JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.179.33.140

116.179.33.140 was found in our database!

This IP was reported 645 times. Confidence of Abuse is 48%: ?

48%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.179.33.140

Whois 116.179.33.140

IP Abuse Reports for 116.179.33.140:

This IP address has been reported a total of 645 times from 56 distinct sources. 116.179.33.140 was first reported on December 13th 2021, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-15 06:17:06 (8 minutes ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-06-15 03:26:26 (2 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/be-kosova-te-pastrohet-nga-korrupsioni/28607/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-15 00:33:50 (5 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-14 09:09:41 (21 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /foto-lajm/kanceri-po-ha-shqiptaret-rriten-frikshem-shifrat-ne-2018-qytetet-me-te-rrezikshme-foto-lajm/465126/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-06-14 06:41:31 (23 hours ago)	Brute force	Brute-Force
🇫🇷 Sklurk	2026-06-14 06:10:34 (1 day ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-14 03:19:03 (1 day ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.140: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.140: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 06:18:59.692550 2026] [security2:error] [pid 921869:tid 921936] [client 116.179.33.140:11919] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/post-24443.css"] [unique_id "ai4do17fuOvzHSXykmx-7QAAAAQ"], referer: https://ftiaxtomonosou.gr/%CE%BD%CF%84%CE%BF%CF%85%CE%BB%CE%AC%CF%80%CE%B1/page/6/ show less	Port Scan
🇬🇷 setupgr	2026-06-14 01:44:45 (1 day ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.140: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.140: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 04:44:44.719976 2026] [security2:error] [pid 922089:tid 922116] [client 116.179.33.140:29739] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/uploads/premium-addons-elementor/pafe-20310.css"] [unique_id "ai4HjI2186Wa_UvIHKhxPQAAAYA"], referer: https://ftiaxtomonosou.gr/mdf/page/4/ show less	Port Scan
🇮🇩 soc-yk	2026-06-13 13:31:11 (1 day ago)	Type: suspicious_network_activity Risk: 64 Events: 12212 Evidence: - Persistent suspicious network ... show more Type: suspicious_network_activity Risk: 64 Events: 12212 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇬🇷 setupgr	2026-06-13 12:26:30 (1 day ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.140: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.140: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 15:26:28.849749 2026] [security2:error] [pid 784503:tid 784613] [client 116.179.33.140:7748] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/custom-apple-webkit.min.css"] [unique_id "ai1MdKP-gsFtswuT33T4iQAAAEs"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CE%B4%CF%81%CF%85%CF%82-%CE%B1%CE%BC%CE%B5%CF%81%CE%B9%CE%BA%CE%AE%CF%82-%CE%BB%CE%B5%CF%85%CE%BA%CE%AE-2/ show less	Port Scan
🇫🇷 Sklurk	2026-06-13 06:10:16 (2 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-06-13 04:03:58 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-12 13:45:08 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 116.179.33.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 116.179.33.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 09:45:02.141898 2026] [security2:error] [pid 32348:tid 32354] [client 116.179.33.140:62211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woofnrose.com"] [uri "/wp-config.txt"] [unique_id "aiwNXkNkMVLA38kGHvRgIwAAAUA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-06-12 06:02:24 (3 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-06-12 01:37:39 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 645 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.77

🇭🇰 47.242.37.198

🇺🇸 18.226.227.125

🇺🇸 192.178.119.221

🇲🇽 187.217.237.115

🇺🇸 172.56.125.246

🇬🇧 123.58.207.140

🇷🇴 109.166.135.200

🇸🇬 104.234.174.55

🇺🇸 91.230.168.247

🇨🇭 89.236.172.37

🇷🇴 80.94.95.216

🇺🇸 66.132.195.52

🇺🇸 2607:f8b0:4004:1001::128

🇺🇸 2600:1f10:4d9c:900:6231:437e:19d5:8a56

🇦🇷 186.122.177.140

🇲🇽 160.34.212.79

🇰🇷 118.32.101.175

🇨🇳 111.61.171.123

🇧🇪 104.155.46.179