IP Address

116.118.2.113

IPv4 Public
VN VN
AS7602
Sai gon Postel Corporation
296 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
8/10 Threat
100% Confidence
296 Reports

Threat Intelligence Analysis

AI-generated security assessment based on aggregated threat data

Above Average Risk
VN
VN Location
Sai gon Postel Corporatio... ASN 7602
296 Reports
Mixed Data Source

Significant Threat

IP 116.118.2.113 is a high-risk address originating from Vietnam, operated by Saigon Postel Corporation (AS7602), that has generated 296 abuse reports with a threat level of 8/10, indicating persistent and aggressive automated attack behavior primarily targeting WordPress installations and authentication systems. The IP address demonstrates a clear pattern of credential-based attacks, with 17 automated honeypot sensors and 3 community sources reporting malicious activity between February and April 2026. Dominant threat categories include general hacking attempts, WordPress login brute-force campaigns, traditional brute-force authentication attacks, port scanning, and WordPress XML-RPC exploitation, collectively accounting for the majority of the 296 total reports filed against this address. The detection data reveals that fail2ban systems alone recorded over 147 violations across multiple security jails, confirming sustained offensive operations that have triggered automated defensive responses across numerous victim environments. This IP presents a concrete risk to any publicly accessible web service, particularly WordPress-based sites, because the documented attack patterns exploit weak or default credentials, abuse the WordPress XML-RPC interface for distributed authentication attacks, and attempt to probe system files for known vulnerabilities. The volume and diversity of techniques suggest an automated bot operating continuously rather than isolated manual probing. Site operators should immediately block or rate-limit this IP at the firewall level, enforce multi-factor authentication on all administrative accounts, disable unused XML-RPC functionality on WordPress deployments, and implement fail2ban or equivalent dynamic blocking tools to automatically ban repeat offenders matching known attack signatures. Regular monitoring of access logs for the patterns detected by honeypot sensors can help identify if this threat actor has already compromised any exposed services.

More threatening than 82% of monitored IPs

Threat Categories

Hacking 25
WP Login Brute Force 16
Brute-Force 13
Port Scan 10
WP XML-RPC Brute Force 10
DDoS Attack 3

Technical Details

General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.

Recommended Mitigations

Keep systems patched, implement intrusion detection, and follow security best practices.

Reputable Network

This IP is hosted on a network (ASN 7602) with generally good reputation. The ISP Sai gon Postel Corporation maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 3/10 Low
Confidence Score 80% Verified

Confidence History

24. Apr 2026 - 30. Apr 2026
100% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
Hacking DDoS Attack Community 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Hacking DDoS Attack Community 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking Bad Web Bot +2 Honeypot 75%
Port Scan Hacking Bad Web Bot +2 Honeypot 75%
Hacking Brute-Force Honeypot 75%
WP Login Brute Force Hacking Brute-Force Honeypot x2 75%
WP Login Brute Force Honeypot 75%
WP Login Brute Force Honeypot 75%
WP Login Brute Force Honeypot 75%
WP Login Brute Force Honeypot 75%
Hacking DDoS Attack Community 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot x2 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking Bad Web Bot +2 Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot x2 75%

Technical Details

Basic Information

IP Address
116.118.2.113
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
VN VN
ASN
AS7602
ISP
Sai gon Postel Corporation

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
296
First Reported
21 Feb 2026
Last Reported
30 Apr 2026, 10:45

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS7602
Sai gon Postel Corporation
VN VN

Network Threat Assessment

2/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

21
Total IPs Monitored
495
Total Reports
23.6
Reports per IP

Network Context

This IP address belongs to Sai gon Postel Corporation (AS7602), which manages 21 IP addresses in our monitoring system. Out of these, 495 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

82 %

Global Threat Ranking

This IP is more threatening than 82% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 199,317 reported IPs worldwide

Threat Level 8/10 avg: 5.3 ++
Total Reports 296 avg: 23 ++

Network Comparison

Compared against 36 IPs in ASN 7602

Threat Level 8/10 network avg: 6.4 +
Total Reports 296 network avg: 17 ++
Network Sai gon Postel Corporation has overall threat level 2/10

Geographic Comparison

Compared against 2,564 IPs in VN

Threat Level 8/10 country avg: 5.3 ++
Total Reports 296 country avg: 21 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

187,017 threat incidents tracked globally • Last 24h: 18,967 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    38,426 20.5%
  2. 02
    IN
    India IN
    28,977 15.5%
  3. 03
    CN
    China CN
    26,016 13.9%
  4. 04
    BR
    Brazil BR
    10,249 5.5%
  5. 05
    DE
    Germany DE
    7,139 3.8%
  6. 06
    SG
    Singapore SG
    6,475 3.5%
  7. 07
    ID
    Indonesia ID
    5,533 3%
  8. 08
    RU
    Russia RU
    4,701 2.5%
  9. 09
    PK
    Pakistan PK
    4,647 2.5%
  10. 10
    NL
    Netherlands NL
    4,355 2.3%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
7.7/10 Avg Threat
65% Avg Confidence
16 High Threat
High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "116.118.2.113",
    "threat_level": 8,
    "confidence_score": 100,
    "total_reports": 296,
    "country_code": "VN",
    "isp_name": "Sai gon Postel Corporation",
    "asn": "7602",
    "first_reported": "2026-02-21 04:16:39",
    "last_reported": "2026-04-30 10:45:19",
    "exported_at": "2026-06-09T07:52:42+02:00",
    "source": "https://reportedip.de/ip/116.118.2.113/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.