JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.223.225.130

163.223.225.130 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 0%: ?

ISP	GZ CORE COMPANY LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135918
Domain Name	gzcore.net
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.223.225.130

Whois 163.223.225.130

IP Abuse Reports for 163.223.225.130:

This IP address has been reported a total of 53 times from 41 distinct sources. 163.223.225.130 was first reported on July 13th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-07-15 20:07:42 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-07-14 22:30:35 (11 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/163.223.225.130	SSH
🇹🇷 rtbh.com.tr	2025-07-14 20:07:41 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇷🇺 blopblop ES	2025-07-14 10:35:00 (11 months ago)	GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 User-Agent: Custom-AsyncH ... show more GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 User-Agent: Custom-AsyncHttpClient <?php echo(md5("Hello PHPUnit")); show less	Web App Attack
🇩🇪 nohacefaltapapel-et.net	2025-07-14 08:07:50 (11 months ago)	2025-07-14T07:56:07.516818elastic1 sshd[3935]: Invalid user debian from 163.223.225.130 port 38468 2 ... show more 2025-07-14T07:56:07.516818elastic1 sshd[3935]: Invalid user debian from 163.223.225.130 port 38468 2025-07-14T08:05:52.342047elastic1 sshd[4903]: Invalid user sysadmin from 163.223.225.130 port 42598 2025-07-14T08:07:50.369477elastic1 sshd[5056]: Invalid user james from 163.223.225.130 port 43310 ... show less	Brute-Force SSH
🇺🇸 BSG Webmaster	2025-07-14 07:35:12 (11 months ago)	Port scanning (Port 443)	Port Scan Hacking
🇳🇱 ISPLtd	2025-07-14 07:30:46 (11 months ago)	163.223.225.130 - - [14/Jul/2025:04:30:44 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more 163.223.225.130 - - [14/Jul/2025:04:30:44 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 163.223.225.130 - - [14/Jul/2025:04:30:45 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php ... show less	Hacking Web App Attack
🇦🇺 webnestify	2025-07-14 06:55:40 (11 months ago)	[Webnestify Honeypot - Australia] Unauthorized connection attempt on port 23.	Port Scan Hacking Brute-Force
🇺🇸 bigscoots.com	2025-07-14 05:59:12 (11 months ago)	(sshd) Failed SSH login from 163.223.225.130 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 163.223.225.130 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jul 14 00:55:02 16484 sshd[4654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=ftp Jul 14 00:55:04 16484 sshd[4654]: Failed password for ftp from 163.223.225.130 port 54408 ssh2 Jul 14 00:56:59 16484 sshd[4874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=root Jul 14 00:57:02 16484 sshd[4874]: Failed password for root from 163.223.225.130 port 55394 ssh2 Jul 14 00:58:53 16484 sshd[5088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-07-14 05:41:26 (11 months ago)	(sshd) Failed SSH login from 163.223.225.130 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 163.223.225.130 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jul 14 00:37:27 18418 sshd[21626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=root Jul 14 00:37:28 18418 sshd[21626]: Failed password for root from 163.223.225.130 port 58474 ssh2 Jul 14 00:39:20 18418 sshd[21766]: Invalid user admin from 163.223.225.130 port 59474 Jul 14 00:39:22 18418 sshd[21766]: Failed password for invalid user admin from 163.223.225.130 port 59474 ssh2 Jul 14 00:41:14 18418 sshd[21920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=root show less	Brute-Force SSH
Anonymous	2025-07-14 05:12:09 (11 months ago)	2025-07-14T04:58:00.633595+00:00 de-fra2-ntp1 sshd[3558557]: Invalid user server from 163.223.225.13 ... show more 2025-07-14T04:58:00.633595+00:00 de-fra2-ntp1 sshd[3558557]: Invalid user server from 163.223.225.130 port 37992 2025-07-14T04:59:45.096177+00:00 de-fra2-ntp1 sshd[3558582]: Invalid user developer from 163.223.225.130 port 39096 2025-07-14T05:12:08.894724+00:00 de-fra2-ntp1 sshd[3558882]: Invalid user user1 from 163.223.225.130 port 46524 ... show less	Brute-Force SSH
🇺🇸 SANYALnet Labs	2025-07-14 05:06:44 (11 months ago)	Jul 14 05:06:39 sanyalnet-oracle-vps2 sshd[2240931]: pam_unix(sshd:auth): authentication failure; lo ... show more Jul 14 05:06:39 sanyalnet-oracle-vps2 sshd[2240931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 Jul 14 05:06:41 sanyalnet-oracle-vps2 sshd[2240931]: Failed password for invalid user ftp from 163.223.225.130 port 55650 ssh2 Jul 14 05:06:44 sanyalnet-oracle-vps2 sshd[2240931]: Connection closed by invalid user ftp 163.223.225.130 port 55650 [preauth] ... show less	Brute-Force
🇺🇸 juguemosalacarioca.com	2025-07-14 04:45:28 (11 months ago)	Multiple HTTP calls attempting to GET resources using common/malformed API calls or formats on port ... show more Multiple HTTP calls attempting to GET resources using common/malformed API calls or formats on port 8080 show less	Web App Attack
🇺🇸 bigscoots.com	2025-07-14 03:57:04 (11 months ago)	(sshd) Failed SSH login from 163.223.225.130 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 163.223.225.130 (VN/Vietnam/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jul 13 22:53:22 15942 sshd[7250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=root Jul 13 22:53:24 15942 sshd[7250]: Failed password for root from 163.223.225.130 port 59242 ssh2 Jul 13 22:55:02 15942 sshd[7317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=root Jul 13 22:55:03 15942 sshd[7317]: Failed password for root from 163.223.225.130 port 60100 ssh2 Jul 13 22:56:45 15942 sshd[7455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.223.225.130 user=root show less	Brute-Force SSH
🇮🇩 Burayot	2025-07-14 03:37:49 (11 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 163.223.225.130 (-): 1 in the last ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 163.223.225.130 (-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.217.95

🇵🇰 202.166.167.134

🇧🇷 200.236.4.150

🇺🇬 196.0.124.146

🇹🇭 182.52.236.235

🇸🇬 128.199.136.193

🇨🇳 115.190.56.152

🇩🇪 69.5.169.189

🇺🇸 65.49.20.67

🇨🇦 20.63.8.12

🇩🇪 192.250.229.40

🇧🇷 177.85.166.90

🇳🇱 176.65.132.37

🇦🇴 105.168.115.123

🇺🇸 91.230.168.250

🇨🇦 85.217.149.60

🇭🇰 46.247.61.47

🇩🇪 46.101.255.53

🇳🇱 45.148.10.157

🇮🇳 2402:8100:2761:5224:18cc:3f9e:3afd:f6d5