5930,5933,5942,5964,5972,5974,5998,src_ip=156.59.80.211 show less	Port Scan Hacking
🇺🇸 sandap1	2026-07-12 06:50:02 (18 hours ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=5908,5935,5951,5960,5966,5973,src_ip=156.59.80.211	Port Scan Hacking
Anonymous	2026-07-12 06:46:30 (18 hours ago)	Jul 12 02:45:46 localhost kernel: [112183983.839290] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 12 02:45:46 localhost kernel: [112183983.839290] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=156.59.80.211 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=234 ID=38523 PROTO=TCP SPT=61000 DPT=5922 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 02:45:46 localhost kernel: [112183983.839513] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=156.59.80.211 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=234 ID=38523 PROTO=TCP SPT=61000 DPT=5922 SEQ=2149048615 ACK=0 WINDOW=1025 RES=0x00 SYN URGP=0 OPT (020405B4) Jul 12 02:46:29 localhost kernel: [112184026.919991] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=156.59.80.211 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=234 ID=23657 PROTO=TCP SPT=61000 DPT=5903 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 12 02:46:29 localhost kernel: [112184026.920014] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=156.59.80.211 DST=[mungedIP show less	Port Scan
🇩🇪 ValtonTahiri	2026-07-12 01:57:56 (22 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=156.59.80.211; proto=TCP; source_port=61000; target_port=5964; flags=SYN show less	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 125.118.114.20

🇸🇬 103.13.207.88

🇺🇸 81.30.98.81

🇩🇪 69.5.169.249

🇸🇬 45.78.201.248

🇬🇧 2.57.17.112

🇫🇷 195.154.210.52

🇵🇱 194.180.49.219

🇮🇸 185.40.122.250

🇺🇸 162.217.100.36

🇪🇸 158.49.70.49

🇺🇸 152.39.149.217

🇰🇷 118.37.214.187

🇨🇳 116.228.233.93

🇫🇷 92.148.60.189

🇨🇦 85.217.149.64

🇺🇸 71.206.190.209

🇺🇸 71.6.233.235

🇩🇪 69.5.169.96

🇩🇪 69.5.169.92