This IP address has been reported a total of
258
times from
112 distinct
sources.
156.225.1.33 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
{"reqId":"OFzqMMwTNjrlbbt16h0y","level":1,"time":"2026-08-20T07:54:50+02:00","remoteAddr":"156.225.1 ...
show more{"reqId":"OFzqMMwTNjrlbbt16h0y","level":1,"time":"2026-08-20T07:54:50+02:00","remoteAddr":"156.225.1.33","user":"--","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Trusted domain error. \"156.225.1.33\" tried to access using \"82.67.148.87:443\" as host.","userAgent":"--","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"rzUNoy2xtLORNGQCCVUp","level":1,"time":"2026-08-20T07:54:56+02:00","remoteAddr":"156.225.1.33","user":"--","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Trusted domain error. \"156.225.1.33\" tried to access using \"82.67.148.87:443\" as host.","userAgent":"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"q0ZIXxRqaYxPQbPlJA0j","level":1,"time":"2026-08-20T07:54:57+02:00","remoteAddr":"156.225.1.33","user":"--","app":"core","method":"GET","url":"/apps/theming/favicon?v=e20e5877","scriptName":"/index.php
...
show less
Connection to port 7547 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:7547
...
show moreConnection to port 7547 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:7547
Accept: */*
show less
Port Scan
Hacking
Anonymous
2026-08-19T20:11:29.667140+02:00 myserver sshd[2938622]: banner exchange: Connection from 156.225.1. ...
show more2026-08-19T20:11:29.667140+02:00 myserver sshd[2938622]: banner exchange: Connection from 156.225.1.33 port 46622: invalid format
2026-08-19T20:11:29.667140+02:00 myserver sshd[2938622]: banner exchange: Connection from 156.225.1.33 port 46622: invalid format
...
show less
Connection to port 8089 with data transfer.
Data preview: GET / HTTP/1.1
Host: 109.110.170.76:8089
...
show moreConnection to port 8089 with data transfer.
Data preview: GET / HTTP/1.1
Host: 109.110.170.76:8089
Accept: */*
show less
Connection to port 9313 with data transfer.
Data preview:
Port Scan
Hacking
Anonymous
Aug 19 07:18:29 home postfix/postscreen[816424]: PREGREET 12 after 0.2 from [156.225.1.33]:37934: eh ...
show moreAug 19 07:18:29 home postfix/postscreen[816424]: PREGREET 12 after 0.2 from [156.225.1.33]:37934: ehlo hello\r\n
Aug 19 07:18:31 home postfix/postscreen[816424]: PREGREET 23 after 0.19 from [156.225.1.33]:38426: EHLO mail.example.com\r\n
...
show less
Detectado por Wazuh SIEM en api-ux.com | Alertas: 6 | Nivel max: 5 | Agentes: web-apiux-2025 | Web s ...
show moreDetectado por Wazuh SIEM en api-ux.com | Alertas: 6 | Nivel max: 5 | Agentes: web-apiux-2025 | Web server 400 error code.
show less
Honeypot [fra-de-honeypot]: Unauthorized traffic (247 bytes of payload); 47001 [5] TCP
Reported by D ...
show moreHoneypot [fra-de-honeypot]: Unauthorized traffic (247 bytes of payload); 47001 [5] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less