156.225.20.83
Classification: Malicious
156.225.20.83 is a malicious IP address in Hong Kong, HK. 54 sightings from 6 threat sources (DDoS Attacker, HTTP Spammer), last seen 2026-11-07.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unknown malware | ThreatFox Abuse.ch | 2026-11-07 05:04:06 | 2026-11-07 05:25:07 | botnet malicious-activity | |
| DDoS Attacker | Blocklist.net.ua | 2026-07-17 16:02:36 | 2026-11-05 16:28:22 | attacker malicious-activity | |
| HTTP Spammer | StopForumSpam.com | 2026-07-19 09:04:43 | 2026-11-04 10:33:41 | attacker malicious-activity | |
| Mail Spammer | Blocklist.de | 2026-09-23 12:00:43 | 2026-09-30 12:01:04 | attacker malicious-activity | |
| IMAP Attacker | Blocklist.de | 2026-09-23 11:00:41 | 2026-09-30 11:01:01 | attacker malicious-activity | |
| VPN geonode | Maltiverse Threat Observatory | 2026-09-25 09:43:02 | 2026-09-26 09:45:42 | anomalous-activity anonymization | |
| Empty reason | Blocklist.net.ua | 2026-09-04 17:02:02 | 2026-09-11 17:02:02 | attacker malicious-activity | |
| Proxy | IPWhois.io | 2026-09-03 20:10:11 | 2026-09-03 20:10:11 | anonymization proxy |
Tags
abuse bot attacker imap pop3 sasl mail spam port:1080 port:1081 port:8888 port:443 modat darkswordWhois information
- AS name
- AS401696 Vapeline Technology
- Registrant
- Vapeline Technology
- City
- Hong Kong
- Country
- HK — Hong Kong 🇭🇰
- First indexed
- 2026-07-17 16:02:36
- Last updated
- 2026-11-07 05:25:07