113.131.125.144
Classification: Malicious
113.131.125.144 is a malicious IP address in Seoul, KR. 334 sightings from 8 threat sources (Suspicious Host, Malicious Host), last seen 2026-10-12.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2025-12-10 05:23:48 | 2026-10-12 11:10:41 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2025-12-10 05:23:40 | 2026-10-11 11:10:31 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2019-06-06 07:29:02 | 2026-10-09 20:04:28 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-07-14 12:30:56 | 2026-06-03 22:45:14 | anomalous-activity | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2022-09-13 03:09:57 | 2022-09-13 03:09:57 | malicious-activity | |
| Malicious Host | Alienvault Ip Reputation Database | 2019-06-08 00:27:50 | 2020-10-15 06:31:26 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2020-04-04 02:46:41 | 2020-04-04 02:46:41 | ||
| Scanning IPs | IBM X-Force Exchange | 2019-09-02 01:04:00 | 2020-04-03 01:54:00 | ||
| Mirai bot | Greynoise | 2019-05-31 00:00:00 | 2019-07-08 00:00:00 |
Tags
abuse mirai bot botnet iot compromised worm attackerWhois information
- AS name
- AS9697 HVGeumjeong
- AS registry
- apnic
- AS date
- 2008-11-10 00:00:00
- AS CIDR
- 113.131.125.0/24
- CIDR
- 113.130.128.0/17, 113.131.0.0/16
- Registrant
- HVGeumjeong
- Address
- Jeollanam-do Naju-si Jinheung-gil
- City
- Seoul
- Postal code
- 04524
- Country
- KR — Korea, Republic of 🇰🇷
- Contact email
- [email protected], [email protected]
- First indexed
- 2019-06-06 07:29:02
- Last updated
- 2026-10-12 11:10:41
Malicious IPs in the same CIDR
113.131.125.135 113.131.125.132 113.131.125.147 113.131.125.144 113.131.125.142