113.160.173.148

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
40% Elevated
73 reports
30 reporters · latest 3 hours ago
ISP
Vietnam Posts and Telecommunications Group
Usage Type
Fixed Line ISP
ASN
AS45899
Domain Name
vnpt.com.vn
Country
🇻🇳 Viet Nam
City
Vinh, Nghe An Province
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
73 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4 🇫🇷 France 3 🇩🇪 Germany 2
Most common categories Port Scan 9 Hacking 7 Brute-Force 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)
Hacking Brute-Force
🇳🇱 knock
Knock-Knock honeypot brute-force: SMB (12 total hits)
Brute-Force
🇱🇹 NotACaptcha
2026-10-30T15:40:59.167885+02:00 3d3l kernel: banned.IN=venet0 OUT= MAC= SRC=113.160.173.148 LEN=52 TTL=107 ID=9010 DF TCP DPT=445 WINDOW=8192 SYN
Port Scan
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 3 Dionaea events.
Port Scan
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 445/SMB | Proto: TCP(1) | Flags: all SYN | TTL: 111 | Len: 52B | Win: 8192(1) | rDNS: static.vnpt.vn | F2B/ufw-honeypot@2026-10-25T08:20:07Z
Port Scan Hacking
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
🇱🇹 NotACaptcha
Unauthorised access (Oct 11 22:30) SRC=113.160.173.148 LEN=52 TTL=108 ID=25223 DF TCP DPT=445 WINDOW=8192 SYN
Port Scan
🇺🇸 drewf.ink
[02:28] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
Hacking
🇺🇸 knock
Knock-Knock honeypot brute-force: SMB (4 total hits)
Brute-Force
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)
Hacking Brute-Force
🇭🇰 mutebot.net
SRC=113.160.173.148, PROTO=TCP, SPT=40715, DPT=445
Port Scan
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=3; port 445 proto 6 detection honeypot_tcp
Port Scan
🇺🇸 RAP
2026-09-16 11:12:14 UTC Unauthorized activity to TCP port 445. SMB
Port Scan
🇺🇸 drewf.ink
[17:08] Triggered SMB honeypot. Type: SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 154.80.128.177
🇺🇸 68.183.128.78
🇬🇧 2.57.17.231
🇵🇱 172.64.200.17
🇺🇸 161.77.62.6
🇧🇷 154.80.128.163
🇺🇸 150.136.214.177
🇧🇷 200.152.10.136
🇨🇿 193.179.119.180
🇧🇷 168.228.167.214
🇨🇳 122.224.55.209
feedback