JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

171.241.65.81

Recent Activity

Abuse Confidence Score

21% Elevated

3 reports

3 reporters · latest 1 day ago

ISP: Viettel Group
Usage Type: Fixed Line ISP
ASN: AS7552
Domain Name: viettel.com.vn
Country: 🇻🇳 Viet Nam
City: Hanoi, Hanoi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

3 from 3 distinct reporters

First reported

October 28th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇫🇮 Finland 1 🇫🇷 France 1 🇹🇷 Turkey 1

Most common categories Brute-Force 2 Port Scan 2 Hacking 2 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 oalver	2026-11-09 03:54:46 UTC · (1 day ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_smb. Sources: honeypot. First seen: 2026-11-09. Risk score: 30/100.	Hacking Brute-Force
🇫🇮 Birdo	2026-10-30 06:16:56 UTC · (1 week ago)	[Honeypot Report] Vulnerability exploitation attempt via SMB An automated exploitation tool attempted to exploit CVE-2017-0144, then obtained shell access and executed commands. Observed: 2026-10-30 06:15 to 2026-10-30 06:16 UTC \| 4 sessions \| 16 e ... show more [Honeypot Report] Vulnerability exploitation attempt via SMB An automated exploitation tool attempted to exploit CVE-2017-0144, then obtained shell access and executed commands. Observed: 2026-10-30 06:15 to 2026-10-30 06:16 UTC \| 4 sessions \| 16 events \| SMB (port 445) Attack chain: 1. Exploit attempt: CVE-2017-0144 2. Shell access obtained; 6 distinct commands executed: SMB1 SESSION_SETUP_ANDX anonymous (null session granted) ; TREE_CONNECT \\<target>\IPC$ ; SMB1 NEGOTIATE (4 dialects) Classification: scanner \| Signatures: Legacy SMB1 Dialect Negotiation, SMB1 EternalBlue / MS17-010 Probe Full evidence: https://github.com/1Birdo/lyrebird-intel/blob/main/incidents/2026/10/171.241.65.81.md Reported by birdo.uk (Lyrebird honeypot lyrebird-01). Emulated service - no host was compromised. show less	Exploited Host Hacking Port Scan
Anonymous	2026-10-28 08:37:22 UTC · (1 week ago)	2026-10-28T10:37:21.036606+02:00 vps kernel: [9547402.188573] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=171.241.65.81 DST=54.37.14.118 LEN=52 TOS=0x08 PREC=0x20 TTL=105 ID=23751 DF PROTO=TCP SPT=62158 DPT=445 ... show more 2026-10-28T10:37:21.036606+02:00 vps kernel: [9547402.188573] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=171.241.65.81 DST=54.37.14.118 LEN=52 TOS=0x08 PREC=0x20 TTL=105 ID=23751 DF PROTO=TCP SPT=62158 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.202.245

🇬🇧 206.189.19.232

🇵🇱 172.64.198.203

🇺🇸 64.62.197.223

🇸🇬 46.250.230.7

🇵🇰 202.69.59.213

🇺🇸 184.105.247.252

🇨🇦 178.128.237.61

🇨🇳 113.24.225.43

🇺🇸 100.31.248.68

🇮🇱 93.172.20.34

🇷🇴 92.118.39.71

🇧🇪 66.249.76.230

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇺🇸 34.186.24.248

🇳🇱 20.229.185.186

🇺🇸 13.218.20.73

🇺🇸 4.236.164.116

🇺🇿 213.230.87.215