116.104.154.193

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
50 reports
42 reporters · latest 3 days ago
ISP
Viettel Group
Usage Type
Fixed Line ISP
ASN
AS7552
Domain Name
viettel.com.vn
Country
🇻🇳 Viet Nam
City
Thanh Hoa, Thanh Hoa Province
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
50 from 42 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 11 🇳🇱 Netherlands 6 🇮🇹 Italy 4
Most common categories Brute-Force 35 Hacking 8 Web App Attack 8 Email Spam 7 Port Scan 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 tinect
Gets ban for 4h for triggering crowdsecurity/postfix-non-smtp-command at root1.
Web App Attack
🇫🇷 Stara
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
Brute-Force DDoS Attack
🇸🇬 heyzg
LLM Inference API Requests (Ollama) (observed): 1 HTTP
Hacking Web App Attack
🇬🇧 Silly Development
Malicious activity detected from 7552 Viettel Group towards host sillydev.co.uk (GET HTTP/2) @ 2026-11-03T21:27:32Z (79 occurrences)
DDoS Attack Exploited Host
🇩🇪 inlink.ltd
SMTP AUTH attack
Brute-Force
Anonymous
POST /xmlrpc.php HTTP/1.1 ...
Brute-Force
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
Anonymous
Authentication failure
Brute-Force
🇩🇪 jasperedv.de
Failed IMAP Login - Brutforcing
Email Spam Brute-Force
Anonymous
$f2bV_matches
Brute-Force
🇮🇩 xveil
2026-11-03T13:07:50.778737 mail-honeypot postfix/submission/smtpd[528]: warning: unknown[116.104.154.193]: SASL PLAIN authentication failed: authentication failure ...
Brute-Force
🇦🇺 FireGuard Server
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=587
Port Scan Hacking
Anonymous
fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it
Brute-Force
Anonymous
Postfix SASL brute-force authentication attempt
Brute-Force
🇸🇮 administrator
Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 116.5.206.113
🇬🇧 109.238.86.52
🇩🇪 69.5.169.249
🇭🇰 123.1.168.201
🇨🇳 106.12.127.250
🇺🇸 104.237.141.8
🇧🇪 91.90.123.8
🇰🇷 220.116.117.213
🇧🇷 205.210.31.217
🇹🇳 196.237.204.236
🇧🇬 193.24.211.219
🇳🇱 185.218.86.12
🇺🇸 162.216.150.90
🇰🇷 124.194.78.4
🇸🇬 104.248.148.169
🇳🇱 93.123.109.164
🇷🇴 92.118.39.76
🇺🇸 209.38.69.12
🇹🇳 196.229.36.115
feedback