JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.225.1.109

156.225.1.109 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Agotoz HK Ltd
Usage Type	Fixed Line ISP
ASN	AS9465
Domain Name	agotoz.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.225.1.109

Whois 156.225.1.109

IP Abuse Reports for 156.225.1.109:

This IP address has been reported a total of 29 times from 21 distinct sources. 156.225.1.109 was first reported on July 9th 2026, and the most recent report was 24 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Wepted	2026-07-13 00:02:53 (24 minutes ago)	Port scan detected by honeypot	Port Scan Hacking
🇺🇸 donarev419	2026-07-13 00:00:41 (26 minutes ago)	Connection to port 8080 with data transfer. Data preview: �	Port Scan Hacking
🇺🇸 Bankbook8585	2026-07-12 19:13:18 (5 hours ago)	T-Pot honeypot \| Dionaea honeypot: ftpd	Port Scan Hacking
🇬🇧 sandra361	2026-07-12 19:02:33 (5 hours ago)	Port scan detected: 14 attempts across 1 port (51007). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=15 ... show more Port scan detected: 14 attempts across 1 port (51007). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=156.225.1.109 LEN=99 TOS=0x00 PREC=0x00 TTL=49 ID=6289 DF PROTO=TCP SPT=56688 DPT=51007 WINDOW=1460 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇩🇪 femboy.cat	2026-07-12 17:34:19 (6 hours ago)	Port scan to tcp/8089 from 156.225.1.109	Brute-Force
Anonymous	2026-07-12 16:25:37 (8 hours ago)	Honeypot hit: Unauthorized traffic (247 bytes of payload); 58000 [5] TCP Reported by: https://github ... show more Honeypot hit: Unauthorized traffic (247 bytes of payload); 58000 [5] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 jbouwh	2026-07-12 16:01:17 (8 hours ago)	2026-07-12T18:00:53.631901+02:00 [redacted] postfix/submission/smtpd[3079262]: improper command pipe ... show more 2026-07-12T18:00:53.631901+02:00 [redacted] postfix/submission/smtpd[3079262]: improper command pipelining after CONNECT from unknown[156.225.1.109]: 377000000000000000000000000177003001NULL000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 2026-07-12T18:01:05.010658+02:00 [redacted] postfix/submission/smtpd[3079262]: improper command pipelining after CONNECT from unknown[156.225.1.109]: 377000000000000000000000000177003001NULL000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 2026-07-12T18:01:17.391371+02:00 [redacted] postfix/submission/smtpd[3079262]: improper command pipelining after CONNECT from unknown[156.225.1.109]: 377000000000000000000000000177003001NULL000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 show less	Email Spam
🇩🇪 itak	2026-07-12 15:43:27 (8 hours ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ... show more postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP. show less	DDoS Attack Port Scan
🇦🇺 LiftUp Hosting	2026-07-12 15:39:59 (8 hours ago)	Honeypot hit: Unauthorized traffic (247 bytes of payload); 58603 [5] TCP	Port Scan
🇩🇪 ut-addicted.com	2026-07-12 06:51:40 (17 hours ago)	Jul 12 08:51:38 www postfix/smtpd\[31998\]: lost connection after CONNECT from unknown\[156.225.1.10 ... show more Jul 12 08:51:38 www postfix/smtpd\[31998\]: lost connection after CONNECT from unknown\[156.225.1.109\] show less	Brute-Force Hacking
🇳🇱 donarev419	2026-07-12 06:37:19 (17 hours ago)	Connection to port 9016 with data transfer. Data preview:	Port Scan Hacking
🇫🇷 thecocasio	2026-07-11 16:31:42 (1 day ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 27017 (MongoDB) on a host runni ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 27017 (MongoDB) on a host running no such service. Automated port-scan detection at 2026-07-11T16:31:42Z. show less	Port Scan
🇭🇰 sandra361	2026-07-11 12:20:21 (1 day ago)	Port scan detected: 24 attempts across 1 port (8990). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=156.225 ... show more Port scan detected: 24 attempts across 1 port (8990). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=156.225.1.109 LEN=40 TOS=0x14 PREC=0x00 TTL=56 ID=9638 DF PROTO=TCP SPT=43878 DPT=8990 WINDOW=1460 RES=0x00 ACK URGP=0 show less	Port Scan
🇺🇸 sandra361	2026-07-11 10:57:44 (1 day ago)	Port scan detected: 26 attempts across 1 port (38241). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=156. ... show more Port scan detected: 26 attempts across 1 port (38241). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=156.225.1.109 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=57693 DF PROTO=TCP SPT=59034 DPT=38241 WINDOW=1460 RES=0x00 ACK URGP=0 show less	Port Scan
Anonymous	2026-07-11 08:19:37 (1 day ago)	Honeypot hit: Unauthorized traffic (247 bytes of payload); 32677 [5] TCP Reported by: https://github ... show more Honeypot hit: Unauthorized traffic (247 bytes of payload); 32677 [5] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.93

🇨🇳 182.44.39.49

🇩🇪 165.154.164.112

🇸🇬 47.84.140.62

🇺🇸 17.246.19.84

🇺🇸 2607:f8b0:4004:c25::122

🇨🇳 150.255.99.187

🇺🇸 147.185.132.195

🇸🇦 146.251.204.187

🇷🇴 92.118.39.49

🇲🇩 85.120.81.241

🇺🇸 57.141.0.50

🇩🇪 54.37.74.179

🇱🇹 45.227.254.170

🇰🇷 211.223.107.86

🇧🇪 198.235.24.239

🇨🇴 190.0.63.226

🇺🇸 178.93.39.243

🇧🇷 177.71.83.125

🇺🇸 165.154.162.142