JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.212.158.166

125.212.158.166 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 10%: ?

10%

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Hostname(s)	dynamic-ip-adsl.viettel.vn
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Vinh, Nghe An Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.212.158.166

Whois 125.212.158.166

IP Abuse Reports for 125.212.158.166:

This IP address has been reported a total of 25 times from 17 distinct sources. 125.212.158.166 was first reported on December 12th 2020, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SiliSoftware	2026-09-21 01:24:43 (3 days ago)	/phpBB3/posting.php?mode=quote&f=22&p=2343&sid=fff22583f3851a640c5d5295eb28ea0d	Web App Attack
🇺🇸 kosada.com	2026-08-01 01:39:06 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 DrLex0	2026-07-15 10:29:02 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 125.212.158.166 443 - [15/Jul/2026:04:53:27 +0000] "GET [redacted] HTTP/1.1" 200 6897 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 125.212.158.166 443 - [15/Jul/2026:10:29:02 +0000] "GET [redacted] HTTP/1.1" 503 6163 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Bad Web Bot Exploited Host
🇺🇸 stechusa	2026-07-15 07:59:33 (2 months ago)	ELEVATED_THREAT \| 578 IPs targeting /brand.html \| URL template shared by 241 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 578 IPs targeting /brand.html \| URL template shared by 241 IPs: /brand.html?bulb_shape_type=&bulb_shape=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.98, unique_ips=827) show less	Bad Web Bot DDoS Attack
🇳🇱 DrLex0	2026-07-15 04:53:27 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 125.212.158.166 443 - [15/Jul/2026:04:53:27 +0000] "GET [redacted] HTTP/1.1" 200 6897 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇳🇱 DrLex0	2026-07-14 17:06:37 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 125.212.158.166 443 - [14/Jul/2026:17:06:37 +0000] "GET [redacted] HTTP/1.1" 200 7177 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-07-14 09:50:16 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇦 1gz	2026-07-06 01:33:21 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /uncategorized/shendetesi-gabimet-gjate-pastrimit-qe-ju-a-cojne-perpjekjet-dem-foto-lajm-504860/5072/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-04 04:14:28 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-06-11 06:32:15 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇨🇦 1gz	2026-04-07 04:40:38 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sport/ventura-nga-itali-suedi-e-2017-es-nuk-ka-ndryshuar-asgje-faji-i-sistemit-dhe-kultures/870600/ UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3837.131 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 bigorre.org	2026-04-04 13:12:00 (5 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2025-05-09 02:38:29 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 geeek	2023-08-09 10:46:24 (3 years ago)	Port scanning: 445 TCP Blocked	Port Scan
🇩🇪 speedhost.se	2023-01-30 12:36:03 (3 years ago)	Unauthorized connection attempt detected from IP address 125.212.158.166 to port 445 (WARDEN) [g]	Brute-Force Exploited Host

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.38.212.227

🇹🇳 193.95.2.161

🇦🇷 181.1.222.129

🇭🇰 168.76.131.178

🇺🇸 152.32.150.26

🇫🇷 91.196.152.203

🇫🇷 85.217.140.5

🇺🇸 65.49.1.120

🇱🇹 62.60.130.201

🇺🇸 35.203.171.64

🇪🇬 197.35.91.59

🇨🇴 152.200.205.179

🇰🇷 140.238.3.21

🇻🇳 103.249.117.229

🇮🇷 5.202.47.67

🇫🇷 162.159.124.13

🇮🇳 122.187.174.78

🇫🇷 104.105.203.180

🇧🇩 103.153.170.38

🇻🇳 103.9.206.69