JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.118.2.113

116.118.2.113 was found in our database!

This IP was reported 3,126 times. Confidence of Abuse is 100%: ?

100%

ISP	ADSL service
Usage Type	Fixed Line ISP
ASN	AS7602
Domain Name	spt.vn
Country	🇻🇳 Viet Nam
City	Quan Bay, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.118.2.113

Whois 116.118.2.113

IP Abuse Reports for 116.118.2.113:

This IP address has been reported a total of 3,126 times from 340 distinct sources. 116.118.2.113 was first reported on February 11th 2023, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 smithclass.net	2026-01-18 14:56:40 (4 months ago)	Jan 18 14:56:39 gravy wordpress(smithclass.net)[811164]: Authentication attempt for unknown user gsm ... show more Jan 18 14:56:39 gravy wordpress(smithclass.net)[811164]: Authentication attempt for unknown user gsmithsewanee-edu from 116.118.2.113 ... show less	Hacking Brute-Force
🇺🇸 mind5t0rm	2026-01-18 14:45:18 (4 months ago)	(WPLOGIN) WP Login Attack 116.118.2.113 (-): 3 in the last 3600 secs; Ports: ; Direction: inout; Tr ... show more (WPLOGIN) WP Login Attack 116.118.2.113 (-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 116.118.2.113 - - [18/Jan/2026:21:39:19 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 116.118.2.113 - - [18/Jan/2026:21:39:21 +0700] "POST /wp-login.php HTTP/1.1" 200 2602 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 116.118.2.113 - - [18/Jan/2026:21:45:17 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Windows NT 6.3; ARM; Trident/7.0; Touch; rv:11.0) like Gecko" show less	Port Scan
🇫🇮 bittiguru.fi	2026-01-18 14:41:13 (4 months ago)	116.118.2.113 - [18/Jan/2026:16:41:12 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15323 "-" "Mozilla/5.0 ... show more 116.118.2.113 - [18/Jan/2026:16:41:12 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15323 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" "5.52" 116.118.2.113 - [18/Jan/2026:16:41:13 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15135 "-" "Mozilla/5.0 (X11; CrOS armv7l 10323.67.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.209 Safari/537.36" "5.67" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 hchristo	2026-01-18 14:33:34 (4 months ago)	[Sun Jan 18 15:23:31.900486 2026] [access_compat:error] [pid 39507:tid 39808] [remote 116.118.2.113: ... show more [Sun Jan 18 15:23:31.900486 2026] [access_compat:error] [pid 39507:tid 39808] [remote 116.118.2.113:37170] AH01797: client denied by server configuration: /var/www/kd1129/htdocs/mg-ambulante-pflege.de/www.mg-ambulante-pflege.de/xmlrpc.php [Sun Jan 18 15:23:35.615595 2026] [access_compat:error] [pid 39507:tid 39588] [remote 116.118.2.113:37186] AH01797: client denied by server configuration: /var/www/kd1129/htdocs/mg-ambulante-pflege.de/www.mg-ambulante-pflege.de/xmlrpc.php [Sun Jan 18 15:23:37.158485 2026] [access_compat:error] [pid 39507:tid 39644] [remote 116.118.2.113:34796] AH01797: client denied by server configuration: /var/www/kd1129/htdocs/mg-ambulante-pflege.de/www.mg-ambulante-pflege.de/xmlrpc.php [Sun Jan 18 15:33:33.406048 2026] [access_compat:error] [pid 39507:tid 39633] [remote 116.118.2.113:40828] AH01797: client denied by server configuration: /var/www/kd1129/htdocs/mg-ambulante-pflege.de/www.mg-ambulante-pflege.de/wp-login.php [Sun Jan 18 15:33:33.922737 2026] [access_ ... show less	Brute-Force
🇨🇦 KIsmay	2026-01-18 14:22:59 (4 months ago)	Jan 18 02:49:33 cohoe WPAudit[1976399]: 116.118.2.113 lillieandcohoe.com "Mozilla/5.0 (Windows NT 6. ... show more Jan 18 02:49:33 cohoe WPAudit[1976399]: 116.118.2.113 lillieandcohoe.com "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" sbd-admin:sbd-admin FAIL Jan 18 03:22:05 cohoe WPAudit[1977884]: 116.118.2.113 www.lillieandcohoe.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36" savannahl:savannahl+++ FAIL Jan 18 04:25:24 cohoe WPAudit[1978678]: 116.118.2.113 www.lillieandcohoe.com "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" savannahl:savannahl2018 FAIL Jan 18 06:12:32 cohoe WPAudit[1982660]: 116.118.2.113 www.lillieandcohoe.com "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET4.0C; .NET4.0E; .NET CLR 3.5.30729; .NET CLR 3.0.30729)" julien:lillieandcohoe123 FAIL Jan 18 06:22:58 cohoe WPAudit[1985605]: 116 ... show less	Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-01-18 14:14:26 (4 months ago)	116.118.2.113 - [18/Jan/2026:16:14:20 +0200] "POST /xmlrpc.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Wi ... show more 116.118.2.113 - [18/Jan/2026:16:14:20 +0200] "POST /xmlrpc.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" "0.00" 116.118.2.113 - [18/Jan/2026:16:14:25 +0200] "POST /xmlrpc.php HTTP/2.0" 404 24385 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" "4.54" ... show less	Hacking Brute-Force Web App Attack
Anonymous	2026-01-18 14:08:32 (4 months ago)	(PERMBLOCK) 116.118.2.113 (-) has had more than 4 temp blocks	Hacking
🇬🇧 thetomtaylor.co.uk	2026-01-18 14:02:17 (4 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]	Bad Web Bot Web App Attack
🇫🇮 bittiguru.fi	2026-01-18 13:58:25 (4 months ago)	116.118.2.113 - [18/Jan/2026:15:52:18 +0200] "POST /xmlrpc.php HTTP/2.0" 404 21504 "-" "Mozilla/5.0 ... show more 116.118.2.113 - [18/Jan/2026:15:52:18 +0200] "POST /xmlrpc.php HTTP/2.0" 404 21504 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.1 Safari/603.1.30" "3.67" 116.118.2.113 - [18/Jan/2026:15:58:24 +0200] "POST /xmlrpc.php HTTP/2.0" 404 4691 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko,gzip(gfe)" "4.15" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 cloudmax	2026-01-18 13:57:01 (4 months ago)	Cloudmax Protect [WORDPRESS BLOCK] - Excessive requests to private WordPress directories. Possible b ... show more Cloudmax Protect [WORDPRESS BLOCK] - Excessive requests to private WordPress directories. Possible brute-force attack, hacking attempt, or vulnerability probing show less	Brute-Force
🇳🇱 debestelapp	2026-01-18 13:50:02 (4 months ago)		Web App Attack
Anonymous	2026-01-18 13:46:55 (4 months ago)	116.118.2.113 - - [18/Jan/2026:14:46:53 +0100] "POST /xmlrpc.php HTTP/1.1" 200 426 ...	Brute-Force Bad Web Bot
🇨🇿 huginet	2026-01-18 13:45:43 (4 months ago)	116.118.2.113 - - [18/Jan/2026:14:45:41 +0100] "GET /wp-login.php HTTP/1.1" 200 9761 "-" "Mozilla/5. ... show more 116.118.2.113 - - [18/Jan/2026:14:45:41 +0100] "GET /wp-login.php HTTP/1.1" 200 9761 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.40" 116.118.2.113 - - [18/Jan/2026:14:45:42 +0100] "POST /wp-login.php HTTP/1.1" 200 10247 "https://centrum-eko-likvidace.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.40" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-01-18 13:41:06 (4 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa01]	Bad Web Bot Web App Attack
🇺🇸 mind5t0rm	2026-01-18 13:40:51 (4 months ago)	(WPLOGIN) WP Login Attack 116.118.2.113 (-): 3 in the last 3600 secs; Ports: ; Direction: inout; Tr ... show more (WPLOGIN) WP Login Attack 116.118.2.113 (-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 116.118.2.113 - - [18/Jan/2026:20:36:30 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 116.118.2.113 - - [18/Jan/2026:20:36:32 +0700] "POST /wp-login.php HTTP/1.1" 200 2602 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 116.118.2.113 - - [18/Jan/2026:20:40:49 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" show less	Port Scan

Showing 3001 to 3015 of 3126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 181.117.188.3

🇫🇷 95.111.240.214

🇨🇳 42.176.125.16

🇧🇷 191.5.154.174

🇳🇱 176.65.139.218

🇧🇬 79.124.62.230

🇮🇳 66.116.205.19

🇸🇬 52.77.243.137

🇬🇪 5.152.112.188

🇲🇽 187.135.0.103

🇺🇾 179.24.6.247

🇸🇦 168.149.25.183

🇺🇸 147.185.132.105

🇳🇱 45.148.10.141

🇮🇹 31.59.89.180

🇨🇳 223.88.60.117

🇩🇪 167.233.26.122

🇩🇪 167.94.145.27

🇮🇱 147.235.219.206

🇫🇷 87.89.31.111