JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.210.70.146

113.210.70.146 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Maxis Broadband Sdn Bhd
Usage Type	Mobile ISP
ASN	AS9534
Domain Name	maxis.com.my
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.210.70.146

Whois 113.210.70.146

IP Abuse Reports for 113.210.70.146:

This IP address has been reported a total of 25 times from 21 distinct sources. 113.210.70.146 was first reported on August 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Hiigara	2026-08-22 04:01:13 (1 day ago)	connection attempt : 113.210.70.146 on port : tcp/5985 (WinRM HTTP)	Port Scan
🇩🇪 _ArminS_	2026-08-20 04:50:27 (3 days ago)	SP-Scan 55714:5985 detected 2026.08.20 06:50:27 blocked until 2026.10.08 23:53:14	Port Scan
🇺🇸 Cyber Crusader	2026-08-19 19:48:17 (3 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇩🇪 centurion	2026-08-19 01:18:38 (4 days ago)	Blocked by UFW on ns02 [5985/tcp] Source port: 42277 TTL: 232 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on ns02 [5985/tcp] Source port: 42277 TTL: 232 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 kronos	2026-08-18 00:49:47 (5 days ago)	IDS: FlowIntel scan-like source \| SID:9900001 \| session_sigs:40 \| alerts5m:40	Port Scan
🇺🇸 donarev419	2026-08-17 08:18:51 (6 days ago)	Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 198.23.188.201 ... show more Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 198.23.188.201:5985 User-Agent: Python WinRM client Accept-Encoding: g show less	Port Scan Hacking
🇺🇸 xmission.com	2026-08-17 05:58:05 (6 days ago)	Blocked by UFW (TCP on 5985) Source port: 45733 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5985) Source port: 45733 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 113.210.70.146) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇾 stroytrest	2026-08-17 01:44:32 (6 days ago)	2026-08-17T04:44:31.532771+03:00 gate kernel: [486191.229820] nftables: JAIL-MSS IN=wan OUT= MAC= SR ... show more 2026-08-17T04:44:31.532771+03:00 gate kernel: [486191.229820] nftables: JAIL-MSS IN=wan OUT= MAC= SRC=113.210.70.146 DST=xxx.xxx.xxx.xxx LEN=44 TOS=0x00 PREC=0x00 TTL=228 ID=28036 PROTO=TCP SPT=51046 DPT=5985 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 eduardomelendezjr	2026-08-15 22:39:04 (1 week ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 Administrator WORKGROUP 0xc ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 Administrator WORKGROUP 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM MPSVR - - 0 0x0 - 113.210.70.146 61852 show less	Port Scan Hacking Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia	2026-08-15 04:16:44 (1 week ago)	Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Acce ... show more Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP show less	Web App Attack
🇵🇱 sefinek.net	2026-08-14 22:07:02 (1 week ago)	Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Acce ... show more Honeypot hit: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇮 6kilowatti	2026-08-14 09:08:23 (1 week ago)	2026-08-14T12:08:22.653216+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-08-14T12:08:22.653216+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=113.210.70.146 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=18690 PROTO=TCP SPT=49959 DPT=5985 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇷 drpedrofarinacci	2026-08-14 04:05:25 (1 week ago)	Automated detection: 25 failed RDP/login attempts across servers: Hogar(25). Detected by ITSPR SENTI ... show more Automated detection: 25 failed RDP/login attempts across servers: Hogar(25). Detected by ITSPR SENTINEL monitoring system. show less	Brute-Force SSH
🇺🇸 Cyber Crusader	2026-08-13 19:17:04 (1 week ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇫🇷 eduardomelendezjr	2026-08-13 03:36:04 (1 week ago)	Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 Administrator WORKGROUP 0xc ... show more Rule : Security Rule: Security Event: Security S-1-0-0 - - 0x0 S-1-0-0 Administrator WORKGROUP 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM CS4 - - 0 0x0 - 113.210.70.146 57486 show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 184.151.85.100

🇿🇦 102.218.40.17

🇳🇱 86.54.31.32

🇸🇬 68.183.234.194

🇫🇷 45.91.22.93

🇹🇿 41.222.179.235

🇬🇧 2.57.17.13

🇬🇧 216.226.76.10

🇱🇹 213.176.26.52

🇦🇷 186.60.240.140

🇸🇪 185.225.115.102

🇮🇩 163.7.5.228

🇺🇸 144.172.108.80

🇮🇳 103.83.3.184

🇦🇷 45.226.230.243

🇨🇳 36.134.130.12

🇧🇷 23.219.66.199

🇰🇷 14.47.3.221

🇰🇷 211.253.37.225

🇰🇷 211.63.219.148