AbuseIPDB » 161.248.239.112

161.248.239.112 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 83%: ?

83%
ISP Trung Tin Iron and Aluminum Company Limited
Usage Type Commercial
ASN AS150895
Domain Name vpstrung.io.vn
Country πŸ‡»πŸ‡³ Viet Nam
City Lim, Bac Ninh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 161.248.239.112:

This IP address has been reported a total of 28 times from 18 distinct sources. 161.248.239.112 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡©πŸ‡ͺ Honeypot-EU-Fru
1780721544 - 06/06/2026 06:52:24 Host: 161.248.239.112/161.248.239.112 Port: 3389 TCP Blocked ...
Port Scan
πŸ‡¨πŸ‡¦ Luhte
Port Scan Hacking
πŸ‡ΈπŸ‡¬ drewf.ink
[04:20] Port scanning. Port(s) scanned: TCP/3389
Port Scan
πŸ‡ΊπŸ‡Έ Xarcotic
SSH login on honeypot.
Brute-Force SSH
Anonymous
Trying ports that it shouldn't be.
Port Scan Hacking Exploited Host
πŸ‡΅πŸ‡± nfsec.pl
Detected: TCP scan on port: 3389 with flags: SYN
Port Scan
πŸ‡³πŸ‡± donarev419
Connection to port 3389 with data transfer. Data preview: 
Port Scan Hacking
πŸ‡ΊπŸ‡Έ Xarcotic
SSH login on honeypot.
Brute-Force SSH
πŸ‡ΊπŸ‡Έ wristhulk
Honeypot: RDP brute-force on OpenCanary honeypot (port 3389). Username: '173'.
Brute-Force
πŸ‡ΈπŸ‡¬ drewf.ink
[00:42] Port scanning. Port(s) scanned: TCP/3389
Port Scan
πŸ‡«πŸ‡· Coco Bongo
1780619599 - 06/05/2026 02:33:19 Host: 161.248.239.112/161.248.239.112 Port: 3389 TCP Blocked ...
Port Scan
πŸ‡¬πŸ‡§ knock
Knock-Knock honeypot brute-force: RDP (1 total hits)
Brute-Force
πŸ‡³πŸ‡± donarev419
Connection to port 3389 with data transfer. Data preview: 
Port Scan Hacking
πŸ‡¬πŸ‡§ PeravixGroup
Brute-Force Hacking
πŸ‡¦πŸ‡Ί dyln
Dyls honeypot brute-force: RDP (58 total hits)
Brute-Force

Showing 1 to 15 of 28 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡¨πŸ‡³ 222.186.13.130
πŸ‡ΊπŸ‡Έ 147.185.132.79
πŸ‡ΊπŸ‡Έ 216.218.206.71
πŸ‡ΉπŸ‡· 213.43.9.218
πŸ‡³πŸ‡± 176.65.149.203
πŸ‡³πŸ‡± 147.45.50.147
πŸ‡ΊπŸ‡Έ 107.175.223.183
πŸ‡§πŸ‡ͺ 35.205.234.129
πŸ‡§πŸ‡ͺ 34.62.110.125
πŸ‡©πŸ‡ͺ 139.59.214.194
πŸ‡·πŸ‡΄ 92.118.39.236
πŸ‡·πŸ‡΄ 80.94.92.187
πŸ‡§πŸ‡ͺ 34.38.93.241
πŸ‡°πŸ‡· 3.36.74.8
πŸ‡ΊπŸ‡Έ 203.161.63.6
πŸ‡¬πŸ‡§ 195.140.214.23
πŸ‡»πŸ‡³ 180.93.245.203
πŸ‡§πŸ‡· 177.53.133.151
πŸ‡ΊπŸ‡Έ 172.237.150.22
πŸ‡ΊπŸ‡Έ 165.154.36.71