JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.166.121.118

113.166.121.118 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 49%: ?

49%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Hostname(s)	static.vnpt.vn
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Vung Tau, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.166.121.118

Whois 113.166.121.118

IP Abuse Reports for 113.166.121.118:

This IP address has been reported a total of 10 times from 9 distinct sources. 113.166.121.118 was first reported on April 13th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-07-26 22:40:06 (1 hour ago)	113.166.121.118 (VN/Vietnam/static.vnpt.vn), 5 distributed sshd attacks on account [root] in the las ... show more 113.166.121.118 (VN/Vietnam/static.vnpt.vn), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 26 17:39:40 15660 sshd[17968]: Failed password for root from 113.166.121.118 port 54090 ssh2 Jul 26 17:34:41 15660 sshd[15181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.48.181.12 user=root Jul 26 17:34:43 15660 sshd[15181]: Failed password for root from 188.48.181.12 port 2886 ssh2 Jul 26 17:39:38 15660 sshd[17968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.166.121.118 user=root Jul 26 16:54:49 15660 sshd[25278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.108 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇫🇷 adnscom.net	2026-07-26 22:37:22 (1 hour ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇯🇵 mkaraki	2026-07-26 20:16:53 (3 hours ago)	1785097012 # Service_probe # SIGNATURE_SEND # source_ip:113.166.121.118 # dst_port:10808 ...	Port Scan
🇳🇱 Alimed	2026-07-26 15:14:38 (8 hours ago)	[20260726 17:14:38] [113.166.121.118] connecting [20260726 17:14:38] [113.166.121.118] connected [20 ... show more [20260726 17:14:38] [113.166.121.118] connecting [20260726 17:14:38] [113.166.121.118] connected [20260726 17:14:39] [113.166.121.118] user 'azureuser' sent [20260726 17:14:39] [113.166.121.118] password sent, failed... [20260726 17:14:39] [113.166.121.118] disconnected (azureuser) [20260726 17:16:30] [113.166.121.118] connecting [20260726 17:16:30] [113.166.121.118] connected [20260726 17:16:32] [113.166.121.118] user 'azureuser' sent [20260726 17:16:32] [113.166.121.118] password sent, failed... [20260726 17:16:32] [113.166.121.118] ip is temporarily banned... show less	Brute-Force SSH
🇩🇪 NetWatch	2026-07-26 14:10:10 (9 hours ago)	The IP 113.166.121.118 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇰🇷 tjx	2026-07-26 11:08:51 (12 hours ago)	Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: Aa123@ Session: ... show more Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: Aa123@ Session: ee50c71d show less	Brute-Force SSH
🇮🇪 bittiguru.fi	2026-07-26 10:50:17 (13 hours ago)	Jul 26 13:43:50 pkdns2 sshd\[2780\]: Address 113.166.121.118 maps to static.vnpt.vn, but this does n ... show more Jul 26 13:43:50 pkdns2 sshd\[2780\]: Address 113.166.121.118 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jul 26 13:43:50 pkdns2 sshd\[2780\]: Invalid user azureuser from 113.166.121.118Jul 26 13:43:52 pkdns2 sshd\[2780\]: Failed password for invalid user azureuser from 113.166.121.118 port 50037 ssh2Jul 26 13:50:13 pkdns2 sshd\[3178\]: Address 113.166.121.118 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jul 26 13:50:13 pkdns2 sshd\[3178\]: Invalid user azureuser from 113.166.121.118Jul 26 13:50:15 pkdns2 sshd\[3178\]: Failed password for invalid user azureuser from 113.166.121.118 port 65254 ssh2 ... show less	Brute-Force SSH
🇦🇺 tjx	2026-07-26 10:32:26 (13 hours ago)	Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: qwert12345!@#$% ... show more Honeypot brute-force via Cowrie SSH/Telnet honeypot. Username: azureuser \| Password: qwert12345!@#$% Session: 02b6c145 show less	Brute-Force SSH
🇩🇪 anycast_ac	2026-07-22 22:22:34 (4 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'nodeadmin':b'1' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'nodeadmin' : '1' show less	DDoS Attack
🇫🇷 bigorre.org	2026-04-13 10:07:55 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.94

🇮🇷 185.94.99.102

🇳🇴 185.12.59.118

🇩🇪 69.5.169.238

🇩🇪 51.75.64.35

🇺🇸 20.118.240.71

🇺🇸 2603:1030:40c:f::7f4

🇫🇷 2001:861:4446:71c0:1da9:f728:72b3:1d6d

🇹🇳 196.178.10.13

🇺🇸 192.34.62.126

🇵🇦 190.32.225.183

🇺🇸 172.182.193.130

🇻🇪 154.218.252.47

🇺🇸 147.185.132.69

🇦🇷 131.221.65.244

🇺🇸 128.85.113.135

🇻🇳 123.22.173.15

🇨🇳 113.108.13.168

🇳🇱 95.85.226.199

🇨🇦 85.217.149.53