JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.179.33.209

116.179.33.209 was found in our database!

This IP was reported 648 times. Confidence of Abuse is 66%: ?

66%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.179.33.209

Whois 116.179.33.209

IP Abuse Reports for 116.179.33.209:

This IP address has been reported a total of 648 times from 57 distinct sources. 116.179.33.209 was first reported on January 10th 2022, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-03 13:56:33 (6 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-02 13:53:44 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-01 13:44:14 (2 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-07-01 13:04:10 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /shqiperi/20-vite-ne-karrige-me-rrota-takon-pas-shume-vitesh-te-birin-dhe-i-perlot-te-gjithe/382439/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-30 23:34:40 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 nodepile	2026-06-30 13:58:40 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_ReCaptchaFrontendUi/template/reCaptcha.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-06-30 13:37:08 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-29 13:15:58 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-28 13:08:06 (5 days ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-06-28 03:54:30 (5 days ago)	Brute force	Brute-Force
🇨🇦 1gz	2026-06-27 20:08:58 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-27 13:04:24 (6 days ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-27 05:13:32 (6 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.209 (CN/China/-/-/-/[AS4837 CHINA UN ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.209 (CN/China/-/-/-/[AS4837 CHINA UNICOM China169 Backbone]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 27 08:13:26.326286 2026] [security2:error] [pid 1094255:tid 1094534] [client 116.179.33.209:6683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/elementor/css/custom-jet-blocks.css"] [unique_id "aj9b9hnMhduY9788gj5AswAAAcw"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CE%B5%CE%BB%CE%B9%CE%AC-2/ show less	Port Scan
🇫🇷 Sklurk	2026-06-26 12:57:31 (1 week ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-25 13:06:33 (1 week ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.209 (CN/China/Beijing/Jinrongjie (Xi ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.209 (CN/China/Beijing/Jinrongjie (Xicheng District)/-/[AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 16:06:28.362234 2026] [security2:error] [pid 358184:tid 358224] [client 116.179.33.209:2054] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/justified-image-grid/css/magnific-popup.min.css"] [unique_id "aj0n1KO2mzdLeHxqn3omfAAAAUg"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CE%BA%CE%BB%CE%AE%CE%B8%CF%81%CE%B1-2/ show less	Port Scan

Showing 1 to 15 of 648 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.17.133.138

🇵🇱 176.53.159.197

🇮🇳 122.168.194.41

🇺🇸 104.21.90.71

🇬🇧 35.203.211.22

🇬🇧 35.203.210.145

🇺🇸 2a03:2880:10ff:71::

🇺🇸 2607:f8b0:4023:1009::127

🇨🇳 222.246.61.73

🇳🇱 213.124.221.2

🇹🇼 198.235.24.59

🇨🇦 167.114.156.169

🇩🇪 152.53.185.81

🇲🇴 182.93.7.194

🇺🇸 147.185.132.193

🇩🇪 139.19.117.130

🇩🇴 138.255.249.42

🇨🇳 110.248.25.49

🇩🇪 104.207.56.168

🇫🇷 85.217.140.5