JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 156.225.1.66

156.225.1.66 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 100%: ?

100%

ISP	AGOTOZ PTE. LTD
Usage Type	Commercial
ASN	AS9465
Domain Name	agotoz.com
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 156.225.1.66

Whois 156.225.1.66

IP Abuse Reports for 156.225.1.66:

This IP address has been reported a total of 67 times from 46 distinct sources. 156.225.1.66 was first reported on July 11th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 mnazibo	2026-08-29 01:45:08 (5 hours ago)	Date: Aug 29 04:40:38 2026 EAT \| Reported IP: 156.225.1.66 mod_security \| id: 920350 953100 959100 \| ... show more Date: Aug 29 04:40:38 2026 EAT \| Reported IP: 156.225.1.66 mod_security \| id: 920350 953100 959100 \| HK/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-08-28 06:42:12 (1 day ago)	2026-08-28T06:42:12+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-08-28T06:42:12+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=156.225.1.66 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=4882 DF PROTO=TCP SPT=35016 DPT=443 WINDOW=1460 RES=0x00 SYN URGP=0 2026-08-28T06:42:13+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=156.225.1.66 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=4883 DF PROTO=TCP SPT=35016 DPT=443 WINDOW=1460 RES=0x00 SYN URGP=0 2026-08-28T06:42:15+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=156.225.1.66 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=4884 DF PROTO=TCP SPT=35016 DPT=443 WINDOW=1460 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
Anonymous	2026-08-26 08:59:07 (2 days ago)	tls scan	Port Scan
🇷🇺 genokrad	2026-08-26 01:34:07 (3 days ago)	Website scan TCP 80/443 "/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gec"	Port Scan Web App Attack
🇩🇪 ManagedStack	2026-08-25 07:15:01 (4 days ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇩🇪 hero2026	2026-08-25 03:08:41 (4 days ago)	Blocked by Fail2ban	Web App Attack
🇬🇧 WebNiraj	2026-08-24 10:25:04 (4 days ago)	(mod_security) mod_security (id:949110) triggered by 156.225.1.66 (HK/Hong Kong/-): 5 in the last 36 ... show more (mod_security) mod_security (id:949110) triggered by 156.225.1.66 (HK/Hong Kong/-): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇸🇪 Per-Erik Runebert	2026-08-24 08:39:42 (4 days ago)	Excessive unauthorized requests: 443	Hacking
🇨🇭 4server	2026-08-23 19:04:08 (5 days ago)	[SunAug2321:04:04.3979792026][security2:error][pid50330:tid50378][client156.225.1.66:0]ModSecurity:A ... show more [SunAug2321:04:04.3979792026][security2:error][pid50330:tid50378][client156.225.1.66:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aid-web.ch\"][uri\"/\"][unique_id\"aotEJF0IQ7ERTj3gq3ew7QAAAEk\"] show less	Hacking Web App Attack
🇩🇪 Roper123	2026-08-23 11:55:39 (5 days ago)	Web exploits	Web App Attack
🇩🇪 bancix	2026-08-23 08:12:19 (5 days ago)	Heimdall NIDS: Automatic ban triggered. Reason: RST_LIMIT_EXCEEDED (5/5)	Port Scan
🇳🇱 Eric	2026-08-23 00:09:44 (6 days ago)	[Sat Aug 22 23:45:37.658103 2026] [security2:error] [pid 2896923:tid 2896923] [client 156.225.1.66:3 ... show more [Sat Aug 22 23:45:37.658103 2026] [security2:error] [pid 2896923:tid 2896923] [client 156.225.1.66:34674] [client 156.225.1.66] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "aoo0oTyODdph4FR1bRN_PQAAAAQ"] [Sat Aug 22 23:45:56.631735 2026] [security2:error] [pid 2686406:tid 2686406] [client 156.225.1.66:36396] [client 156.225.1.66] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITI ... show less	Hacking Web App Attack
Anonymous	2026-08-22 16:43:29 (6 days ago)	...	Bad Web Bot
🇲🇽 FenixHunter🐦‍🔥	2026-08-22 10:09:33 (6 days ago)	Blocked TLS Cipher Downgrade Attemp. Action Performed: DROP	Port Scan Hacking Bad Web Bot Web App Attack
Anonymous	2026-08-21 17:13:39 (1 week ago)	tls scan	Port Scan

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.141

🇧🇪 34.76.124.192

🇧🇷 192.185.176.174

🇧🇷 186.231.204.60

🇲🇦 160.177.247.10

🇫🇮 147.185.133.92

🇮🇹 88.147.30.59

🇺🇸 205.210.31.82

🇹🇼 198.235.24.101

🇺🇸 162.216.150.153

🇨🇳 139.199.80.137

🇨🇳 115.231.78.11

🇰🇷 106.243.155.71

🇮🇳 103.211.12.63

🇸🇬 45.78.235.121

🇺🇸 40.119.43.185

🇺🇸 5.161.82.170

🇹🇼 198.235.24.69

🇲🇾 180.75.244.247

🇺🇸 137.184.184.179