JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.96.77.182

116.96.77.182 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 18%: ?

18%

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Qui Nhon, Gia Lai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.96.77.182

Whois 116.96.77.182

IP Abuse Reports for 116.96.77.182:

This IP address has been reported a total of 38 times from 24 distinct sources. 116.96.77.182 was first reported on December 9th 2020, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-14 03:58:09 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 116.96.77.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 116.96.77.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 23:58:02.015759 2026] [security2:error] [pid 14875:tid 14875] [client 116.96.77.182:39849] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elcalamo.com\|F\|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/esquinca-poemas_txt.pdb"] [unique_id "alWzyiJzoyiUey_EZFnEyAAAABY"], referer: https://elcalamo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-05-28 18:51:07 (1 month ago)	Web attack from 116.96.77.182	Web App Attack
🇩🇪 pltcldvlpr	2026-05-28 16:29:38 (1 month ago)	Bogus Useragent: 116.96.77.182 - - [28/May/2026:18:29:37 +0200] "GET /protocol?id=be_15_89&offset=20 ... show more Bogus Useragent: 116.96.77.182 - - [28/May/2026:18:29:37 +0200] "GET /protocol?id=be_15_89&offset=200&seq=209 HTTP/1.1" 444 0 "-" "Opera/8.39.(Windows NT 5.0; kn-IN) Presto/2.9.175 Version/10.00" asn=7552 org="Viettel Group" country=VN ... show less	Bad Web Bot
🇦🇺 MAGIC	2026-05-28 01:10:54 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-05-17 04:21:53 (2 months ago)	Attack Signature Blocked: /wishlist/index/add/product/10416/form_key/Mzd3K7qRJds5PgDo/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/10416/form_key/Mzd3K7qRJds5PgDo/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-05-10 03:49:43 (2 months ago)	Unidentified crawler ignoring robots.txt: 116.96.77.182 - - [10/May/2026:04:52:55 +0200] "GET /proto ... show more Unidentified crawler ignoring robots.txt: 116.96.77.182 - - [10/May/2026:04:52:55 +0200] "GET /protocol?id=be_19_42&paragraph=1521141&seq=951 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" asn=7552 org="Viettel Group" 116.96.77.182 - - [10/May/2026:05:49:33 +0200] "GET /protocol?id=ni_18_90&offset=400&seq=484 HTTP/1.1" 200 97957 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" asn=7552 org="Viettel Group" ... show less	Bad Web Bot
🇷🇴 INTEQ	2026-02-04 16:08:33 (5 months ago)	Web attack from 116.96.77.182	Web App Attack
🇳🇱 rshict	2025-09-08 03:59:58 (10 months ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-08-30 00:05:20 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-08-25 00:02:19 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇮🇩 hermawan	2025-08-22 23:46:09 (10 months ago)	[Sat Aug 23 06:44:32.135874 2025] [security2:error] [pid 71165:tid 140466234324672] [client 116.96.7 ... show more [Sat Aug 23 06:44:32.135874 2025] [security2:error] [pid 71165:tid 140466234324672] [client 116.96.77.182:49612] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 116.96.77.182 request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561303-prakiraan-bulanan-curah-hujan-bulan-oktober-tahun-2024-update-dari-analisis-bulan-juli-tahun-2024-di-provinsi-jawa-timur HTTP/1.1 Request URI RAW = /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-de..."] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah ... show less	Hacking Web App Attack
Anonymous	2025-08-17 19:54:50 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-01 15:07:58 (11 months ago)	wordpress authentication brute force	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-03-14 16:48:58 (1 year ago)	list.rtbh.com.tr report: tcp/445	Brute-Force
🇹🇷 rtbh.com.tr	2025-03-12 12:49:00 (1 year ago)	list.rtbh.com.tr report: tcp/445	Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 202.155.8.55

🇭🇰 118.193.45.134

🇨🇳 115.190.185.14

🇨🇳 101.126.67.70

🇮🇱 87.71.124.173

🇧🇪 34.79.23.31

🇺🇸 20.169.105.72

🇨🇴 201.184.50.251

🇺🇸 193.202.12.84

🇮🇳 182.95.12.178

🇨🇳 180.76.245.60

🇷🇺 178.178.213.105

🇹🇭 159.192.133.140

🇪🇸 154.56.136.93

🇻🇳 103.9.204.47

🇫🇷 51.159.110.167

🇮🇳 49.206.201.253

🇬🇧 35.203.211.81

🇺🇸 24.199.118.12

🇧🇷 187.120.19.118