JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.179.33.80

116.179.33.80 was found in our database!

This IP was reported 665 times. Confidence of Abuse is 57%: ?

57%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.179.33.80

Whois 116.179.33.80

IP Abuse Reports for 116.179.33.80:

This IP address has been reported a total of 665 times from 67 distinct sources. 116.179.33.80 was first reported on December 13th 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-06-16 03:49:48 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /ekonomi/cilat-jane-kompanite-qe-do-ndertojne-kullat-pas-teatrit-te-ri-kombetar/381210/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇷 setupgr	2026-06-16 00:14:24 (6 hours ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 03:14:21.553720 2026] [security2:error] [pid 1965768:tid 1965811] [client 116.179.33.80:17298] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css"] [unique_id "ajCVXZhSggell5vQAURp7wAAAVA"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CE%B5%CE%BB%CE%B9%CE%AC-2/ show less	Port Scan
🇬🇷 setupgr	2026-06-15 20:31:31 (10 hours ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 23:31:30.271408 2026] [security2:error] [pid 1917011:tid 1917127] [client 116.179.33.80:51687] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js"] [unique_id "ajBhIuBwCn2ogzWsBgC43QAAABI"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/%CF%84%CF%81%CE%B1%CF%87%CE%B5%CE%AF%CE%B1-%CF%80%CE%B5%CF%8D%CE%BA%CE%B7/ show less	Port Scan
🇫🇷 Sklurk	2026-06-15 05:50:48 (1 day ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-06-15 04:01:46 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇷 setupgr	2026-06-14 09:55:53 (1 day ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 12:55:50.231953 2026] [security2:error] [pid 921870:tid 922004] [client 116.179.33.80:51768] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/jet-blog/assets/css/jet-blog.css"] [unique_id "ai56piiyK_EXlfCi56fyoAAAAE4"], referer: https://ftiaxtomonosou.gr/wp-content/plugins/justified-image-grid/timthumb.php?src=https%3A%2F%2Fftiaxtomonosou.gr%2Fwp-content%2Fuploads%2F2020%2F01%2Fh372.jpg&h=305&q=100&f=.webp show less	Port Scan
🇪🇸 librebit	2026-06-14 06:17:40 (2 days ago)	Brute force	Brute-Force
🇫🇷 Sklurk	2026-06-14 05:48:27 (2 days ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-14 03:18:58 (2 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 06:18:57.200334 2026] [security2:error] [pid 922089:tid 922126] [client 116.179.33.80:52789] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/flexible-shipping/assets/dist/css/free-shipping.css"] [unique_id "ai4doY2186Wa_UvIHKh0BAAAAYo"], referer: https://ftiaxtomonosou.gr/%CE%BD%CF%84%CE%BF%CF%85%CE%BB%CE%AC%CF%80%CE%B1/page/6/ show less	Port Scan
🇨🇦 1gz	2026-06-14 03:01:11 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇷 setupgr	2026-06-14 01:44:45 (2 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 04:44:44.706845 2026] [security2:error] [pid 948989:tid 949024] [client 116.179.33.80:38756] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/jet-menu/assets/public/lib/font-awesome/css/v4-shims.min.css"] [unique_id "ai4HjNXD3_cY7WcDuxpYswAAAIg"], referer: https://ftiaxtomonosou.gr/mdf/page/4/ show less	Port Scan
🇬🇷 setupgr	2026-06-13 12:57:07 (2 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 15:57:04.543266 2026] [security2:error] [pid 784556:tid 784755] [client 116.179.33.80:28133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/%CF%84%CE%B1_%CE%AD%CF%81%CE%B3%CE%B1_%CE%BC%CE%B1%CF%82/%CF%83%CF%87%CE%BF%CE%BB%CE%B5%CE%AF%CE%BF-%CF%87%CE%B1%CE%BB%CE%BA%CE%AF%CE%B4%CE%B1/"] [unique_id "ai1ToM63WyfM5i32ramwygAAAQ4"] show less	Port Scan
Anonymous	2026-06-13 12:40:02 (2 days ago)	Wysoka aktywność ataku na portach 80/443	Brute-Force
🇫🇷 Thaliruth	2026-06-13 12:12:23 (2 days ago)	116.179.33.80 - - [13/Jun/2026:14:12:22 +0200] "GET /administrator/index.php HTTP/1.1" 301 162 "http ... show more 116.179.33.80 - - [13/Jun/2026:14:12:22 +0200] "GET /administrator/index.php HTTP/1.1" 301 162 "http://m.baidu.com/s?wd=belllxr" "pc" ... show less	Brute-Force Web App Attack
🇬🇷 setupgr	2026-06-13 08:21:29 (2 days ago)	(mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:100011) triggered by 116.179.33.80: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 11:21:24.506241 2026] [security2:error] [pid 705245:tid 705382] [client 116.179.33.80:17517] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/uploads/premium-addons-elementor/pafe-20310.css"] [unique_id "ai0TBAxs6RPthBTSH2k3HQAAAII"], referer: https://ftiaxtomonosou.gr/%CF%84%CE%B1_%CE%AD%CF%81%CE%B3%CE%B1_%CE%BC%CE%B1%CF%82/%CF%83%CF%87%CE%BF%CE%BB%CE%B5%CE%AF%CE%BF-%CF%87%CE%B1%CE%BB%CE%BA%CE%AF%CE%B4%CE%B1/ show less	Port Scan

Showing 1 to 15 of 665 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.219.232.57

🇲🇽 201.173.65.105

🇺🇸 162.216.149.94

🇮🇩 160.19.19.49

🇪🇬 156.206.63.246

🇭🇰 156.59.198.136

🇨🇳 112.86.225.161

🇨🇳 112.86.225.16

🇳🇱 91.92.40.4

🇦🇹 90.146.200.2

🇨🇴 8.242.185.18

🇺🇸 216.25.89.125

🇵🇪 179.6.16.3

🇨🇦 129.222.159.179

🇮🇩 125.167.17.105

🇹🇭 118.194.251.246

🇮🇩 103.190.47.36

🇰🇼 94.129.65.165

🇮🇹 91.80.137.51

🇹🇷 88.255.189.50