AbuseIPDB » 113.160.164.158

113.160.164.158 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 11%: ?

11%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Hostname(s)	static.vnpt.vn
Domain Name	vnpt.com.vn
Country	Viet Nam
City	Cao Bằng, Cao Bằng Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 113.160.164.158

Whois 113.160.164.158

IP Abuse Reports for 113.160.164.158:

This IP address has been reported a total of 34 times from 19 distinct sources. 113.160.164.158 was first reported on June 4th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
nowyouknow	2025-06-12 07:16:40 (6 days ago)	(From [email protected])	Phishing Web Spam
nowyouknow	2025-06-10 07:23:51 (1 week ago)	(From [email protected])	Phishing Web Spam
nowyouknow	2025-06-09 01:49:24 (1 week ago)	(From [email protected])	Phishing Web Spam
nowyouknow	2025-06-06 14:45:03 (1 week ago)	(From [email protected])	Phishing Web Spam
el-brujo	2025-05-13 07:46:13 (1 month ago)	05/13/2025-09:46:12.874159 113.160.164.158 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
Anonymous	2025-04-10 10:01:29 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Savvii	2025-03-20 06:26:42 (2 months ago)	20 attempts against mh-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
Savvii	2025-03-18 02:57:43 (3 months ago)	20 attempts against mh_ha-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-03-06 17:07:34 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 113.160.164.158 (static.vnpt.vn): 1 in the last ... show more(mod_security) mod_security (id:225170) triggered by 113.160.164.158 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 12:07:28.790421 2025] [security2:error] [pid 16883:tid 16883] [client 113.160.164.158:58338] [client 113.160.164.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelthompson.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelthompson.biz"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z8nWUF1eEGoi7uonrKjQ8wAAAA4"], referer: http://michaelthompson.biz/ show less	Brute-Force Bad Web Bot Web App Attack
Savvii	2025-03-01 23:08:01 (3 months ago)	20 attempts against mh-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
rh24	2025-03-01 12:42:40 (3 months ago)	(contact-forms) Failed contact-forms trigger with match [redacted] from 113.160.164.158 (static.vnpt ... show more(contact-forms) Failed contact-forms trigger with match [redacted] from 113.160.164.158 (static.vnpt.vn): (CF_ENABLE) show less	Hacking
nowyouknow	2025-01-22 07:51:25 (4 months ago)	(From [email protected])	Phishing Web Spam
ThreatBook.io	2025-01-17 22:11:12 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/113.160.164.158	Brute-Force
Anonymous	2024-12-08 20:18:02 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
nowyouknow	2024-11-25 12:21:25 (6 months ago)	(From [email protected])	Phishing Web Spam

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩