JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.98.1.163

116.98.1.163 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 9%: ?

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Hostname(s)	dynamic-adsl.viettel.vn
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Da Lat, Lam Dong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.98.1.163

Whois 116.98.1.163

IP Abuse Reports for 116.98.1.163:

This IP address has been reported a total of 13 times from 12 distinct sources. 116.98.1.163 was first reported on June 23rd 2023, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 botreporter	2026-07-30 03:34:39 (4 weeks ago)	botnet ignoring robots.txt	Bad Web Bot
🇨🇦 1gz	2026-07-24 12:42:39 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /foto-lajm/ronela-hajati-jep-lajmin-e-madh-gati-per-nje-koncert-recital-qe-se-ka-bere-askush-foto-lajm/475935/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 bigorre.org	2026-06-05 13:16:37 (2 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇲🇾 syokadmin	2025-11-25 06:03:00 (9 months ago)	(cpanel) Failed cPanel login from 116.98.1.163 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 1 in the las ... show more (cpanel) Failed cPanel login from 116.98.1.163 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 1 in the last 3600 secs show less	Brute-Force Web App Attack
🇯🇵 VXG-NET	2025-09-22 04:01:23 (11 months ago)	port=80, indicator_type=insecure-credentials	Brute-Force
🇺🇸 TPI-Abuse	2025-09-22 02:45:56 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 116.98.1.163 (dynamic-adsl.viettel.vn): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 116.98.1.163 (dynamic-adsl.viettel.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 22:45:49.794732 2025] [security2:error] [pid 470:tid 470] [client 116.98.1.163:50350] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.apsni.net\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.apsni.net"] [uri "/dvbdream.log"] [unique_id "aNC4Xd3E-EnfTXrT2unT4QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-08-30 00:04:06 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-07-13 22:18:55 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-04-21 06:16:58 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 Frank Henkes	2023-09-07 18:53:34 (2 years ago)	Plek-ProFTP, Plek-Dovecot	FTP Brute-Force Brute-Force
🇫🇷 Dampen59	2023-09-05 15:24:59 (2 years ago)	(smtpauth) Failed SMTP AUTH login from 116.98.1.163 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 5 in th ... show more (smtpauth) Failed SMTP AUTH login from 116.98.1.163 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-09-05 17:23:46 SMTP call from [116.98.1.163]:34113 dropped: too many syntax or protocol errors (last command was "?\377\001?\001/???\033?\031??\026mail.closcenteilles.fr?\v?\004\003?\001\002?", NULL) 2023-09-05 17:23:47 dovecot_plain authenticator failed for (COMPUTER) [116.98.1.163]:1632: 535 Incorrect authentication data ([email protected]) 2023-09-05 17:24:06 SMTP call from [116.98.1.163]:32099 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?", NULL) 2023-09-05 17:24:44 dovecot_plain authenticator failed for (COMPUTER) [116.98.1.163]:24980: 535 Incorrect authentication data 2023-09-05 17:24:54 dovecot_plain authenticator failed for (COMPUTER) [116.98.1.163]:26551: 535 Incorrect authentication data show less	Port Scan
🇮🇩 xveil	2023-09-05 08:31:02 (2 years ago)	2023-09-05T15:30:59.877463 mail-honeypot postfix/submission/smtpd[8550]: warning: unknown[116.98.1.1 ... show more 2023-09-05T15:30:59.877463 mail-honeypot postfix/submission/smtpd[8550]: warning: unknown[116.98.1.163]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2023-06-23 02:42:26 (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:271:aa00::

🇧🇷 179.184.0.32

🇺🇸 174.140.218.138

🇩🇪 162.19.230.21

🇸🇬 159.138.88.16

🇩🇪 151.243.11.13

🇺🇸 136.64.168.50

🇰🇷 115.91.48.142

🇨🇳 115.56.238.174

🇪🇸 84.246.215.125

🇺🇸 77.220.192.251

🇨🇦 52.139.37.240

🇮🇷 46.100.43.138

🇬🇧 35.203.211.175

🇵🇪 161.132.54.218

🇨🇳 114.67.254.65

🇦🇫 103.215.211.234

🇹🇷 88.233.122.158

🇺🇸 65.49.1.210

🇦🇷 45.184.152.3