JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.185.6.163

113.185.6.163

Recent Activity

29 reports found in our database

23% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Vietnam Posts and Telecommunications Group

Usage Type

Mobile ISP

ASN

AS45899

Domain Name

vnpt.com.vn

Country

🇻🇳 Viet Nam

City

Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 113.185.6.163:

This IP address has been reported a total of 29 times from 23 distinct sources. 113.185.6.163 was first reported on January 19th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: Turkey with 3 reports; United States of America with 3 reports; Germany with 1 report. The most common categories in these recent reports were: Web App Attack 6 times; Brute-Force 4 times; Hacking 3 times; Bad Web Bot 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-06 12:24:18 (1 hour ago)	113.185.6.163 (VN/Vietnam/static.vnpt.vn), 10 distributed imapd attacks on account [redacted]	Brute-Force
🇺🇸 TPI-Abuse	2026-09-04 10:40:45 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 113.185.6.163 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 113.185.6.163 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:40:36.016262 2026] [security2:error] [pid 2475:tid 2475] [client 113.185.6.163:36650] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "apqgJM5EsnmK1WPrOOOK7AAAACo"], referer: https://bernsteinip.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 neron	2026-09-03 00:48:45 (3 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-30 21:02:42 (6 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-27 09:00:53 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 11:50:38 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 113.185.6.163 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 113.185.6.163 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 07:50:31.506520 2026] [security2:error] [pid 2386823:tid 2386823] [client 113.185.6.163:39952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|superzilla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superzilla.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amIAB3_F9hPyZi_Sb83oWwAAAAA"], referer: http://superzilla.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 02:17:44 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 113.185.6.163 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 113.185.6.163 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 22:17:37.979610 2026] [security2:error] [pid 4170:tid 4170] [client 113.185.6.163:54446] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|exhaustthelimits.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "exhaustthelimits.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ak8EwexpulmALv3sFAKr6gAAAAE"], referer: http://exhaustthelimits.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Diskominfo Lumajang	2026-07-02 19:10:02 (2 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=21	Brute-Force SSH
🇩🇪 sbajic	2026-07-02 13:05:17 (2 months ago)	Jul 2 15:05:13 eos sshd-session[3053552]: User root from 113.185.6.163 not allowed because none of ... show more Jul 2 15:05:13 eos sshd-session[3053552]: User root from 113.185.6.163 not allowed because none of user's groups are listed in AllowGroups Jul 2 15:05:16 eos sshd-session[3053552]: error: PAM: Authentication failure for illegal user root from 113.185.6.163 Jul 2 15:05:16 eos sshd-session[3053552]: Failed keyboard-interactive/pam for invalid user root from 113.185.6.163 port 40742 ssh2 ... show less	Brute-Force SSH
🇩🇪 sbajic	2026-07-02 09:38:32 (2 months ago)	Jul 2 11:38:28 maia sshd-session[2936469]: User root from 113.185.6.163 not allowed because none of ... show more Jul 2 11:38:28 maia sshd-session[2936469]: User root from 113.185.6.163 not allowed because none of user's groups are listed in AllowGroups Jul 2 11:38:31 maia sshd-session[2936469]: error: PAM: Authentication failure for illegal user root from 113.185.6.163 Jul 2 11:38:31 maia sshd-session[2936469]: Failed keyboard-interactive/pam for invalid user root from 113.185.6.163 port 56524 ssh2 ... show less	Brute-Force SSH
🇺🇸 k725	2026-07-02 08:28:37 (2 months ago)	2026-07-02T08:28:28.128933+00:00 instance sshd-session[2420240]: Invalid user admin from 113.185.6.1 ... show more 2026-07-02T08:28:28.128933+00:00 instance sshd-session[2420240]: Invalid user admin from 113.185.6.163 port 34852 2026-07-02T08:28:30.476724+00:00 instance sshd-session[2420242]: Invalid user admin from 113.185.6.163 port 35934 2026-07-02T08:28:31.901915+00:00 instance sshd-session[2420244]: Invalid user admin from 113.185.6.163 port 36350 2026-07-02T08:28:34.061351+00:00 instance sshd-session[2420246]: Invalid user admin from 113.185.6.163 port 36960 2026-07-02T08:28:35.997986+00:00 instance sshd-session[2420248]: Invalid user user from 113.185.6.163 port 37544 ... show less	Brute-Force SSH
🇦🇺 2000cn.com.au	2026-06-30 10:03:34 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf	SSH Brute-Force
🇫🇷 kipfel★	2026-06-28 12:32:35 (2 months ago)	2026-06-28T14:32:28.053985+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[701950]: Invalid user admin fr ... show more 2026-06-28T14:32:28.053985+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[701950]: Invalid user admin from 113.185.6.163 port 47970 2026-06-28T14:32:31.079550+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[701962]: Invalid user admin from 113.185.6.163 port 48374 2026-06-28T14:32:34.306637+02:00 ovh-dedi-ie-ksleb25-sbg sshd-session[701978]: Invalid user admin from 113.185.6.163 port 48920 ... show less	Brute-Force SSH
Anonymous	2026-06-28 07:11:01 (2 months ago)	2026-06-28T07:10:52.835548+00:00 de-fra2-git1 sshd[1257568]: Invalid user admin from 113.185.6.163 p ... show more 2026-06-28T07:10:52.835548+00:00 de-fra2-git1 sshd[1257568]: Invalid user admin from 113.185.6.163 port 55174 2026-06-28T07:10:58.091385+00:00 de-fra2-git1 sshd[1257586]: Invalid user admin from 113.185.6.163 port 55784 2026-06-28T07:11:00.571676+00:00 de-fra2-git1 sshd[1257614]: Invalid user admin from 113.185.6.163 port 56656 ... show less	Brute-Force SSH
🇨🇭 Boxis.net NOC	2026-06-27 21:08:36 (2 months ago)	(sshd) Failed SSH login from 113.185.6.163 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs; Por ... show more (sshd) Failed SSH login from 113.185.6.163 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 27 23:07:57 da057 sshd[647090]: Did not receive identification string from 113.185.6.163 port 56414 Jun 27 23:08:21 da057 sshd[647513]: Invalid user user from 113.185.6.163 port 35138 Jun 27 23:08:22 da057 sshd[647543]: Invalid user user from 113.185.6.163 port 35974 Jun 27 23:08:25 da057 sshd[647556]: Invalid user user from 113.185.6.163 port 36688 Jun 27 23:08:27 da057 sshd[647585]: Invalid user support from 113.185.6.163 port 37544 show less	Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.65.54

🇩🇪 167.94.146.33

🇺🇸 136.242.125.19

🇷🇺 109.194.108.203

🇺🇸 76.142.231.199

🇬🇧 45.133.173.122

🇫🇷 2001:41d0:303:9f6c::1

🇦🇺 220.235.229.254

🇺🇸 206.204.18.19

🇫🇷 185.26.91.148

🇺🇸 172.70.114.223

🇺🇸 136.242.99.28

🇺🇸 104.223.39.62

🇮🇩 103.97.202.163

🇳🇱 94.154.43.74

🇫🇷 91.238.181.17

🇺🇸 71.246.24.78

🇺🇸 70.183.232.207

🇱🇹 62.60.130.242

🇬🇧 45.133.173.117