JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.161.186.189

113.161.186.189 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 19%: ?

19%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Mobile ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Da Lat, Lam Dong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.161.186.189

Whois 113.161.186.189

IP Abuse Reports for 113.161.186.189:

This IP address has been reported a total of 19 times from 14 distinct sources. 113.161.186.189 was first reported on December 20th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-06-10 02:24:23 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/bota/te-shtena-me-arme-ne-nje-feste-ne-shba-2-viktima-dhe-6-te-plagosur/667873/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-05 06:17:38 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/rruga-e-re-palase-dhermi-rama-ne-zone-do-te-ndertohen-hotele-me-5-yje/374016/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 PeravixGroup	2026-06-04 08:09:23 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 geeek	2026-05-11 07:44:08 (1 month ago)	Port scanning: 445 TCP Blocked	Port Scan
🇺🇸 donarev419	2026-05-07 03:13:45 (1 month ago)	Port scan detected on port 445 (connection without data transfer)	Port Scan
🇫🇷 sthoyer.de	2026-04-09 05:34:52 (2 months ago)	Apr 9 07:34:50 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Apr 9 07:34:50 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=113.161.186.189 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=1476 DF PROTO=TCP SPT=14582 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 Largnet SOC	2026-03-23 02:18:39 (3 months ago)	113.161.186.189 triggered Icarus honeypot on port 445. Check us out on github.	Port Scan Hacking
🇺🇸 sumnone	2026-03-19 01:48:34 (3 months ago)	Port probing on unauthorized port 445	Port Scan Hacking Exploited Host
Anonymous	2026-03-10 14:15:13 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 sthoyer.de	2026-03-10 04:21:32 (3 months ago)	Mar 10 05:21:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Mar 10 05:21:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=113.161.186.189 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=1284 DF PROTO=TCP SPT=3485 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-03-05 08:18:46 (3 months ago)	Mar 5 09:18:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Mar 5 09:18:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=113.161.186.189 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=29812 DF PROTO=TCP SPT=59534 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-03-05 04:07:59 (3 months ago)	Mar 5 05:07:58 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Mar 5 05:07:58 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=113.161.186.189 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=12408 DF PROTO=TCP SPT=11423 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-03-05 02:18:59 (3 months ago)	Mar 5 03:18:57 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Mar 5 03:18:57 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=113.161.186.189 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=7030 DF PROTO=TCP SPT=33695 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 Adam Pearson	2026-03-04 01:42:26 (3 months ago)	[wazuh.blog] Blocked by SysWarden Firewall (SMB/Possible Ransomware Attack Port 445)	Port Scan Hacking Brute-Force
🇹🇷 pamircil	2026-02-24 04:26:21 (3 months ago)	🍯 WinnieThePooh Honeypot : Detected (smbd/445) 💀	Hacking Exploited Host

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.74.41.245

🇬🇧 193.163.125.108

🇸🇪 171.25.158.80

🇺🇸 91.230.168.133

🇧🇾 81.30.98.142

🇺🇸 74.125.184.153

🇺🇸 199.127.62.250

🇷🇴 193.46.255.86

🇮🇳 182.95.185.14

🇨🇦 165.227.47.218

🇺🇸 147.182.165.237

🇨🇳 120.27.197.247

🇳🇴 85.19.195.12

🇨🇳 61.178.82.215

🇳🇱 45.81.23.7

🇺🇸 4.246.61.185

🇰🇷 220.72.138.160

🇻🇳 203.113.174.15

🇬🇧 185.152.250.76

🇩🇪 140.82.32.10