Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
156.238.120.251 has a threat confidence score of 71%. This IP address from Philippines (AS54801, Zillion Network Inc.) has been observed in 24 honeypot sessions targeting SSH, TELNET protocols. First observed on February 8, 2026, most recently active March 21, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.