JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.164.66.61

113.164.66.61 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 0%: ?

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Phan Thiet, Lam Dong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.164.66.61

Whois 113.164.66.61

IP Abuse Reports for 113.164.66.61:

This IP address has been reported a total of 94 times from 40 distinct sources. 113.164.66.61 was first reported on March 4th 2021, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-10-06 13:39:25 (10 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 TPI-Abuse	2025-09-21 13:59:29 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 113.164.66.61 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 113.164.66.61 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 09:59:22.064744 2025] [security2:error] [pid 1616024:tid 1616057] [client 113.164.66.61:50274] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gryphix.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gryphix.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNAEuig_LGXkGsFBzfNBPgAAARg"], referer: https://gryphix.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2025-09-16 13:20:57 (11 months ago)	113.164.66.61 (VN/Vietnam/static.vnpt.vn), 5 distributed SMTP Logins on account [account@unitedcredi ... show more 113.164.66.61 (VN/Vietnam/static.vnpt.vn), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇺🇸 nowyouknow	2025-09-14 11:04:22 (11 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-09-09 14:45:27 (11 months ago)	(From [email protected])	Phishing Web Spam
Anonymous	2025-09-06 18:12:08 (11 months ago)	Spamming registration page	Web Spam
🇳🇱 antikirra	2025-08-30 02:07:19 (11 months ago)	Proxy Port Scanning	Port Scan
🇺🇸 nowyouknow	2025-08-29 08:10:33 (11 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-08-29 07:23:45 (11 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-08-15 00:17:50 (1 year ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-08-12 07:38:42 (1 year ago)	(From [email protected])	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-07-31 17:20:33 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 113.164.66.61 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 113.164.66.61 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 31 13:20:25.343651 2025] [security2:error] [pid 462:tid 462] [client 113.164.66.61:40200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|harwoodmechanical.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harwoodmechanical.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIul2V-xM1l0pBILSdZ5MwAAABA"], referer: https://harwoodmechanical.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-07-22 16:01:22 (1 year ago)	(From [email protected])	Phishing Web Spam
🇩🇪 Renaud Dubois	2025-07-10 19:27:29 (1 year ago)	113.164.66.61 - - [10/Jul/2025:21:26:16 +0200] "POST /wp-login.php HTTP/1.1" 200 7179 "https://www.a ... show more 113.164.66.61 - - [10/Jul/2025:21:26:16 +0200] "POST /wp-login.php HTTP/1.1" 200 7179 "https://www.agencelebrun.be/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 113.164.66.61 - - [10/Jul/2025:21:26:26 +0200] "POST /wp-login.php HTTP/1.1" 200 7195 "https://www.agencelebrun.be/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 113.164.66.61 - - [10/Jul/2025:21:26:37 +0200] "POST /wp-login.php HTTP/1.1" 200 7183 "https://www.agencelebrun.be/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 113.164.66.61 - - [10/Jul/2025:21:26:59 +0200] "POST /wp-login.php HTTP/1.1" 200 7196 "https://www.agencelebrun.be/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-07-10 03:27:55 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 113.164.66.61 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 113.164.66.61 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 23:27:50.956039 2025] [security2:error] [pid 10306:tid 10330] [client 113.164.66.61:45970] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|teddysdeli.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "teddysdeli.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aG8zNnrE0wKK2JM43Cmg-AAAAEw"], referer: https://teddysdeli.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.110

🇹🇭 184.22.210.218

🇦🇺 180.181.244.244

🇨🇳 115.190.181.18

🇦🇪 94.204.212.135

🇺🇸 64.62.197.111

🇩🇪 43.157.22.57

🇬🇧 35.203.211.93

🇫🇷 2001:41d0:404:200::6d65

🇰🇷 218.149.228.148

🇧🇾 178.126.120.31

🇺🇸 174.27.131.214

🇺🇸 148.153.56.170

🇺🇸 147.185.132.79

🇧🇩 103.60.204.198

🇷🇴 80.94.92.55

🇺🇸 34.197.70.90

🇨🇳 202.107.164.66

🇳🇱 185.136.15.13

🇺🇸 162.216.149.36