JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.225.1.113

156.225.1.113 was found in our database!

This IP was reported 310 times. Confidence of Abuse is 100%: ?

100%

ISP	AGOTOZ PTE. LTD
Usage Type	Commercial
ASN	AS9465
Domain Name	agotoz.com
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.225.1.113

Whois 156.225.1.113

IP Abuse Reports for 156.225.1.113:

This IP address has been reported a total of 310 times from 127 distinct sources. 156.225.1.113 was first reported on July 9th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 donarev419	2026-08-31 00:20:56 (7 hours ago)	Connection to port 9100 with data transfer. Data preview: �	Port Scan Hacking
🇭🇰 sandra361	2026-08-30 20:49:20 (10 hours ago)	Port scan detected: 25 attempts across 1 port (993). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=156.225. ... show more Port scan detected: 25 attempts across 1 port (993). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=156.225.1.113 LEN=40 TOS=0x14 PREC=0x00 TTL=56 ID=56085 DF PROTO=TCP SPT=41232 DPT=993 WINDOW=1460 RES=0x00 ACK URGP=0 show less	Port Scan
🇩🇪 sandra361	2026-08-30 20:09:02 (11 hours ago)	Port scan detected: 7 attempts across 1 port (587). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=156.225.1 ... show more Port scan detected: 7 attempts across 1 port (587). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=156.225.1.113 LEN=104 TOS=0x00 PREC=0x00 TTL=58 ID=64153 DF PROTO=TCP SPT=46562 DPT=587 WINDOW=1460 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇩🇪 dispaisyenterprises	2026-08-30 19:45:57 (11 hours ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8983 GET / Accept: /; 8983 [4] TCP Reported by Di ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8983 GET / Accept: /; 8983 [4] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇮🇩 Konaa	2026-08-30 12:38:49 (18 hours ago)	2026-08-30T19:37:43.547604+07:00 rapi postfix/submission/smtpd[2572991]: improper command pipelining ... show more 2026-08-30T19:37:43.547604+07:00 rapi postfix/submission/smtpd[2572991]: improper command pipelining after CONNECT from unknown[156.225.1.113]: \377\000\000\000\000\000\000\000\000\177\003\001NULL\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000 2026-08-30T19:37:54.670930+07:00 rapi postfix/submission/smtpd[2572991]: improper command pipelining after CONNECT from unknown[156.225.1.113]: \377\000\000\000\000\000\000\000\000\177\003\001NULL\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000 show less	Email Spam Port Scan Brute-Force
Anonymous	2026-08-30 12:09:50 (19 hours ago)	2026-08-30 14:09:47.435 [2855680] no host name found for IP address 156.225.1.113 2026-08-30 14:09:4 ... show more 2026-08-30 14:09:47.435 [2855680] no host name found for IP address 156.225.1.113 2026-08-30 14:09:47.623 [2855680] no MAIL in SMTP connection from [156.225.1.113]:40842 I=[217.197.86.168]:587 Ci=2855680 D=0.282s 2026-08-30 14:09:48.811 [2855920] no host name found for IP address 156.225.1.113 ... show less	Email Spam
🇯🇵 ttttomomi	2026-08-30 11:49:08 (19 hours ago)	Unsolicited SMTP connection scanning: repeated connect and disconnect with no SMTP command issued, r ... show more Unsolicited SMTP connection scanning: repeated connect and disconnect with no SMTP command issued, rate-limited and banned by our filter. Reported as an observation; the intent (research or reconnaissance) is not determined. show less	Port Scan
🇩🇪 reznekcs	2026-08-30 04:24:56 (1 day ago)	F2B postfix ban. Logs: 2026-08-30T06:24:54.527471+02:00 isp postfix/smtps/smtpd[1320883]: lost conne ... show more F2B postfix ban. Logs: 2026-08-30T06:24:54.527471+02:00 isp postfix/smtps/smtpd[1320883]: lost connection after CONNECT from unknown[156.225.1.113] 2026-08-30T06:24:55.345173+02:00 isp postfix/smtps/smtpd[1320883]: lost connection after UNKNOWN from unknown[156.225.1.113] 2026-08-30T06:24:55.810285+02:00 isp postfix/smtps/smtpd[1320883]: lost connection after CONNECT from unknown[156.225.1.113] show less	Brute-Force Web App Attack
🇩🇪 dispaisyenterprises	2026-08-29 23:16:54 (1 day ago)	Honeypot [fra-de-honeypot]: HTTP request on 60000	Hacking Bad Web Bot
🇳🇱 donarev419	2026-08-29 11:19:01 (1 day ago)	Connection to port 7443 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:7443 ... show more Connection to port 7443 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:7443 Accept: / show less	Port Scan Hacking
🇺🇸 Brian Minton	2026-08-29 10:18:00 (1 day ago)	2026-08-29 05:17:49 no host name found for IP address 156.225.1.113 2026-08-29 05:17:59 no host name ... show more 2026-08-29 05:17:49 no host name found for IP address 156.225.1.113 2026-08-29 05:17:59 no host name found for IP address 156.225.1.113 2026-08-29 05:18:00 no host name found for IP address 156.225.1.113 ... show less	Brute-Force
🇫🇷 EvoX	2026-08-29 09:16:32 (1 day ago)	🛡️ Honeypot [bsts-tpot-hive]: Unauthorized traffic (247 bytes of payload); 24800 [6] TCP	Port Scan
🇩🇪 sandra361	2026-08-29 03:22:02 (2 days ago)	Port scan detected: 8 attempts across 1 port (9810). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=156.225. ... show more Port scan detected: 8 attempts across 1 port (9810). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=156.225.1.113 LEN=97 TOS=0x00 PREC=0x00 TTL=58 ID=12442 DF PROTO=TCP SPT=52690 DPT=9810 WINDOW=1460 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇺🇸 chronos	2026-08-28 22:40:02 (2 days ago)	[AUTORAVALT][[28/08/2026 - 19:40:01 -03:00 UTC] Attack from [African Network Information Center] [15 ... show more [AUTORAVALT][[28/08/2026 - 19:40:01 -03:00 UTC] Attack from [African Network Information Center] [156.225.1.113]-[RANGE:156.225.1.0 - 156.225.1.255] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS bl] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇦🇺 LiftUp Hosting	2026-08-28 19:09:54 (2 days ago)	Honeypot hit: HTTP request on 9803	Hacking Bad Web Bot

Showing 1 to 15 of 310 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇧🇷 179.48.110.140

🇺🇸 172.68.27.216

🇺🇸 134.209.218.42

🇵🇭 103.186.138.29

🇫🇷 91.231.89.156

🇺🇸 65.49.1.66

🇱🇹 62.60.130.201

🇺🇸 35.229.61.155

🇪🇹 196.190.157.26

🇺🇸 172.68.26.14

🇵🇰 154.57.221.96

🇮🇷 94.184.17.125

🇱🇹 77.90.185.20

🇹🇼 35.201.244.11

🇺🇸 20.83.31.217

🇷🇴 2.57.122.53

🇺🇸 216.25.89.112

🇺🇸 195.184.76.175

🇯🇵 157.107.255.168