JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.179.16.2

202.179.16.2 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	MTC-NETWORK
Usage Type	Fixed Line ISP
ASN	AS9934
Domain Name	mtcone.net
Country	🇲🇳 Mongolia
City	Ulan Bator, Ulaanbaatar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.179.16.2

Whois 202.179.16.2

IP Abuse Reports for 202.179.16.2:

This IP address has been reported a total of 60 times from 32 distinct sources. 202.179.16.2 was first reported on April 9th 2022, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-01-26 01:07:24 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from MN. Action taken: BLOCK ASN: undefined (undefined) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from MN. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇮🇳 Bharat Datacenter	2026-01-11 08:57:47 (4 months ago)	1: date=2026-01-11 time=14:27:09 eventtime=1768121829642678990 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-11 time=14:27:09 eventtime=1768121829642678990 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=202.179.16.2 srccountry="Mongolia" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=239552 attack="tcp_syn_flood" srcport=40193 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 6955 > threshold 2000, repeats 239552 times since last log, pps 7024 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇮🇹 VHosting	2025-12-30 13:28:17 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇬🇧 Silly Development	2025-12-25 21:03:45 (5 months ago)	Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host sillydev.co.uk (GET ... show more Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host sillydev.co.uk (GET HTTP/2) @ 2025-12-25T21:03:45Z (8 occurrences) show less	DDoS Attack Exploited Host
🇨🇭 Modules	2025-12-24 06:44:12 (5 months ago)	Open proxy http://202.179.16.2:443 (RT:13883ms,Loc:Mongolia,ASN:AS9934)	Open Proxy
🇸🇬 Fn4ticHz	2025-12-15 09:57:00 (5 months ago)	repeated ddos targeted rate.rapidreset.net -- ZeroGuard	DDoS Attack
Anonymous	2025-12-04 07:20:22 (6 months ago)	botnet	DDoS Attack
🇩🇪 Szymekk	2025-12-02 14:01:44 (6 months ago)	Fail2Ban: SSH brute force attempt [srv01]	Brute-Force SSH
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 05:25:35 (6 months ago)	ASN: 9934 (MICOM-MN-AS Mongolia Telecom) Botnet Zombie: This IP has been detected as a botnet zombi ... show more ASN: 9934 (MICOM-MN-AS Mongolia Telecom) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-08 14:56:11 (6 months ago)	ASN: 9934 (MICOM-MN-AS Mongolia Telecom) Botnet Zombie: This IP has been detected as a botnet zombie ... show more ASN: 9934 (MICOM-MN-AS Mongolia Telecom) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-11-04 21:44:12 (7 months ago)	Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host dash.embotic.xyz (GE ... show more Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T21:44:12Z (7 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-11-01 13:11:35 (7 months ago)	Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host panel.sillydev.co.uk ... show more Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-11-01T13:11:35Z (3 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 RyoKN	2025-10-18 09:22:06 (7 months ago)	Blocked by UFW on s474 [53882/tcp] Source port: 443 TTL: 44 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on s474 [53882/tcp] Source port: 443 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 SuperEvilLuke	2025-10-07 23:55:52 (7 months ago)	Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host dash.embotic.xyz (GE ... show more Malicious activity detected from 9934 MICOM-MN-AS Mongolia Telecom towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:52Z (3 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 Audir8 \| RRHosting	2025-10-05 20:52:06 (8 months ago)	2025-10-05T20:49:20.160971rrhostingusa wings[2058776]: 2025/10/05 20:49:13 http: TLS handshake error ... show more 2025-10-05T20:49:20.160971rrhostingusa wings[2058776]: 2025/10/05 20:49:13 http: TLS handshake error from 202.179.16.2:57502: EOF 2025-10-05T20:49:44.746157rrhostingusa wings[2058776]: 2025/10/05 20:49:36 http: TLS handshake error from 202.179.16.2:57818: write tcp 10.0.0.206:8443->202.179.16.2:57818: write: broken pipe 2025-10-05T20:49:51.150261rrhostingusa wings[2058776]: 2025/10/05 20:49:50 http: TLS handshake error from 202.179.16.2:57952: write tcp 10.0.0.206:8443->202.179.16.2:57952: write: broken pipe ... show less	Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.9.113.131

🇵🇰 175.107.208.203

🇧🇪 34.140.168.155

🇳🇱 195.178.110.30

🇬🇧 192.248.150.180

🇧🇷 189.127.109.198

🇩🇪 159.195.21.168

🇺🇸 147.185.132.15

🇺🇸 146.88.240.145

🇨🇳 115.190.138.163

🇮🇱 89.139.140.173

🇺🇸 66.132.195.82

🇦🇷 190.7.237.14

🇺🇸 172.233.221.115

🇨🇦 85.217.149.66

🇺🇸 44.216.83.178

🇧🇪 34.14.4.23

🇫🇷 4.211.84.189

🇨🇳 218.197.29.144

🇲🇽 186.96.145.241