JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.96.78.109

116.96.78.109 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 12%: ?

12%

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Qui Nhon, Gia Lai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.96.78.109

Whois 116.96.78.109

IP Abuse Reports for 116.96.78.109:

This IP address has been reported a total of 33 times from 29 distinct sources. 116.96.78.109 was first reported on March 29th 2021, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 EvoX	2026-09-19 11:56:11 (1 hour ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 39625) to a p ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 39625) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇺🇸 pixelmemory.us	2026-08-22 02:11:24 (4 weeks ago)	2026-08-22T02:08:23 116.96.78.109 GET /Photos/Work/SoundHound/2019-12-13%20party/raw/DSC02766.ARW.xm ... show more 2026-08-22T02:08:23 116.96.78.109 GET /Photos/Work/SoundHound/2019-12-13%20party/raw/DSC02766.ARW.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 ... show less	Bad Web Bot
🇫🇷 bigorre.org	2026-07-02 10:55:21 (2 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 stechusa	2026-06-29 15:44:41 (2 months ago)	[Askari] \| country=VN \| Behavior: HTTP/1.1 over TLS, Concurrent page load during attack, Targeting s ... show more [Askari] \| country=VN \| Behavior: HTTP/1.1 over TLS, Concurrent page load during attack, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-06-29 15:44:41 (2 months ago)	ELEVATED_THREAT \| country=VN \| ASN=Viettel Group \| 549 IPs targeting /category/light-bulbs.html \| Fa ... show more ELEVATED_THREAT \| country=VN \| ASN=Viettel Group \| 549 IPs targeting /category/light-bulbs.html \| Facet request during elevated threat (facet_ratio=0.62, unique_ips=1359) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇩🇪 pltcldvlpr	2026-06-21 00:33:33 (2 months ago)	Bogus Useragent: 116.96.78.109 - - [21/Jun/2026:02:33:32 +0200] "GET /protocol?id=st_5_69&offset=125 ... show more Bogus Useragent: 116.96.78.109 - - [21/Jun/2026:02:33:32 +0200] "GET /protocol?id=st_5_69&offset=1250&seq=1295 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows 98; Win 9x 4.90; Trident/3.1)" asn=7552 org="Viettel Group" country=VN ... show less	Bad Web Bot
🇨🇦 1gz	2026-06-10 07:46:56 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/komisioni/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 bigorre.org	2026-05-29 15:01:07 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇩🇪 filstal.org	2026-04-27 12:34:03 (4 months ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3; rv:1.9.2.20) Gecko/ ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3; rv:1.9.2.20) Gecko/5934-02-08 19:30:30.705673 Firefox/3.8). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-04-12 02:24:58 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2025-12-24 01:45:29 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-16 05:51:28 (9 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2024-11-11 23:34:03 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 116.96.78.109 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 116.96.78.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 18:33:58.418636 2024] [security2:error] [pid 2866:tid 2866] [client 116.96.78.109:3461] [client 116.96.78.109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cyberclay.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cyberclay.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ZzKUZv92DUmdsgl2sA_BAwAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-12 09:08:41 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 RAP	2024-07-31 00:47:49 (2 years ago)	2024-07-31 00:47:49 UTC Unauthorized activity to TCP port 445. SMB	Port Scan

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.161.49.2

🇺🇸 188.213.202.26

🇺🇸 147.90.234.14

🇫🇷 144.91.67.17

🇧🇬 109.160.32.32

🇷🇴 86.125.219.201

🇦🇺 65.254.92.190

🇧🇷 45.234.195.254

🇦🇷 45.224.29.172

🇷🇺 37.29.41.83

🇮🇹 34.17.175.243

🇧🇷 16.5.0.236

🇹🇭 182.52.3.53

🇧🇷 179.127.10.169

🇻🇳 123.58.198.35

🇻🇳 113.176.85.112

🇵🇰 110.38.13.204

🇧🇩 103.186.52.26

🇦🇺 59.102.36.8

🇨🇳 59.52.100.201