JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 110.35.80.116

110.35.80.116 was found in our database!

This IP was reported 10,110 times. Confidence of Abuse is 100%: ?

100%

ISP	NAP Info Lintas Nusa
Usage Type	Fixed Line ISP
ASN	AS17727
Hostname(s)	IP-80-116.napinfo.net
Domain Name	nap.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 110.35.80.116

Whois 110.35.80.116

IP Abuse Reports for 110.35.80.116:

This IP address has been reported a total of 10,110 times from 1,205 distinct sources. 110.35.80.116 was first reported on March 14th 2026, and the most recent report was 48 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-08-19 13:40:06 (48 minutes ago)	blocked for webapp attack \| path requested: / \| seen at 2026-08-19 13:39:41.765 \|	Web App Attack
🇮🇪 AutosOnShow	2026-08-19 13:06:04 (1 hour ago)	blocked for webapp attack \| path requested: / \| seen at 2026-08-19 13:05:38.651 \|	Web App Attack
🇺🇸 azminawwar	2026-08-19 12:54:22 (1 hour ago)	[110.35.80.116] triggered by honeypot on port [80], Timestamp [2026-08-19T12:54:22Z]METHOD=POST PATH ... show more [110.35.80.116] triggered by honeypot on port [80], Timestamp [2026-08-19T12:54:22Z]METHOD=POST PATH=/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP=HTTP/1.1 UA="libredtail-http show less	Port Scan Hacking
🇫🇮 diego021	2026-08-19 12:42:10 (1 hour ago)	110.35.80.116 135.181.251.148 - [19/Aug/2026:07:42:06 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e ... show more 110.35.80.116 135.181.251.148 - [19/Aug/2026:07:42:06 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 404 158 "-" "libredtail-http" 110.35.80.116 135.181.251.148 - [19/Aug/2026:07:42:08 -0500] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 404 158 "-" "libredtail-http" 110.35.80.116 135.181.251.148 - [19/Aug/2026:07:42:09 -0500] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 158 "-" "libredtail-http" 110.35.80.116 135.181.251.148 - [19/Aug/2026:07:42:09 -0500] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 158 "-" "libredtail-http" ... show less	Web App Attack
🇺🇸 xKaramx	2026-08-19 12:00:41 (2 hours ago)	HTTP honeypot (internet-facing deception server) observed 5 request(s) from this address. Observed: ... show more HTTP honeypot (internet-facing deception server) observed 5 request(s) from this address. Observed: PHPUnit eval-stdin RCE attempts (CVE-2017-9841); CGI path traversal to shell execution; login endpoint brute-force attempts; webshell and backdoor probing. Reported automatically from honeypot telemetry. show less	Hacking SQL Injection Brute-Force Bad Web Bot Web App Attack
🇺🇸 MakoWish	2026-08-19 11:44:48 (2 hours ago)	Fuzzing for misconfigured web servers.	Hacking Web App Attack
🇫🇷 zulzeen	2026-08-19 11:16:40 (3 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Web Attack)	Hacking Web App Attack
Anonymous	2026-08-19 11:09:58 (3 hours ago)	110.35.80.116 - - [19/Aug/2026:11:09:57 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 110.35.80.116 - - [19/Aug/2026:11:09:57 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" 110.35.80.116 - - [19/Aug/2026:11:09:58 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-" ... show less	Bad Web Bot
🇺🇸 MPL	2026-08-19 09:36:03 (4 hours ago)	tcp/2375 (2 or more attempts)	Port Scan
🇫🇷 mail.avx.gr	2026-08-19 09:26:10 (5 hours ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default:80 110.35.80.116 - - [19/Aug/2026:12:26:0 ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default:80 110.35.80.116 - - [19/Aug/2026:12:26:09 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 404 "-" "libredtail-http" show less	Web App Attack
🇦🇺 LiftUp Hosting	2026-08-19 08:45:59 (5 hours ago)	Honeypot hit: HTTP/1.1 request on 2375 GET /containers/json User-Agent: libredtail-http Accept: / ... show more Honeypot hit: HTTP/1.1 request on 2375 GET /containers/json User-Agent: libredtail-http Accept: /; 2375 [1] TCP show less	Hacking Bad Web Bot
🇩🇪 edena	2026-08-19 08:34:25 (5 hours ago)	110.35.80.116 - - [19/Aug/2026:10:34:24 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 110.35.80.116 - - [19/Aug/2026:10:34:24 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 403 1867 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇺🇸 MPL	2026-08-19 08:27:05 (6 hours ago)	tcp/443 (2 or more attempts)	Port Scan
🇧🇷 diego	2026-08-19 08:14:28 (6 hours ago)	[rede-44-49] 08/19/2026-05:14:28.599238, 110.35.80.116, Protocol: 6, ET CINS Active Threat Intellige ... show more [rede-44-49] 08/19/2026-05:14:28.599238, 110.35.80.116, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 141 show less	Hacking
🇺🇸 cwytech	2026-08-19 08:12:20 (6 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/web-asn-lockdown-high.	Bad Web Bot Web App Attack

Showing 1 to 15 of 10110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 196.249.237.24

🇺🇸 174.78.139.165

🇵🇾 143.202.209.172

🇨🇳 113.221.77.92

🇮🇳 103.159.85.90

🇨🇳 222.176.200.154

🇳🇱 176.65.148.173

🇨🇮 154.0.30.137

🇻🇳 103.199.16.90

🇩🇪 80.91.223.114

🇧🇬 79.124.49.90

🇺🇸 35.93.38.145

🇺🇸 34.138.194.45

🇮🇳 122.167.118.145

🇦🇷 45.230.82.45

🇺🇸 43.159.128.155

🇺🇸 35.231.117.184

🇬🇧 2a06:4882:b000::d3

🇹🇼 220.132.163.227

🇩🇪 194.187.176.222