156.225.72.85 Threat Intelligence and Host Information

Jun 24, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 156.225.72.85 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 5/100

Host and Network Information

  • Country: United States
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: Anonymous Proxy
  • Passive DNS Results: xmk5k2nv.icu y9fg3l9z.icu ht6f9b4h.icu lgi9mn5q.icu vjwmcu5v.icu eagq06lh.icu v8h3je5y.icu ojyv8awz.icu d1rz6tuw.icu on2kaq5b.icu e4g6rkuz.icu hn2pax8u.icu c1mj2pmm.icu 1ywy180s.icu k13mbsd9.icu polyudvm.icu 6zi894fo.icu 941815j3.icu ziltdjae.icu z2lkvaw9.icu 3h8l0u0r.icu bh16lary.icu cpv1gj8q.icu itov3253.icu 4zs6yjws.icu ssgkgurs.icu zyzskxff.icu bg5p7ojt.icu vd232moa.icu aommbhmz.icu www.tqsdxqvt.icu tqsdxqvt.icu www.hvymaoo7.icu hvymaoo7.icu oo26848.vip xg22866.vip sx84060.vip bxj88424.vip xg99919.vip

Malware Detected on Host

Count: 1 7efd1141e41212c7c2dee204fd6a28cc1239ea76d083817be81368c9a8d12375

Open Ports Detected

2052 2053 2082 2083 2086 2087 2095 443 80 8080 8443 8880

Map

Whois Information

  • NetRange: 156.225.0.0 - 156.225.255.255
  • CIDR: 156.225.0.0/16
  • NetName: AFRINIC-ERX-156-225-0-0
  • NetHandle: NET-156-225-0-0-1
  • Parent: NET156 (NET-156-0-0-0-0)
  • NetType: Transferred to AfriNIC
  • OriginAS:
  • Organization: African Network Information Center (AFRINIC)
  • RegDate: 2010-11-03
  • Updated: 2010-11-17
  • Comment: This IP address range is under AFRINIC responsibility.
  • Comment: Please see http://www.afrinic.net/ for further details,
  • Ref: https://rdap.arin.net/registry/ip/156.225.0.0
  • OrgName: African Network Information Center
  • OrgId: AFRINIC
  • Address: Level 11ABC
  • Address: Raffles Tower
  • Address: Lot 19, Cybercity
  • City: Ebene
  • StateProv:
  • PostalCode:
  • Country: MU
  • RegDate: 2004-05-17
  • Updated: 2015-05-04
  • Comment: AfriNIC - http://www.afrinic.net
  • Comment: The African & Indian Ocean Internet Registry
  • Ref: https://rdap.arin.net/registry/entity/AFRINIC
  • OrgTechHandle: GENER11-ARIN
  • OrgTechName: Generic POC
  • OrgTechPhone: +230 4666616
  • OrgTechEmail: abusepoc@afrinic.net
  • OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
  • OrgAbuseHandle: GENER11-ARIN
  • OrgAbuseName: Generic POC
  • OrgAbusePhone: +230 4666616
  • OrgAbuseEmail: abusepoc@afrinic.net
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN
  • inetnum: 156.225.72.0 - 156.225.72.255
  • netname: GS_TECHNOLOGIES_LIMITED
  • descr: GS TECHNOLOGIES LIMITED
  • country: US
  • admin-c: CIS1-AFRINIC
  • tech-c: CIS1-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: CIL1-MNT
  • mnt-by: LARUS-SERVICE-MNT
  • parent: 156.224.0.0 - 156.255.255.255
  • person: Cloud Innovation Support
  • address: Ebene
  • address: MU
  • address: Mahe
  • address: Seychelles
  • phone: tel:+248-4-610-795
  • nic-hdl: CIS1-AFRINIC
  • abuse-mailbox: abuse@cloudinnovation.org
  • mnt-by: CIL1-MNT
  • route: 156.225.72.0/24
  • descr: GS TECHNOLOGIES LIMITED
  • origin: AS209242
  • mnt-by: LARUS-SERVICE-MNT

Links to attack logs

anonymous-proxy-ip-list-2025-06-23 anonymous-proxy-ip-list-2025-06-22 anonymous-proxy-ip-list-2025-06-24

Share on: