178.160.204.148

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
64 reports
42 reporters · latest 3 hours ago
ISP
Telecom Armenia OJSC
Usage Type
Mobile ISP
ASN
AS12297
Domain Name
telecomarmenia.am
Country
🇦🇲 Armenia
City
Yerevan, Yerevan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
64 from 42 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 18 🇫🇷 France 9 🇩🇪 Germany 7
Most common categories Port Scan 47 Brute-Force 20 Hacking 18 SSH 12 IoT Targeted 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 syscfg
Cowrie SSH honeypot: 90 attempt(s) from 178.160.204.148. Period: 2026-11-12T12:54:06 to 2026-11-12T12:54:21 UTC. Usernames tried: root. Passwords tried: 123456, huigu309. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇺🇸 rjdefrancisco
Unwanted traffic detected by honeypot on November 14, 2026: port scans (1 port 23 scan).
Port Scan Brute-Force SSH
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇩🇪 numberstorm
Port Scan
🇪🇸 whatda
HoneyAI: Telnet brute-force on honeypot
IoT Targeted Brute-Force
🇺🇸 RAP
2026-11-14 10:42:20 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇮🇳 shax
Brute-Force
🇱🇹 NotACaptcha
2026-11-14T06:19:15.273897+02:00 3d3l kernel: banned.IN=venet0 OUT= MAC= SRC=178.160.204.148 LEN=60 TTL=54 ID=2560 DF TCP DPT=23 WINDOW=29200 SYN
Port Scan
🇦🇺 Block Rockin' Beats
Attempted connection to TCP port 23
Port Scan
🇩🇪 iNetWorker
firewall-block, port(s): 23/tcp
Port Scan
🇰🇷 ian ian
Unsolicited TCP SYN to closed port(s) 23 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-13T19:08:16Z UTC, blocked by firewall.
Brute-Force Port Scan
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇫🇷 noi
honeypot proto=TCP dpt=23 flags=SYN hits=1 window=1h
Port Scan
🇺🇸 MPL
tcp/23 (4 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 220.135.33.204
🇹🇼 198.235.24.97
🇧🇷 191.251.252.46
🇲🇽 189.165.23.212
🇺🇸 142.93.193.235
🇺🇸 136.64.76.201
🇰🇷 121.183.240.55
🇧🇬 78.128.112.74
🇩🇪 196.251.102.125
🇦🇷 191.241.142.170
🇭🇰 191.223.44.8
🇮🇩 163.7.4.109
🇵🇰 153.117.50.52
🇮🇩 103.19.78.119
🇧🇬 91.92.199.36
🇮🇹 79.13.140.121
feedback