JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.179.33.78

116.179.33.78 was found in our database!

This IP was reported 911 times. Confidence of Abuse is 69%: ?

69%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.179.33.78

Whois 116.179.33.78

IP Abuse Reports for 116.179.33.78:

This IP address has been reported a total of 911 times from 84 distinct sources. 116.179.33.78 was first reported on December 13th 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-21 01:19:49 (3 hours ago)	[21/Sep/2026:04:19:49 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-c ... show more [21/Sep/2026:04:19:49 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/05/21-60.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇿🇦 vanderhost	2026-09-20 20:27:57 (8 hours ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/astra-local- ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/astra-local-fonts/ubuntu/4iCs6KVjbNBYlgoKfw72.woff2 via rule: /wp-content show less	Web App Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2026-09-19 08:33:39 (1 day ago)	[19/Sep/2026:11:33:38 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-c ... show more [19/Sep/2026:11:33:38 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/05/23-44.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-09-18 07:57:24 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-09-17 07:53:25 (3 days ago)	Web App Attack	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-17 04:47:34 (4 days ago)	[17/Sep/2026:07:47:34 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-c ... show more [17/Sep/2026:07:47:34 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/06/10-85.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 07:57:44 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 116.179.33.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 116.179.33.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:57:36.980260 2026] [security2:error] [pid 4904:tid 4904] [client 116.179.33.78:57199] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gracefaerie.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gracefaerie.com"] [uri "/Assets/6p/Thumbs.db"] [unique_id "aqpL8LTQuHXVZB6FYrOSNAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-09-16 07:50:43 (4 days ago)	Web App Attack	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-14 00:33:13 (1 week ago)	[14/Sep/2026:03:33:13 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-c ... show more [14/Sep/2026:03:33:13 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/2018/04/2013-2.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 22:31:25 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 116.179.33.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 116.179.33.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 18:31:21.216152 2026] [security2:error] [pid 17760:tid 17760] [client 116.179.33.78:19368] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sighthounds.batw.net\|F\|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sighthounds.batw.net"] [uri "/silkenswiftinfo-site/www.borzois.com"] [unique_id "aqckOcVR8_DHT7rPDJYU1gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-09-13 13:47:46 (1 week ago)	HTTP application-layer DoS / botnet traffic from 116.179.33.78: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 116.179.33.78: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 1gz	2026-09-13 13:41:09 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /bota/te-bukura-dhe-te-shfrenuara-si-festohet-matura-te-vajzat-ruse-foto-lajm/463573/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-09-12 21:38:51 (1 week ago)	[13/Sep/2026:00:38:51 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-c ... show more [13/Sep/2026:00:38:51 +0300] -- 116.179.33.78 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/05/19-69.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 1gz	2026-09-12 14:19:09 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/ja-si-i-kunderpergjigjet-dacic-thacit-per-kosoven/183625/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Skyrider	2026-09-12 09:27:11 (1 week ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack

Showing 1 to 15 of 911 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.81.216.54

🇬🇧 185.216.145.180

🇳🇱 176.65.148.71

🇺🇸 173.72.116.37

🇺🇸 147.185.132.82

🇺🇸 147.93.133.30

🇵🇰 122.129.88.19

🇵🇰 119.73.3.97

🇨🇳 115.191.23.138

🇵🇰 115.186.179.34

🇨🇳 111.29.38.32

🇨🇦 85.217.149.64

🇺🇸 66.132.172.134

🇸🇬 47.128.44.84

🇬🇧 2a06:4880::1c

🇸🇬 207.166.172.198

🇨🇳 150.158.40.98

🇬🇷 147.102.18.101

🇨🇦 85.217.149.51

🇮🇹 57.131.17.114