212.192.158.166
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- FGUP GRCHC
- Usage Type
- Commercial
- ASN
- AS61280
- Domain Name
- rfc-cfa.ru
- Country
- 🇷🇺 Russian Federation
- City
- Moscow, Moscow
Abuse Reports
Total reports
153 from
42 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇺 Mga Admin |
[Wed Nov 11 20:27:59.537241 2026] [authz_core:error] [pid 245697:tid 245828] [client 212.192.158.166:60272] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
|
Web App Attack | |
| 🇷🇺 webserfer |
[f2b] honeypot [W1:1:?]
|
Port Scan Hacking | |
| 🇷🇺 kkn |
|
Web App Attack | |
| 🇷🇺 Anton La |
Keenetic Firewall: Unauthorized connection attempt to ports [1050/udp,5683/udp,6881/udp,53/udp]. Blocked via Kernel/NFLOG Trap. (7 hits in 24h). [+ 7 new hits since last report]
|
Hacking Port Scan | |
| 🇷🇺 Albram |
Port Scanner or SMTP unauthorized access tries
...
|
Port Scan Brute-Force | |
| 🇩🇪 Ivan Ivanov |
Global Docker honeypot port trap
|
Port Scan | |
| 🇺🇸 azminawwar |
[212.192.158.166] triggered by honeypot on port [80], Timestamp [2026-11-06T07:02:21Z]METHOD=GET PATH=/+cscoe+/message.html HTTP=HTTP/1.0 UA="Mozilla/5.0 (compatible; CyberOKInspect/1.0; +``https://ww
|
Port Scan Hacking | |
| 🇷🇺 Anton La |
Keenetic Firewall: Unauthorized connection attempt to ports [1050/udp,5683/udp,6881/udp]. Blocked via Kernel/NFLOG Trap. (7 hits in 24h).
|
Hacking Port Scan | |
| 🇷🇺 genokrad |
Unauthorized connection try on TCP/22 (SSH)
|
Port Scan | |
| 🇷🇺 AntonSH |
212.192.158.166:54456
|
DDoS Attack Brute-Force VPN IP Hacking | |
| 🇷🇺 webserfer |
[f2b] honeypot [W1:1:?]
|
Port Scan Hacking | |
| 🇷🇺 Albram |
IMAP Brute-Force
...
|
Brute-Force | |
| Anonymous |
Nmap.Script.Scanner
|
Hacking | |
| 🇩🇪 Ivan Ivanov |
Global Docker honeypot port trap
|
Port Scan | |
| 🇷🇺 genokrad |
Website scan TCP 80/443 "/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:135.0) Gecko/20100101"
|
Port Scan Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown