JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.225.1.18

156.225.1.18 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	AGOTOZ PTE. LTD
Usage Type	Fixed Line ISP
ASN	AS9465
Domain Name	agotoz.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.225.1.18

Whois 156.225.1.18

IP Abuse Reports for 156.225.1.18:

This IP address has been reported a total of 35 times from 26 distinct sources. 156.225.1.18 was first reported on July 9th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 sandra361	2026-07-14 14:45:22 (2 hours ago)	Port scan detected: 46 attempts across 1 port (111). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=156.225. ... show more Port scan detected: 46 attempts across 1 port (111). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=156.225.1.18 LEN=40 TOS=0x14 PREC=0x00 TTL=56 ID=15871 DF PROTO=TCP SPT=61576 DPT=111 WINDOW=1460 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇬🇧 sandra361	2026-07-14 05:37:33 (11 hours ago)	Port scan detected: 32 attempts across 1 port (9031). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=156 ... show more Port scan detected: 32 attempts across 1 port (9031). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=156.225.1.18 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=57852 DF PROTO=TCP SPT=4670 DPT=9031 WINDOW=1460 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇨🇦 Luhte	2026-07-14 04:29:03 (13 hours ago)	Unsolicited TCP connection from 156.225.1.18 to port 0 at 2026-07-14T04:29:03Z. Source IP completed ... show more Unsolicited TCP connection from 156.225.1.18 to port 0 at 2026-07-14T04:29:03Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇧🇬 MazenHost	2026-07-14 02:23:40 (15 hours ago)	1783995820 - 07/14/2026 05:23:40 Host: 156.225.1.18/156.225.1.18 Port: 111 TCP Blocked ...	Port Scan
🇧🇬 MazenHost	2026-07-14 01:51:53 (15 hours ago)	1783993912 - 07/14/2026 04:51:52 Host: 156.225.1.18/156.225.1.18 Port: 111 TCP Blocked ...	Port Scan
🇫🇷 EvoX	2026-07-13 19:32:28 (22 hours ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (44 bytes of payload); 1194 [6] TCP	Port Scan
🇺🇸 drewf.ink	2026-07-13 19:12:04 (22 hours ago)	[19:12] Port scanning. Port(s) scanned: TCP/995	Port Scan
🇺🇸 chrisj	2026-07-13 19:08:22 (22 hours ago)	2026-07-13T19:08:02.883362+00:00 aws.vandogh.org postfix/submission/smtpd[108869]: improper command ... show more 2026-07-13T19:08:02.883362+00:00 aws.vandogh.org postfix/submission/smtpd[108869]: improper command pipelining after CONNECT from unknown[156.225.1.18]: \377\000\000\000\000\000\000\000\000\177\003\001NULL\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000 2026-07-13T19:08:17.308213+00:00 aws.vandogh.org postfix/submission/smtpd[108869]: improper command pipelining after CONNECT from unknown[156.225.1.18]: \377\000\000\000\000\000\000\000\000\177\003\001NULL\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000 2026-07-13T19:08:21.791218+00:00 aws.vandogh.org postfix/submission/smtpd[108869]: disconnect from unknown[156.225.1.18] ehlo=1 auth=0/1 help=1 commands=2/3 ... show less	Brute-Force
🇳🇱 donarev419	2026-07-13 08:17:58 (1 day ago)	Connection to port 541 with data transfer. Data preview:	Port Scan Hacking
Anonymous	2026-07-13 06:55:38 (1 day ago)	Honeypot hit: Unauthorized traffic (247 bytes of payload); 9023 [5] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (247 bytes of payload); 9023 [5] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 TimesZ	2026-07-13 01:53:10 (1 day ago)	Fail2ban sshd jail	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-13 01:20:25 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 Carltonfsck	2026-07-13 01:13:26 (1 day ago)	Jul 13 01:13:21 ssh sshd-session[59908]: Unable to negotiate with 156.225.1.18 port 46746: no matchi ... show more Jul 13 01:13:21 ssh sshd-session[59908]: Unable to negotiate with 156.225.1.18 port 46746: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] Jul 13 01:13:23 ssh sshd-session[59910]: Unable to negotiate with 156.225.1.18 port 47208: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] Jul 13 01:13:24 ssh sshd-session[59912]: Unable to negotiate with 156.225.1.18 port 47856: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] ... show less	Brute-Force SSH
🇵🇱 Wepted	2026-07-13 00:03:06 (1 day ago)	Port scan detected by honeypot	Port Scan Hacking
🇧🇷 diego	2026-07-13 00:02:26 (1 day ago)	[arem1] 2026-07-12 23:45:48, Client: 156.225.1.18, Protocol: 6, Unauthorized activity to HTTP: GET / ... show more [arem1] 2026-07-12 23:45:48, Client: 156.225.1.18, Protocol: 6, Unauthorized activity to HTTP: GET /v1/vector/collections/describe show less	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 172.253.13.145

🇧🇷 201.20.88.107

🇺🇸 185.191.171.9

🇩🇪 172.105.131.142

🇨🇳 112.50.77.175

🇻🇳 103.154.63.62

🇨🇦 85.217.149.51

🇺🇸 74.7.243.234

🇨🇳 58.242.60.105

🇺🇸 45.79.181.251

🇹🇭 8.213.229.126

🇺🇸 162.35.161.228

🇮🇳 122.168.197.138

🇨🇳 116.179.32.74

🇭🇰 42.200.66.164

🇳🇱 195.178.110.228

🇺🇸 191.101.33.115

🇹🇷 185.124.84.114

🇺🇸 104.243.42.167

🇮🇩 103.186.0.79