JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.190.242.154

113.190.242.154 was found in our database!

This IP was reported 226 times. Confidence of Abuse is 93%: ?

93%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Thanh Xuan, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.190.242.154

Whois 113.190.242.154

IP Abuse Reports for 113.190.242.154:

This IP address has been reported a total of 226 times from 97 distinct sources. 113.190.242.154 was first reported on September 20th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-22 11:58:16 (14 hours ago)	Blocked by UFW (TCP on 5985) Source port: 49468 TTL: 236 Packet length: 44 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 5985) Source port: 49468 TTL: 236 Packet length: 44 TOS: 0x14 This report (for 113.190.242.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 SeczarSecureOps	2026-06-19 15:08:52 (3 days ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — WinRM (5 events in ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — WinRM (5 events in 10min) at 2026-06-19 15:08 show less	Web App Attack
🇭🇺 Lacika555	2026-06-19 15:00:48 (3 days ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇺🇸 MPL	2026-06-19 03:33:11 (3 days ago)	tcp/5985 (32 or more attempts)	Port Scan
🇫🇷 TheHoneyPotter	2026-06-19 00:22:01 (4 days ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-06-13 04:19:28 (1 week ago)	Blocked by UFW (TCP on 5985) Source port: 44356 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5985) Source port: 44356 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 113.190.242.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇾 StatsMe	2026-06-12 22:42:28 (1 week ago)	2026-06-12T04:56:39.702436+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇦🇺 LiftUp Hosting	2026-06-12 17:28:01 (1 week ago)	Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Acce ... show more Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP show less	Hacking Bad Web Bot
🇫🇷 Hiigara	2026-06-12 09:30:54 (1 week ago)	connection attempt : 113.190.242.154 on port : tcp/5985 (WinRM HTTP)	Port Scan
🇺🇸 donarev419	2026-06-11 08:18:28 (1 week ago)	Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 198.23.188.201 ... show more Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 198.23.188.201:5985 User-Agent: Python WinRM client Accept-Encoding: g show less	Port Scan Hacking
🇺🇸 micropedro	2026-06-10 01:30:17 (1 week ago)	3 incidents: malicious activity. First: 2026-06-02 20:30, Last: 2026-06-09 21:30 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-02 20:30, Last: 2026-06-09 21:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 xmission.com	2026-06-09 04:41:52 (1 week ago)	Blocked by UFW (TCP on 5985) Source port: 40089 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5985) Source port: 40089 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 113.190.242.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 BIV	2026-06-09 03:25:19 (1 week ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 5985. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 5985. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇧🇷 ICS Labs	2026-06-08 13:07:17 (2 weeks ago)	ICS Labs identified 113.190.242.154 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇬🇧 gbzret4d	2026-06-07 05:15:53 (2 weeks ago)	Honeypot [uk-production01]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Ac ... show more Honeypot [uk-production01]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP show less	Hacking Bad Web Bot

Showing 1 to 15 of 226 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c74::126

🇯🇵 160.251.101.169

🇸🇬 152.42.247.85

🇨🇳 123.57.181.108

🇨🇭 104.251.180.164

🇫🇷 90.61.243.142

🇺🇸 69.63.189.135

🇺🇸 54.167.49.166

🇫🇷 51.159.7.14

🇸🇬 45.82.78.108

🇸🇪 31.59.160.12

🇨🇳 14.18.122.240

🇬🇧 213.166.84.38

🇧🇷 185.72.241.173

🇨🇳 180.167.128.203

🇨🇳 180.76.176.249

🇺🇸 165.154.36.102

🇮🇩 163.7.11.155

🇨🇴 152.204.220.41

🇧🇦 134.90.131.188