JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

113.179.14.104

Neutral Activity

Abuse confidence score ?

0% Low Risk

18 reports

10 reporters · latest 11 months ago

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Vinh, Nghe An Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

113.179.14.104 has been reported 18 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 113.179.14.104

Export CSV

This IP address has been reported a total of 18 times from 10 distinct sources. 113.179.14.104 was first reported on February 24th 2021, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2025-10-23 07:05:29 (11 months ago)	[Thu Oct 23 13:37:10.908020 2025] [security2:error] [pid 604285:tid 140157255562944] [client 113.179 ... show more [Thu Oct 23 13:37:10.908020 2025] [security2:error] [pid 604285:tid 140157255562944] [client 113.179.14.104:47852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/4012-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-tahun-2020/555558380-prakiraan-dasarian-d..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all ... show less	Hacking Web App Attack
🇪🇸 samelarmain.com	2021-11-20 19:36:08 (4 years ago)	Mar 29 00:33:15 WHD8 postfix/smtpd\[80197\]: warning: unknown\[113.179.14.104\]: SASL LOGIN authenti ... show more Mar 29 00:33:15 WHD8 postfix/smtpd\[80197\]: warning: unknown\[113.179.14.104\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Hacking Brute-Force
🇪🇸 samelarmain.com	2021-05-13 14:54:47 (5 years ago)	Mar 29 00:33:15 WHD8 postfix/smtpd\[80197\]: warning: unknown\[113.179.14.104\]: SASL LOGIN authenti ... show more Mar 29 00:33:15 WHD8 postfix/smtpd\[80197\]: warning: unknown\[113.179.14.104\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Hacking Brute-Force
🇪🇸 samelarmain.com	2021-04-28 12:07:01 (5 years ago)	Mar 29 00:33:15 WHD8 postfix/smtpd\[80197\]: warning: unknown\[113.179.14.104\]: SASL LOGIN authenti ... show more Mar 29 00:33:15 WHD8 postfix/smtpd\[80197\]: warning: unknown\[113.179.14.104\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Hacking Brute-Force
🇪🇸 samelarmain.com	2021-04-06 01:49:25 (5 years ago)	Apr 6 07:49:24 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 60 secs\): user= ... show more Apr 6 07:49:24 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 60 secs\): user=\<[email protected]\>, method=PLAIN, rip=113.179.14.104, lip=10.64.89.208, TLS: Disconnected, session=\<MDDZXEe/Tb1xsw5o\> ... show less	Hacking Brute-Force
🇪🇸 samelarmain.com	2021-04-06 00:14:20 (5 years ago)	Apr 6 06:14:18 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user= ... show more Apr 6 06:14:18 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 59 secs\): user=\<[email protected]\>, method=PLAIN, rip=113.179.14.104, lip=10.64.89.208, TLS: Disconnected, session=\<HkHFCEa/jpBxsw5o\> ... show less	Hacking Brute-Force
Anonymous	2021-04-02 15:19:05 (5 years ago)	113.179.14.104 (VN/Vietnam/static.vnpt.vn), 5 distributed imapd attacks on account [anna.mordon@epp- ... show more 113.179.14.104 (VN/Vietnam/static.vnpt.vn), 5 distributed imapd attacks on account [[email protected]] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK show less	Brute-Force
🇪🇸 samelarmain.com	2021-04-02 04:11:40 (5 years ago)	Apr 2 10:11:39 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\ ... show more Apr 2 10:11:39 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\<[email protected]\>, method=PLAIN, rip=113.179.14.104, lip=10.64.89.208, TLS, session=\<zXKA5fi+D+pxsw5o\> ... show less	Hacking Brute-Force
🇪🇸 samelarmain.com	2021-04-02 00:12:39 (5 years ago)	Apr 2 06:12:37 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 58 secs\): user= ... show more Apr 2 06:12:37 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 58 secs\): user=\<teston\>, method=PLAIN, rip=113.179.14.104, lip=10.64.89.208, TLS: Disconnected, session=\<JYlyi/W+Wolxsw5o\> ... show less	Hacking Brute-Force
🇨🇭 ale	2021-04-01 14:00:06 (5 years ago)	SMTP bruteforce auth scanning - failed login with invalid user	Brute-Force
🇪🇸 samelarmain.com	2021-04-01 06:20:53 (5 years ago)	Apr 1 12:20:52 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 58 secs\): user= ... show more Apr 1 12:20:52 WHD8 dovecot: imap-login: Disconnected \(auth failed, 5 attempts in 58 secs\): user=\<[email protected]\>, method=PLAIN, rip=113.179.14.104, lip=10.64.89.208, TLS, session=\<10qYkua+9Idxsw5o\> ... show less	Hacking Brute-Force
🇳🇱 ggiinnoo	2021-03-31 04:00:00 (5 years ago)	Email server abuse	Email Spam Spoofing
🇳🇱 big-cloud.nl	2021-03-30 07:24:40 (5 years ago)	Unauthorized SMTP/IMAP/POP3 connection attempt	Brute-Force
🇺🇸 ad5gb.com	2021-03-30 05:30:54 (5 years ago)	2021-03-30T04:30:53.586541morrigan.ad5gb.com auth[126493]: pam_unix(dovecot:auth): authentication fa ... show more 2021-03-30T04:30:53.586541morrigan.ad5gb.com auth[126493]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=randy rhost=113.179.14.104 user=randy show less	Brute-Force
🇳🇱 tmiland	2021-03-29 07:44:53 (5 years ago)	(postfix_disconnect) lost connection after AUTH from 113.179.14.104 (VN/Vietnam/static.vnpt.vn): 1 i ... show more (postfix_disconnect) lost connection after AUTH from 113.179.14.104 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 95.156.86.234

🇰🇿 82.115.35.22

🇸🇬 206.189.146.19

🇨🇴 190.25.192.133

🇺🇸 147.185.132.160

🇸🇬 121.6.97.6

🇦🇺 115.64.67.164

🇵🇰 72.255.3.21

🇳🇱 34.90.77.246

🇧🇪 34.38.151.28

🇺🇸 20.127.185.37

🇳🇱 2400:cb00:994:1000:de0:472d:5e9:afbe

🇷🇺 178.216.165.187

🇭🇰 150.109.46.88

🇺🇸 136.86.134.68

🇮🇳 122.183.51.218

🇺🇸 107.170.54.51

🇫🇷 86.204.85.115

🇸🇬 85.203.23.30

🇷🇸 77.105.37.219