This IP address has been reported a total of
15
times from
9 distinct
sources.
156.225.1.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[rede-top188] 07/12/2026-09:03:11.576519, 156.225.1.42, Protocol: 17, ET DROP Dshield Block Listed S ...
show more[rede-top188] 07/12/2026-09:03:11.576519, 156.225.1.42, Protocol: 17, ET DROP Dshield Block Listed Source group 1
show less
Connection to port 8085 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155:8085
...
show moreConnection to port 8085 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155:8085
Accept: */*
show less
Honeypot hit: HTTP/1.1 request on 49153
POST http://[SOME-IP]:49153/upnp/control/basicevent1
POST D ...
show moreHoneypot hit: HTTP/1.1 request on 49153
POST http://[SOME-IP]:49153/upnp/control/basicevent1
POST Data: <?xml version="1.0" encoding="utf-8"?>
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<u:GetBinaryState xmlns:u="urn:Belkin:service:basicevent:1"></u:GetBinaryState>
</s:Body>
</s:Envelope>; 49153 [7] TCP
show less
Hacking
Bad Web Bot
Anonymous
Honeypot hit: Unauthorized traffic (247 bytes of payload); 8969 [5] TCP
Reported by: https://github. ...
show moreHoneypot hit: Unauthorized traffic (247 bytes of payload); 8969 [5] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot [fra-de-honeypot]: Unauthorized traffic (247 bytes of payload); 8912 [5] TCP
Reported by Di ...
show moreHoneypot [fra-de-honeypot]: Unauthorized traffic (247 bytes of payload); 8912 [5] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less