160.30.168.166

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
57% Elevated
68 reports
38 reporters · latest 1 day ago
ISP
Cao Hoang Hai Technology Company Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS152983
Domain Name
caohoanghai.store
Country
🇻🇳 Viet Nam
City
Hanoi, Hanoi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
68 from 38 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 5 🇫🇷 France 2
Most common categories Web App Attack 17 Hacking 7 Port Scan 2 Brute-Force 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Web App Attack, Hacking
Hacking Web App Attack
🇳🇱 Site.eu
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
Hacking Web App Attack
🇲🇹 Malta
160.30.168.166 - - [07/Nov/2026:21:05:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:155.0) Gecko/20100101 Firefox/155.0"
Hacking Web App Attack
🇫🇷 LRob
Web exploit attempt | method: GET | path: /wp-class-media.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:155.0) Gecko/20100101 Firefox/155.0
Hacking Web App Attack
🇳🇱 Site.eu
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
Hacking Web App Attack
🇫🇷 ✨
Web App Attack
Anonymous
[da.kdns.gr] httpd-shell-path-probe: sites=www.onar-pension.gr; logs=/var/log/httpd/domains/onar-pension.gr.log; samples=/wp-content/plugins/classic-editor/classic-editor.php
Hacking Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-10-31T11:27:56.000Z.
Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-10-30T18:42:29.000Z.
Web App Attack
🇩🇪 4server
Port Scan Brute-Force Web App Attack
🇺🇸 ambor
Honeypot triggered: /wp-content/plugins/acijifoda/acijifoda.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:155.0) Gecko/20100101 Firefox/155.0. Method: GET
Web App Attack
🇩🇪 LRob
Hacking Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-10-28T05:12:57.000Z.
Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-10-27T17:27:03.000Z.
Web App Attack
🇩🇪 4server
Port Scan Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69
🇺🇸 147.185.132.184
🇩🇪 144.172.69.158
🇲🇺 102.117.18.141
🇺🇸 43.159.143.187
🇦🇺 34.40.145.110
🇷🇴 2.57.122.209
🇺🇸 205.210.31.242
🇳🇿 172.196.43.109
🇵🇱 172.68.159.105
🇧🇷 170.244.222.145
🇳🇱 134.19.179.179
🇺🇸 129.121.103.78
🇧🇪 78.21.174.132
🇧🇷 205.210.31.135
🇨🇴 186.29.113.241
🇺🇸 184.186.102.208
🇵🇱 172.68.159.106
🇪🇸 95.23.148.79
🇨🇿 77.87.246.114
feedback