113.162.84.21 Threat Intelligence and Host Information

May 24, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 113.162.84.21 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

Tags: cyber security, ioc, malicious, Nextray, phishing
JARM: 29d29d20d29d29d21c29d29d29d29dcd50e8323a02f4016ca805be06d85520
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, sblam, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, stopforumspam_365d

Country: Vietnam
Network:
Noticed: 30 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Open Ports Detected

15672 161 2000 21 30002 30003 30004 30009 30011 30017 30021 30050 30106 30110 30111 30122 443 555 5672 80 8080 8291 8888 9100

CVEs Detected

CVE-2014-4078 CVE-2017-7656 CVE-2017-7657 CVE-2017-7658 CVE-2017-9735 CVE-2018-12536 CVE-2019-10241 CVE-2019-10247 CVE-2020-27216 CVE-2021-28165 CVE-2021-28169 CVE-2021-34428 CVE-2022-2047 CVE-2022-2048 CVE-2023-26048 CVE-2023-26049 CVE-2023-36479 CVE-2023-40167 CVE-2023-44487 CVE-2023-46118 CVE-2024-6763

Map

Whois Information

inetnum: 113.160.0.0 - 113.191.255.255
netname: VNPT-VN
descr: Vietnam Posts and Telecommunications Group
descr: No 57, Huynh Thuc Khang Street, Lang Ha ward, Dong Da district, Ha Noi City
country: VN
admin-c: PTH13-AP
tech-c: PTH13-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-VN-VNNIC
mnt-lower: MAINT-VN-VNPT
mnt-routes: MAINT-VN-VNPT
last-modified: 2018-01-25T03:55:17Z
mnt-irt: IRT-VNNIC-AP
irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-24-35564944
fax-no: +84-24-37821462
e-mail: hm-changed@vnnic.vn
abuse-mailbox: hm-changed@vnnic.vn
admin-c: NTTT1-AP
tech-c: NTTT1-AP
mnt-by: MAINT-VN-VNNIC
last-modified: 2017-11-08T09:40:06Z
person: Pham Tien Huy
address: VNPT-VN
country: VN
phone: +84-24-37741604
e-mail: huypt@vnpt.vn
nic-hdl: PTH13-AP
mnt-by: MAINT-VN-VNPT
last-modified: 2017-11-19T07:06:20Z
route: 113.162.64.0/19
descr: VietNam Post and Telecom Corporation (VNPT)
descr: VNPT-AS-AP
descr: VNPT-VN
country: VN
origin: AS45899
notify: hm-changed@vnnic.net.vn
mnt-by: MAINT-VN-VNPT
last-modified: 2018-06-29T01:50:45Z

Links to attack logs

Share on: