JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.179.33.135

116.179.33.135 was found in our database!

This IP was reported 862 times. Confidence of Abuse is 78%: ?

78%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.179.33.135

Whois 116.179.33.135

IP Abuse Reports for 116.179.33.135:

This IP address has been reported a total of 862 times from 72 distinct sources. 116.179.33.135 was first reported on December 5th 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hugopvigo	2026-09-16 20:37:12 (3 hours ago)	"2026-09-16 20:37:12+00:00 116.179.33.135 IP con score alto (76) detectada en el log."	Brute-Force SSH
🇩🇪 LRob	2026-09-16 20:17:55 (3 hours ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /stage-epee-hommes-senior-individuel-a-tignes/feed/ \| 2026-09-16 20:17 UTC show less	Bad Web Bot
🇺🇸 www.nomadomia.com	2026-09-16 14:05:10 (9 hours ago)	Unauthorised API scanning	Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-09-16 07:50:34 (16 hours ago)	Web App Attack	Web App Attack
🇺🇸 www.nomadomia.com	2026-09-14 20:14:32 (2 days ago)	Unauthorised API scanning	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-14 12:24:40 (2 days ago)	[14/Sep/2026:15:24:39 +0300] -- 116.179.33.135 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [14/Sep/2026:15:24:39 +0300] -- 116.179.33.135 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/06/12-8.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 1gz	2026-09-14 03:13:00 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kompjuter--internet/themeluesi-i-facebook-ut-haker/17791/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Skyrider	2026-09-13 07:57:52 (3 days ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇺🇸 1gz	2026-09-13 03:39:42 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/jeni-ne-lidhje-me-nje-te-vjeter-mesoni-pse-jeni-te-ndryshem-ne-tru/412043/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-09-12 14:41:12 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /bota/ftohja-e-re-botampeumlrore/6689/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-12 09:52:16 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 116.179.33.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 116.179.33.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 05:52:09.563714 2026] [security2:error] [pid 20529:tid 20529] [client 116.179.33.135:58106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nwtree.com\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nwtree.com"] [uri "/data/mysqli_error_trace.inc"] [unique_id "aqUgybJZ-aVYxmXagJvEhwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 00:50:59 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 116.179.33.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 116.179.33.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 20:50:54.138502 2026] [security2:error] [pid 30541:tid 30541] [client 116.179.33.135:31010] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.chrisbilder.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.chrisbilder.com"] [uri "/regression/chapters/SO2.DAT"] [unique_id "aqSh7tCHhEtcJ2OwQb2tHQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-11 21:48:45 (5 days ago)	[12/Sep/2026:00:48:44 +0300] -- 116.179.33.135 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [12/Sep/2026:00:48:44 +0300] -- 116.179.33.135 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2016/12/29-27.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-10 21:22:48 (6 days ago)	[11/Sep/2026:00:22:48 +0300] -- 116.179.33.135 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [11/Sep/2026:00:22:48 +0300] -- 116.179.33.135 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/06/8-5.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-10 06:56:15 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 116.179.33.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 116.179.33.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 02:56:07.879129 2026] [security2:error] [pid 7553:tid 7553] [client 116.179.33.135:48887] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Siento/Thumbs.db"] [unique_id "aqJUh4lDgXSM9rRk2kSuyAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 862 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.185.255.227

🇺🇸 154.222.105.73

🇫🇷 85.217.140.28

🇺🇸 68.224.185.151

🇨🇳 43.139.248.128

🇧🇪 34.38.109.115

🇺🇸 20.80.75.245

🇸🇬 212.73.148.2

🇳🇱 204.76.203.11

🇫🇮 193.233.139.106

🇨🇱 179.2.64.27

🇨🇳 120.26.220.254

🇻🇳 116.110.211.178

🇨🇳 111.173.158.227

🇮🇳 103.99.37.57

🇫🇷 91.196.152.195

🇺🇸 71.6.167.142

🇩🇪 69.5.169.179

🇺🇸 66.132.172.224

🇺🇸 66.132.172.120