JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.161.240.216

113.161.240.216 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 2%: ?

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Mobile ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.161.240.216

Whois 113.161.240.216

IP Abuse Reports for 113.161.240.216:

This IP address has been reported a total of 15 times from 13 distinct sources. 113.161.240.216 was first reported on November 24th 2020, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-06-06 16:40:22 (2 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 bigorre.org	2026-06-05 14:55:01 (2 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-22 23:02:53 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 113.161.240.216 (static.vnpt.vn): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 113.161.240.216 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 19:02:45.365887 2026] [security2:error] [pid 22172:tid 22172] [client 113.161.240.216:46722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.baliaccommodationpadangpadang.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.baliaccommodationpadangpadang.com"] [uri "/what-we-offer/airport-shuttle/[email protected]"] [unique_id "acB1FTp7kHGYgBGoXWQugAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 00:53:28 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇸 ISPLtd	2022-12-29 22:09:10 (3 years ago)	Dec 29 22:22:14 SRC=113.161.240.216 PROTO=TCP SPT=60482 DPT=2020 SYN Dec 29 22:22:16 SRC=113.161.240 ... show more Dec 29 22:22:14 SRC=113.161.240.216 PROTO=TCP SPT=60482 DPT=2020 SYN Dec 29 22:22:16 SRC=113.161.240.216 PROTO=TCP SPT=60495 DPT=2020 SYN Dec 29 22:22:17 SRC=113.161.240.216 PROTO=TCP SPT=60482 DPT=2020 ... show less	Port Scan
🇷🇸 Smel	2022-01-11 05:04:15 (4 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇲🇾 syokadmin	2022-01-01 15:17:46 (4 years ago)	(smtpauth) Failed SMTP AUTH login from 113.161.240.216 (VN/Vietnam/static.vnpt.vn): 2 in the last 36 ... show more (smtpauth) Failed SMTP AUTH login from 113.161.240.216 (VN/Vietnam/static.vnpt.vn): 2 in the last 3600 secs show less	Brute-Force
🇰🇷 gjan.info	2021-05-31 05:00:29 (5 years ago)	Auto Detect Rule! proto TCP (SYN), 113.161.240.216:62055->gjan.info:8291, len 52	Port Scan
🇺🇸 Just Me	2021-03-26 22:41:47 (5 years ago)	2021-03-26T19:41:43.510423fedora32server.home.net sshd[138881]: Invalid user admin from 113.161.240. ... show more 2021-03-26T19:41:43.510423fedora32server.home.net sshd[138881]: Invalid user admin from 113.161.240.216 port 56299 2021-03-26T19:41:43.716193fedora32server.home.net sshd[138881]: Failed none for invalid user admin from 113.161.240.216 port 56299 ssh2 ... show less	SSH
🇬🇧 connorw600	2021-03-10 00:09:08 (5 years ago)	Mar 10 05:09:00 ubuntu-srv-1 sshd[2286698]: Invalid user web from 113.161.240.216 port 59720 Mar 10 ... show more Mar 10 05:09:00 ubuntu-srv-1 sshd[2286698]: Invalid user web from 113.161.240.216 port 59720 Mar 10 05:09:01 ubuntu-srv-1 sshd[2286698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.240.216 Mar 10 05:09:00 ubuntu-srv-1 sshd[2286698]: Invalid user web from 113.161.240.216 port 59720 Mar 10 05:09:02 ubuntu-srv-1 sshd[2286698]: Failed password for invalid user web from 113.161.240.216 port 59720 ssh2 Mar 10 05:09:07 ubuntu-srv-1 sshd[2286809]: Invalid user web from 113.161.240.216 port 60514 ... show less	Brute-Force SSH
🇬🇧 connorw600	2021-03-09 23:48:25 (5 years ago)	Mar 10 04:48:17 ubuntu-srv-1 sshd[2277606]: Invalid user admin from 113.161.240.216 port 54587 Mar 1 ... show more Mar 10 04:48:17 ubuntu-srv-1 sshd[2277606]: Invalid user admin from 113.161.240.216 port 54587 Mar 10 04:48:17 ubuntu-srv-1 sshd[2277606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.240.216 Mar 10 04:48:17 ubuntu-srv-1 sshd[2277606]: Invalid user admin from 113.161.240.216 port 54587 Mar 10 04:48:19 ubuntu-srv-1 sshd[2277606]: Failed password for invalid user admin from 113.161.240.216 port 54587 ssh2 Mar 10 04:48:25 ubuntu-srv-1 sshd[2277629]: Invalid user admin from 113.161.240.216 port 55453 ... show less	Brute-Force SSH
🇯🇵 stfw	2021-02-06 02:11:18 (5 years ago)	8728/tcp 22/tcp 8291/tcp... [2021-02-06]4pkt,3pt.(tcp)	Port Scan
🇨🇭 master.arknet.ch	2020-12-16 09:44:49 (5 years ago)	Dec 16 15:44:46 choloepus sshd[4564]: Did not receive identification string from 113.161.240.216 por ... show more Dec 16 15:44:46 choloepus sshd[4564]: Did not receive identification string from 113.161.240.216 port 53426 Dec 16 15:44:46 choloepus sshd[4565]: Did not receive identification string from 113.161.240.216 port 53427 Dec 16 15:44:49 choloepus sshd[4571]: Invalid user user from 113.161.240.216 port 53695 ... show less	Brute-Force SSH
🇩🇪 Hiffo	2020-12-16 09:01:30 (5 years ago)	1608127289 - 12/16/2020 15:01:29 Host: 113.161.240.216/113.161.240.216 Port: 23 TCP Blocked	Port Scan
🇫🇷 security.rdmc.fr	2020-11-24 18:22:36 (5 years ago)	Automatic report - Port Scan Attack	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.176.112.172

🇺🇸 209.145.56.119

🇦🇷 191.97.99.211

🇺🇸 136.114.17.50

🇺🇸 134.122.125.153

🇮🇩 103.242.105.66

🇱🇻 81.30.98.49

🇻🇪 38.150.94.75

🇺🇸 34.106.179.142

🇺🇸 34.46.125.108

🇨🇦 23.234.122.112

🇺🇸 20.80.105.157

🇪🇸 188.77.108.250

🇨🇱 186.189.85.127

🇺🇸 154.83.197.121

🇸🇬 152.42.177.64

🇮🇹 151.74.222.154

🇨🇳 118.81.192.103

🇩🇪 93.236.58.245

🇺🇸 47.88.56.201