JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.225.1.61

156.225.1.61 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 51%: ?

51%

ISP	AGOTOZ PTE. LTD
Usage Type	Fixed Line ISP
ASN	AS9465
Domain Name	agotoz.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.225.1.61

Whois 156.225.1.61

IP Abuse Reports for 156.225.1.61:

This IP address has been reported a total of 9 times from 8 distinct sources. 156.225.1.61 was first reported on July 11th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-18 06:47:04 (18 hours ago)	[SatJul1808:46:59.7075022026][security2:error][pid3743400:tid3743672][client156.225.1.61:0]ModSecuri ... show more [SatJul1808:46:59.7075022026][security2:error][pid3743400:tid3743672][client156.225.1.61:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.aid-web.ch\"][uri\"/\"][unique_id\"alshY2eg_JTi5yJo8GTuzwAAAIk\"] show less	Hacking Web App Attack
🇩🇪 Roper123	2026-07-17 11:59:57 (1 day ago)	Web exploits	Web App Attack
🇺🇸 wteiken	2026-07-15 21:31:43 (3 days ago)	2026-07-15T17:31:32.028173-04:00 nostromo.teiken.net kernel: [240786.266745] syn_limit:IN=en-wan OUT ... show more 2026-07-15T17:31:32.028173-04:00 nostromo.teiken.net kernel: [240786.266745] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=156.225.1.61 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=1017 DF PROTO=TCP SPT=39208 DPT=443 WINDOW=1460 RES=0x00 SYN URGP=0 2026-07-15T17:31:35.100282-04:00 nostromo.teiken.net kernel: [240789.346353] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=156.225.1.61 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=19927 DF PROTO=TCP SPT=40698 DPT=443 WINDOW=1460 RES=0x00 SYN URGP=0 2026-07-15T17:31:36.101578-04:00 nostromo.teiken.net kernel: [240790.347649] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=156.225.1.61 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=19928 DF PROTO=TCP SPT=40698 DPT=443 WINDOW=1460 RES=0x00 SYN URGP=0 2026-07-15T17:31:38.033667-04:00 nostromo.teiken.net kernel: [240792.279718] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇪🇸 el-brujo	2026-07-15 20:54:28 (3 days ago)	07/15/2026-22:54:28.308369 156.225.1.61 Protocol: 6 ET DROP Dshield Block Listed Source group 1	Hacking
🇧🇪 cmbplf	2026-07-15 01:59:21 (3 days ago)	9.821 requests to many distinct domains in 1 hour (3w1d12h)	Brute-Force Bad Web Bot
🇪🇸 el-brujo	2026-07-14 21:22:10 (4 days ago)	07/14/2026-23:22:10.061590 156.225.1.61 Protocol: 6 ET DROP Dshield Block Listed Source group 1	Hacking
Anonymous	2026-07-14 10:04:18 (4 days ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇫🇷 pm33	2026-07-13 19:05:13 (5 days ago)	Unsolicited connection attempts or aggressive port scan.	Port Scan
🇸🇪 NordhTech	2026-07-11 14:30:15 (1 week ago)	More than 3 malicious connection attempts, trying port(s) 1234/tcp, then blocked from services ...	Port Scan Hacking

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::ad

🇧🇪 198.235.24.229

🇵🇱 194.180.48.31

🇺🇸 162.241.50.50

🇺🇸 162.216.150.104

🇮🇩 152.32.154.44

🇬🇪 212.58.103.91

🇺🇸 205.210.31.101

🇺🇸 172.236.228.198

🇮🇳 172.217.34.89

🇨🇳 120.234.232.184

🇰🇷 118.220.149.121

🇳🇱 77.239.124.252

🇺🇸 65.49.1.238

🇺🇸 65.49.1.50

🇺🇸 64.23.250.24

🇬🇧 35.203.211.250

🇬🇧 35.203.210.94

🇺🇸 32.199.191.214

🇹🇳 197.14.91.94