113.131.125.135
Classification: Malicious
113.131.125.135 is a malicious IP address in Seoul, KR. 451 sightings from 7 threat sources (Suspicious Host, Port Scanner), last seen 2026-10-16.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Port Scanner | AbuseIPDB | 2026-07-22 04:04:27 | 2026-10-16 21:48:08 | malicious-activity reconnaissance | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2025-12-20 01:12:57 | 2026-10-16 11:11:08 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2025-12-20 01:12:48 | 2026-10-16 11:11:06 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-10-15 13:44:09 | 2026-10-15 13:44:09 | attacker compromised malicious-activity | |
| Hacking | AbuseIPDB | 2026-07-25 05:04:14 | 2026-10-14 05:25:18 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2019-06-02 12:27:52 | 2026-10-12 20:03:08 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-08-27 23:40:47 | 2026-10-11 04:18:50 | iot malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-07-27 13:02:22 | 2026-10-09 08:28:30 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-07-23 03:57:59 | 2026-09-28 15:42:26 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-09-23 05:42:15 | 2026-09-23 05:42:15 | anomalous-activity | |
| Suspicious Host | AbuseIPDB | 2024-07-15 22:46:16 | 2026-06-05 08:27:03 | anomalous-activity | |
| Malicious Host | Alienvault Ip Reputation Database | 2019-06-03 01:39:34 | 2020-10-15 06:27:01 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2020-04-04 01:02:46 | 2020-04-04 01:02:46 | ||
| Scanning IPs | IBM X-Force Exchange | 2019-09-25 21:02:00 | 2020-03-31 02:12:00 | ||
| Bots | IBM X-Force Exchange | 2019-09-11 16:27:00 | 2019-09-11 16:27:00 | ||
| Mirai bot | Greynoise | 2019-05-28 00:00:00 | 2019-07-09 00:00:00 |
Tags
mirai bot botnet iot compromised worm attackerWhois information
- AS name
- AS9697 HVGeumjeong
- AS registry
- apnic
- AS date
- 2008-11-10 00:00:00
- AS CIDR
- 113.131.125.0/24
- CIDR
- 113.130.128.0/17, 113.131.0.0/16
- Registrant
- HVGeumjeong
- Address
- Jeollanam-do Naju-si Jinheung-gil
- City
- Seoul
- Postal code
- 04524
- Country
- KR — Korea, Republic of 🇰🇷
- Contact email
- [email protected], [email protected]
- First indexed
- 2019-06-02 12:27:52
- Last updated
- 2026-10-18 03:17:35
Malicious IPs in the same CIDR
113.131.125.135 113.131.125.132 113.131.125.147 113.131.125.144 113.131.125.142