156.155.47.148

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
42% Elevated
51 reports
33 reporters · latest 1 week ago
ISP
Axxess Networks
Usage Type
Fixed Line ISP
ASN
AS37611
Hostname(s)
156-155-47-148.ip.internet.co.za
Domain Name
axxess.co.za
Country
🇿🇦 South Africa
City
Durban, KwaZulu-Natal
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
51 from 33 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇩🇪 Germany 4 🇧🇷 Brazil 1
Most common categories Port Scan 10 Bad Web Bot 8 Brute-Force 5 SSH 5 Web App Attack 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Lino Project
156.155.47.148 - - [27/Oct/2026:14:14:17 +0100] "POST /xmlrpc.php HTTP/2.0" 403 405 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" ...
Brute-Force Bad Web Bot Web App Attack
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-10-24 12:11:54 | LAST=2026-10-24 12:11:54. Last seen 2026-10-24 12:11:54.
Port Scan
Anonymous
Web app attack and vulnerability scan detected from IIS logs
Brute-Force Bad Web Bot Web App Attack
🇺🇸 cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 46530 TTL: 42 Packet length: 60 TOS: 0x00 This report (for 156.155.47.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
🇯🇵 Kinsei Engineering Inc.
UFW:High-frequency access to non-released SSH or Telnet ports
SSH Port Scan
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇩🇪 zerodaysystemde
Port (22 tcp) Scanner - SSH - HoneyPot
Port Scan SSH
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 156.155.47.148
Port Scan Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.161.49.2
🇩🇪 185.190.54.150
🇪🇸 185.165.249.151
🇨🇭 179.43.153.18
🇮🇩 114.12.17.98
🇺🇸 104.153.208.101
🇩🇪 64.89.163.235
🇻🇳 42.96.17.249
🇺🇸 40.124.187.1
🇿🇦 20.164.210.40
🇮🇩 202.150.74.2
🇮🇷 158.255.74.236
🇭🇰 113.10.158.122
🇳🇱 109.160.32.135
🇫🇷 85.217.140.38
🇷🇴 80.94.92.234
🇺🇸 66.132.172.232
🇺🇸 20.65.170.55
🇳🇱 200.138.46.2
🇪🇹 196.189.51.4
feedback