JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

125.212.159.218

Recent Activity

Abuse Confidence Score

11% Caution

22 reports

14 reporters · latest 1 day ago

ISP: Viettel Group
Usage Type: Fixed Line ISP
ASN: AS7552
Domain Name: viettel.com.vn
Country: 🇻🇳 Viet Nam
City: Vinh, Nghe An Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 14 distinct reporters

First reported

June 25th 2021

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇨🇦 Canada 1 🇩🇪 Germany 1

Most common categories Web App Attack 1 Bad Web Bot 1 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-11-08 06:16:40 UTC · (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/shtate-zgjedhjet-qe-prinderit-e-gjenerates-x-do-te-ndryshonin-po-ti-rritnin-edhe-nje-here-femijet/1092488/ UA: Mozilla/5.0 (Wi ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/shtate-zgjedhjet-qe-prinderit-e-gjenerates-x-do-te-ndryshonin-po-ti-rritnin-edhe-nje-here-femijet/1092488/ UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3837.131 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 LRob	2026-09-14 16:29:47 UTC · (1 month ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /marque/3-lapierre \| query: q=Mat%C3%A9riau-Aluminium%2FFamille-Overvolt ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /marque/3-lapierre \| query: q=Mat%C3%A9riau-Aluminium%2FFamille-Overvolt%2FMarque+moteur-Bosch%2FCat%C3%A9gories-meilleur+v%C3%A9lo+entre+5000+et+10000+euro \| 2026-09-14 16:29 UTC show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-07-29 05:24:38 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-07-14 07:21:04 UTC · (3 months ago)	block ruleset honeypot detection from VN 94A4A313D6448382F283B457A9C419564BD9A72C	Bad Web Bot
🇺🇸 kosada.com	2026-07-13 06:17:01 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇦 1gz	2026-07-07 03:21:21 UTC · (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/maliqit/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/maliqit/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-03 12:05:14 UTC · (4 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-06-10 06:34:18 UTC · (4 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2025-11-16 03:53:10 UTC · (11 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇿 Countryman	2025-10-13 02:36:40 UTC · (1 year ago)	repeated unauthorized connection attempts, host sweep, port 445	Hacking Brute-Force
🇨🇿 Countryman	2025-10-13 01:56:31 UTC · (1 year ago)	repeated unauthorized connection attempts, host sweep, port 445	Hacking Brute-Force
🇩🇪 botreporter	2025-07-01 19:17:06 UTC · (1 year ago)	botnet ignoring robots.txt	Bad Web Bot
🇭🇰 sthoyer.de	2024-09-10 12:26:04 UTC · (2 years ago)	Sep 10 14:26:02 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=125.212.159.218 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=10704 DF PROTO=TCP SPT=33971 DPT=445 WINDOW=8192 RES=0x00 SYN URGP ... show more Sep 10 14:26:02 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=125.212.159.218 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=10704 DF PROTO=TCP SPT=33971 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇭🇰 sthoyer.de	2024-09-10 11:36:54 UTC · (2 years ago)	Sep 10 13:36:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=125.212.159.218 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=10894 DF PROTO=TCP SPT=1226 DPT=445 WINDOW=8192 RES=0x00 SYN URGP= ... show more Sep 10 13:36:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:30:af:08:00 SRC=125.212.159.218 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=10894 DF PROTO=TCP SPT=1226 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Invisiblemen	2022-11-21 23:15:07 UTC · (3 years ago)	Unauthorized connection attempt from IP address 125.212.159.218 on Port 445(SMB)	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 193.151.189.109

🇧🇷 200.175.104.103

🇺🇸 195.184.76.131

🇺🇸 185.213.193.172

🇧🇷 164.163.9.249

🇸🇬 118.194.234.14

🇳🇱 85.146.219.204

🇺🇸 66.132.224.25

🇧🇪 34.156.35.188

🇺🇸 199.165.159.118

🇳🇱 193.47.62.69

🇦🇷 186.18.142.80

🇩🇪 172.120.236.116

🇻🇳 118.70.182.193

🇰🇷 112.172.43.75

🇦🇺 101.113.171.132

🇺🇸 64.49.36.159

🇺🇸 54.234.25.230

🇮🇪 52.16.213.65

🇻🇳 27.72.28.222