Extreme Threat
IP 156.239.224.104 classified at threat level 10/10 with 29 documented attacks.
Advanced threat indicators confirmed with 19% certainty.
More threatening than 95% of monitored IPs
IP Address
156.239.224.104
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Seychelles
Location
CORENET CLOUD SDN. BHD.
ASN 154321
29
Reports
Honeypot
Data Source
Threat Categories
Hacking
17
SSH
16
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 154321) with generally good reputation. The ISP CORENET CLOUD SDN. BHD. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
18%
Low Confidence
Confidence History
23. Jul 2026
19%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 156.239.224.104
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SC
- ASN
- AS154321
- ISP
- CORENET CLOUD SDN. BHD.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 23 Jul 2026
- Last Reported
- 23 Jul 2026, 10:03
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS154321
CORENET CLOUD SDN. BHD.
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
4
Total IPs Monitored
33
Total Reports
8.3
Reports per IP
Network Context
This IP address belongs to CORENET CLOUD SDN. BHD. (AS154321), which manages 4 IP addresses in our monitoring system. Out of these, 33 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
95
%
Global Threat Ranking
This IP is more threatening than 95% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 808,018 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
29
avg: 9
++
Network Comparison
Compared against 19 IPs in ASN 154321
Threat Level
10/10
network avg: 7.6
+
Total Reports
29
network avg: 6
++
Network CORENET CLOUD SDN. BHD. has overall threat level 3/10
Geographic Comparison
Compared against 29,236 IPs in SC
Threat Level
10/10
country avg: 5.1
++
Total Reports
29
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
29 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
17
SSH
16
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
734,714 threat incidents tracked globally • Last 24h: 27,874 Logs
FEED
Top Threat Sources
-
01
United States143,598 19.5% -
02
Brazil110,790 15.1%
-
03
India82,356 11.2%
-
04
China44,821 6.1%
-
05
SC29,236 4%
-
06
Germany17,537 2.4%
-
07
Netherlands17,499 2.4%
-
08
Pakistan16,696 2.3%
-
09
Argentina16,193 2.2%
-
10
Colombia15,136 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
18
Related IPs
7.4/10
Avg Threat
16%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
156.239.236.204
10/10
Confidence
100%
Reports
14
Location
SC
SC
156.239.235.169
10/10
Confidence
60%
Reports
12
Location
SC
SC
156.239.224.214
8/10
Confidence
39%
Reports
4
Location
SC
SC
156.226.176.91
4/10
Confidence
23%
Reports
1
Location
SC
SC
156.239.238.244
7/10
Confidence
17%
Reports
2
Location
SC
SC
156.239.230.6
7/10
Confidence
11%
Reports
1
Location
SC
SC
162.251.93.73
7/10
Confidence
8%
Reports
2
Location
US
US
162.211.183.222
7/10
Confidence
8%
Reports
1
Location
US
US
162.251.92.201
7/10
Confidence
5%
Reports
2
Location
US
US
156.239.224.79
8/10
Confidence
4%
Reports
7
Location
SC
SC
162.251.92.85
7/10
Confidence
3%
Reports
1
Location
US
US
172.98.22.39
10/10
Confidence
2%
Reports
30
Location
US
US
156.226.177.243
7/10
Confidence
2%
Reports
1
Location
SC
SC
162.211.183.241
7/10
Confidence
1%
Reports
2
Location
US
US
172.98.22.200
7/10
Confidence
1%
Reports
1
Location
US
US
107.151.247.82
7/10
Confidence
1%
Reports
1
Location
US
US
107.151.247.45
7/10
Confidence
0%
Reports
1
Location
US
US
198.44.177.168
7/10
Confidence
0%
Reports
1
Location
US
US
IPs from the same subnet range, likely same network segment.
2
Related IPs
8/10
Avg Threat
22%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.239.236.204
10/10
Confidence
100%
Reports
14
ISP
CORENET CLOUD S...
154.83.17.239
10/10
Confidence
97%
Reports
17
ISP
YISU CLOUD LTD
156.239.47.91
10/10
Confidence
94%
Reports
45
ISP
AROSSCLOUD INC.
160.119.66.206
10/10
Confidence
94%
Reports
29
ISP
Alsycon B.V.
156.225.1.36
10/10
Confidence
94%
Reports
22
ISP
AgotoZ HK Limited
156.225.1.106
10/10
Confidence
94%
Reports
19
ISP
AgotoZ HK Limited
5.61.209.106
10/10
Confidence
94%
Reports
15
ISP
Amarutu Technol...
45.154.244.156
10/10
Confidence
94%
Reports
14
ISP
Shereverov Mara...
156.225.1.92
10/10
Confidence
93%
Reports
16
ISP
AgotoZ HK Limited
154.83.17.226
10/10
Confidence
93%
Reports
11
ISP
YISU CLOUD LTD
196.251.121.140
7/10
Confidence
92%
Reports
44
ISP
Ghosty Networks...
156.225.1.96
10/10
Confidence
92%
Reports
21
ISP
AgotoZ HK Limited
156.225.1.91
10/10
Confidence
92%
Reports
19
ISP
AgotoZ HK Limited
154.198.162.234
8/10
Confidence
92%
Reports
11
ISP
Scloud Pte Ltd
160.119.76.64
10/10
Confidence
91%
Reports
281
ISP
Alsycon B.V.
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
19%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.253.248.180
10/10
Confidence
19%
Reports
1,340
Location
IR
IR
78.188.213.8
10/10
Confidence
19%
Reports
1,293
Location
TR
TR
103.86.198.162
10/10
Confidence
19%
Reports
708
Location
BD
BD
14.18.190.138
10/10
Confidence
19%
Reports
455
Location
CN
CN
130.12.180.109
10/10
Confidence
19%
Reports
433
Location
US
US
5.61.209.43
8/10
Confidence
19%
Reports
416
Location
SC
SC
45.142.193.142
10/10
Confidence
19%
Reports
300
Location
RO
RO
45.142.193.198
8/10
Confidence
19%
Reports
263
Location
RO
RO
158.94.211.32
7/10
Confidence
19%
Reports
239
Location
NL
NL
217.113.60.80
10/10
Confidence
19%
Reports
206
Location
HU
HU
82.196.25.132
7/10
Confidence
19%
Reports
171
Location
FR
FR
51.75.125.229
7/10
Confidence
19%
Reports
161
Location
FR
FR
146.190.83.22
7/10
Confidence
19%
Reports
155
Location
SG
SG
94.156.232.243
8/10
Confidence
19%
Reports
149
Location
DE
DE
178.185.136.57
10/10
Confidence
19%
Reports
147
Location
RU
RU