JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

175.100.79.166

Recent Activity

Abuse Confidence Score

10% Caution

48 reports

37 reporters · latest 5 days ago

ISP: VIETTEL (CAMBODIA) PTE., LTD.
Usage Type: Fixed Line ISP
ASN: AS38623
Domain Name: viettel.com.vn
Country: 🇰🇭 Cambodia
City: Siem Reap, Siem Reap

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

48 from 37 distinct reporters

First reported

March 20th 2024

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 1 🇺🇸 United States of America 1

Most common categories Bad Web Bot 1 DDoS Attack 1 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-11-03 06:35:10 UTC · (5 days ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 鬼影233	2026-09-21 10:40:25 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇩🇪 Vegascosmetics	2026-09-04 07:40:16 UTC · (2 months ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848en/Geral/ChangeCountry)	Hacking Bad Web Bot Web App Attack
🇨🇿 ddw	2026-08-11 01:35:27 UTC · (2 months ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇵🇱 miriks	2026-08-11 01:19:37 UTC · (2 months ago)	Automated scan detected: GET /.vscode/sftp.json — UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0	Port Scan Web App Attack
🇩🇪 4server	2026-08-10 22:32:14 UTC · (2 months ago)	[TueAug1100:32:09.7721612026][security2:error][pid917100:tid917172][client175.100.79.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ... show more [TueAug1100:32:09.7721612026][security2:error][pid917100:tid917172][client175.100.79.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"acquaallaspina.ch\"][uri\"/sftp-config.json\"][unique_id\"anpRafYLiXa06QzNwDSpOwAAAMk\"] show less	Port Scan Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-10 22:32:04 UTC · (2 months ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.space \| URI: /sftp-config.json \| UA: ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.space \| URI: /sftp-config.json \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇩🇰 RhQM	2026-08-10 20:38:10 UTC · (2 months ago)		Bad Web Bot Exploited Host Web App Attack
🇩🇪 findlab	2026-08-10 20:00:01 UTC · (2 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 Ar1s	2026-08-10 18:03:50 UTC · (2 months ago)	[1:5000005] ETN AGGRESSIVE IPs Group 5 ::: Port: 80/TCP	Exploited Host
🇨🇭 4server	2026-08-10 16:30:13 UTC · (2 months ago)	[MonAug1018:30:10.3140402026][security2:error][pid349415:tid349647][client175.100.79.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][l ... show more [MonAug1018:30:10.3140402026][security2:error][pid349415:tid349647][client175.100.79.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"creazione-siti-ticino.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"ann8kqlOV8C_Q0mHyzwMxQAAAUA\"] show less	Hacking Web App Attack
🇩🇪 LRob	2026-08-10 16:14:27 UTC · (2 months ago)	Credential and secrets file probing \| req: /.vscode/sftp.json \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-08-10 16:09:58 UTC · (2 months ago)	[10/Aug/2026:19:09:57 +0300] -- 175.100.79.166 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.vscode/sftp.json HTTP/1.1	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-08-10 15:23:56 UTC · (2 months ago)	cloudlinux2 fail2ban: 2026-08-10 17:19:44,815 fail2ban.filter [1708]: INFO [recidive] Found 34.38.22.80 - 2026-08-10 17:19:44cloudlinux2 fail2ban: 2026-08-10 17:19:44,579 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 34 ... show more cloudlinux2 fail2ban: 2026-08-10 17:19:44,815 fail2ban.filter [1708]: INFO [recidive] Found 34.38.22.80 - 2026-08-10 17:19:44cloudlinux2 fail2ban: 2026-08-10 17:19:44,579 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 34.38.22.80 - 2026-08-10 17:19:44cloudlinux2 fail2ban: 2026-08-10 17:19:44,255 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 34.38.22.80 - 2026-08-10 17:19:44cloudlinux2 fail2ban: 2026-08-10 17:19:44,768 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 34.38.22.80 - 2026-08-10 17:19:44cloudlinux2 fail2ban: 2026-08-10 17:19:44,276 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 34.38.22.80 - 2026-08-10 17:19:44cloudlinux2 fail2ban: 2026-08-10 17:19:44,809 fail2ban.actions [1708]: NOTICE [plesk-modsecurity] Ban 34.38.22.80cloudlinux2 fail2ban: 2026-08-10 17:19:43,144 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 104.28.154.251 - 2026-08-10 17:19:42cloudlinux2 fail2ban: 2026-08-10 17:20: show less	Brute-Force
🇩🇪 LRob	2026-08-10 11:12:29 UTC · (2 months ago)	Credential and secrets file probing \| req: /sftp-config.json \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0	Hacking Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.29.231.106

🇳🇱 193.176.31.196

🇷🇺 178.178.194.151

🇳🇱 89.21.67.181

🇳🇱 85.11.190.10

🇳🇱 81.19.216.87

🇩🇪 69.5.169.196

🇺🇸 68.44.149.158

🇺🇸 66.132.195.50

🇺🇸 50.231.243.28

🇨🇳 42.63.158.14

🇵🇰 39.34.190.53

🇨🇳 36.138.32.110

🇨🇳 220.178.82.124

🇩🇪 213.61.187.253

🇺🇸 199.165.159.56

🇩🇪 194.88.98.118

🇺🇸 192.241.135.48

🇳🇱 185.223.235.62

🇳🇱 109.160.32.116