Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Tokyo

Region: Tokyo

Country: Japan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       156.246.0.0 - 156.246.255.255
CIDR:           156.246.0.0/16
NetName:        AFRINIC-ERX-156-246-0-0
NetHandle:      NET-156-246-0-0-1
Parent:         NET156 (NET-156-0-0-0-0)
NetType:        Transferred to AfriNIC
OriginAS:       
Organization:   African Network Information Center (AFRINIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is under AFRINIC responsibility.
Comment:        Please see http://www.afrinic.net/ for further details,
Comment:        or check the WHOIS server located at whois.afrinic.net.
Ref:            https://rdap.arin.net/registry/ip/156.246.0.0

ResourceLink:  http://afrinic.net/en/services/whois-query
ResourceLink:  whois.afrinic.net


OrgName:        African Network Information Center
OrgId:          AFRINIC
Address:        Level 11ABC
Address:        Raffles Tower
Address:        Lot 19, Cybercity
City:           Ebene
StateProv:      
PostalCode:     
Country:        MU
RegDate:        2004-05-17
Updated:        2015-05-04
Comment:        AfriNIC - http://www.afrinic.net
Comment:        The African & Indian Ocean Internet Registry
Ref:            https://rdap.arin.net/registry/entity/AFRINIC

ReferralServer:  whois://whois.afrinic.net
ResourceLink:  http://afrinic.net/en/services/whois-query

OrgAbuseHandle: GENER11-ARIN
OrgAbuseName:   Generic POC
OrgAbusePhone:  +230 4666616 
OrgAbuseEmail:  abusepoc@afrinic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/GENER11-ARIN

OrgTechHandle: GENER11-ARIN
OrgTechName:   Generic POC
OrgTechPhone:  +230 4666616 
OrgTechEmail:  abusepoc@afrinic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/GENER11-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.afrinic.net.

% This is the AfriNIC Whois server.
% The AFRINIC whois database is subject to  the following terms of Use. See https://afrinic.net/whois/terms

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '156.246.91.0 - 156.246.91.255'

% No abuse contact registered for 156.246.91.0 - 156.246.91.255

inetnum:        156.246.91.0 - 156.246.91.255
netname:        Akile_LTD
descr:          Akile LTD
country:        JP
admin-c:        CIS1-AFRINIC
tech-c:         CIS1-AFRINIC
status:         ASSIGNED PA
mnt-by:         CIL1-MNT
mnt-by:         LARUS-SERVICE-MNT
source:         AFRINIC # Filtered
parent:         156.224.0.0 - 156.255.255.255

person:         Cloud Innovation Support
address:        Gauteng
address:        ZA
address:        Gauteng
address:        South Africa
phone:          tel:+248-4-610-795
nic-hdl:        CIS1-AFRINIC
mnt-by:         CIL1-MNT
source:         AFRINIC # Filtered

% Information related to '156.246.88.0/21AS61112'

route:          156.246.88.0/21
descr:          Akile LTD
origin:         AS61112
mnt-by:         LARUS-SERVICE-MNT
source:         AFRINIC # Filtered
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.246.91.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24871
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;156.246.91.5.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026110302 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 04 04:00:29 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 5.91.246.156.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.91.246.156.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
62.234.44.43 attackspambots
Unauthorized connection attempt detected from IP address 62.234.44.43 to port 2220 [J]
2020-01-26 20:10:51
14.170.147.73 attackbotsspam
Autoban   14.170.147.73 AUTH/CONNECT
2020-01-26 19:49:15
69.229.6.2 attackspam
Unauthorized connection attempt detected from IP address 69.229.6.2 to port 2220 [J]
2020-01-26 19:45:50
222.186.30.35 attackbotsspam
Jan 26 12:42:58 dcd-gentoo sshd[11417]: User root from 222.186.30.35 not allowed because none of user's groups are listed in AllowGroups
Jan 26 12:43:00 dcd-gentoo sshd[11417]: error: PAM: Authentication failure for illegal user root from 222.186.30.35
Jan 26 12:42:58 dcd-gentoo sshd[11417]: User root from 222.186.30.35 not allowed because none of user's groups are listed in AllowGroups
Jan 26 12:43:00 dcd-gentoo sshd[11417]: error: PAM: Authentication failure for illegal user root from 222.186.30.35
Jan 26 12:42:58 dcd-gentoo sshd[11417]: User root from 222.186.30.35 not allowed because none of user's groups are listed in AllowGroups
Jan 26 12:43:00 dcd-gentoo sshd[11417]: error: PAM: Authentication failure for illegal user root from 222.186.30.35
Jan 26 12:43:00 dcd-gentoo sshd[11417]: Failed keyboard-interactive/pam for invalid user root from 222.186.30.35 port 29173 ssh2
...
2020-01-26 19:43:44
104.248.227.130 attackbots
Unauthorized connection attempt detected from IP address 104.248.227.130 to port 2220 [J]
2020-01-26 19:49:57
123.209.104.119 attack
Jan 26 05:08:40 new sshd[16665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.209.104.119  user=www-data
Jan 26 05:08:42 new sshd[16665]: Failed password for www-data from 123.209.104.119 port 47420 ssh2
Jan 26 05:08:42 new sshd[16665]: Received disconnect from 123.209.104.119: 11: Bye Bye [preauth]
Jan 26 05:23:59 new sshd[21467]: Connection closed by 123.209.104.119 [preauth]
Jan 26 05:25:15 new sshd[21731]: Failed password for invalid user password from 123.209.104.119 port 41955 ssh2
Jan 26 05:25:16 new sshd[21731]: Received disconnect from 123.209.104.119: 11: Bye Bye [preauth]
Jan 26 05:26:33 new sshd[21979]: Failed password for invalid user vnc from 123.209.104.119 port 44061 ssh2
Jan 26 05:26:34 new sshd[21979]: Received disconnect from 123.209.104.119: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.209.104.119
2020-01-26 20:10:17
167.99.228.173 attackbotsspam
Jan 25 23:56:43 netserv300 sshd[355]: Connection from 167.99.228.173 port 49766 on 178.63.236.20 port 22
Jan 25 23:56:43 netserv300 sshd[350]: Connection from 167.99.228.173 port 43842 on 178.63.236.16 port 22
Jan 25 23:56:43 netserv300 sshd[349]: Connection from 167.99.228.173 port 42220 on 178.63.236.17 port 22
Jan 25 23:56:43 netserv300 sshd[351]: Connection from 167.99.228.173 port 35254 on 178.63.236.21 port 22
Jan 25 23:56:43 netserv300 sshd[352]: Connection from 167.99.228.173 port 33952 on 178.63.236.19 port 22
Jan 25 23:56:43 netserv300 sshd[353]: Connection from 167.99.228.173 port 58660 on 178.63.236.18 port 22
Jan 25 23:56:43 netserv300 sshd[354]: Connection from 167.99.228.173 port 53752 on 178.63.236.22 port 22
Jan 25 23:57:48 netserv300 sshd[367]: Connection from 167.99.228.173 port 43772 on 188.40.78.229 port 22
Jan 25 23:57:48 netserv300 sshd[366]: Connection from 167.99.228.173 port 53606 on 188.40.78.197 port 22
Jan 25 23:57:48 netserv300 sshd[368]: Co........
------------------------------
2020-01-26 19:49:39
63.81.87.141 attack
Jan 26 06:35:28 grey postfix/smtpd\[16314\]: NOQUEUE: reject: RCPT from fondle.jcnovel.com\[63.81.87.141\]: 554 5.7.1 Service unavailable\; Client host \[63.81.87.141\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.81.87.141\]\; from=\ to=\ proto=ESMTP helo=\Jan 26 06:35:28 grey postfix/smtpd\[27130\]: NOQUEUE: reject: RCPT from fondle.jcnovel.com\[63.81.87.141\]: 554 5.7.1 Service unavailable\; Client host \[63.81.87.141\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.81.87.141\]\; from=\ to=\ proto=ESMTP helo=\Jan 26 06:35:28 grey postfix/smtpd\[26707\]: NOQUEUE: reject: RCPT from fondle.jcnovel.com\[63.81.87.141\]: 554 5.7.1 Service unavailable\; Client host \[63.81.87.141\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.81.87.141\]\; from=\
2020-01-26 19:39:33
148.255.135.225 attackbots
Jan 26 05:32:14 minden010 sshd[25306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.255.135.225
Jan 26 05:32:15 minden010 sshd[25306]: Failed password for invalid user tibero1 from 148.255.135.225 port 52150 ssh2
Jan 26 05:34:13 minden010 sshd[25920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.255.135.225


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=148.255.135.225
2020-01-26 20:23:24
134.175.178.153 attackbots
Jan 26 11:39:07 localhost sshd\[1150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.178.153  user=root
Jan 26 11:39:09 localhost sshd\[1150\]: Failed password for root from 134.175.178.153 port 54445 ssh2
Jan 26 11:42:35 localhost sshd\[3453\]: Invalid user poney from 134.175.178.153 port 40619
2020-01-26 20:22:47
109.195.149.166 attackspam
Unauthorised access (Jan 26) SRC=109.195.149.166 LEN=52 TOS=0x10 PREC=0x60 TTL=117 ID=2047 DF TCP DPT=1433 WINDOW=8192 SYN
2020-01-26 20:21:38
178.154.171.135 attack
[Sun Jan 26 15:57:11.370080 2020] [:error] [pid 4353:tid 140056523462400] [client 178.154.171.135:56091] [client 178.154.171.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "Xi1UZxzx0jJqCQWeN@BqWwAAAAE"]
...
2020-01-26 20:06:04
156.201.164.106 attackspambots
Unauthorized connection attempt detected from IP address 156.201.164.106 to port 22
2020-01-26 20:14:26
132.232.132.103 attackbots
Unauthorized connection attempt detected from IP address 132.232.132.103 to port 2220 [J]
2020-01-26 19:44:42
49.88.112.110 attackbotsspam
Jan 26 17:31:36 webhost01 sshd[3278]: Failed password for root from 49.88.112.110 port 51895 ssh2
...
2020-01-26 20:03:26

Recently Reported IPs

135.233.115.110 185.244.213.118 109.105.210.18 109.105.209.105
86.38.187.35 77.67.26.56 64.205.72.78 200.138.46.19
45.177.208.20 103.167.17.13 177.132.113.179 102.210.19.110
217.194.133.254 134.195.101.87 34.80.91.244 193.47.62.111
14.212.124.3 198.251.85.244 139.135.44.99 45.140.222.177