JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.132.138.131

116.132.138.131 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 4%: ?

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhangjiakou, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.132.138.131

Whois 116.132.138.131

IP Abuse Reports for 116.132.138.131:

This IP address has been reported a total of 64 times from 10 distinct sources. 116.132.138.131 was first reported on April 1st 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GabrielJST	2026-09-03 14:05:49 (10 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/China/-) show less	Bad Web Bot
🇳🇱 GabrielJST	2026-07-14 20:09:27 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/China/-) show less	Bad Web Bot
🇩🇪 Hazzard	2026-06-20 06:23:20 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇩🇪 rh24	2026-05-10 09:53:43 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/China/-) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-07 00:58:52 (3 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 2026-05-06 13:43:15 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Fjtwfbgt%2F202503%2Ft20250314_1177995.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["76"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"116.132.138.131:54665","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"} show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-16 00:02:39 (4 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 2026-04-15 06:26:47 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-14 00:46:10 (4 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 2026-04-13 11:57:48 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Ffczj%2F202512%2Ft20251210_1379871.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"116.132.138.131:43923","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"} show less	Web App Attack
🇩🇪 ghostwarriors	2026-04-10 07:50:07 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-04-10 07:23:07 (4 months ago)	2026/04/10 09:23:05 [error] 67264#648793: 2100712 limiting requests, excess: 0.989 by zone "crawler ... show more 2026/04/10 09:23:05 [error] 67264#648793: 2100712 limiting requests, excess: 0.989 by zone "crawler", client: 116.132.138.131, server: git.ksol.io, request: "GET /.well-known/.go-away/assets/static/anubis/style.css?cacheBust=CjieHG57B7XrDziALhvHPA HTTP/1.1", host: "git.ksol.io", referrer: "https://git.ksol.io/user/login?q=&redirect_to=/explore/repos?language=Python&sort=recentupdate" ... show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-04-03 01:05:28 (5 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 2026-04-02 03:55:38 /dfdfd show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 09:28:13 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 116.132.138.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 116.132.138.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 05:28:02.730138 2026] [security2:error] [pid 5600:tid 5600] [client 116.132.138.131:33345] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "acefItDfCzl_OHlPsPCQagAAAAs"], referer: http://civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-03-25 00:30:50 (5 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.131 2026-03-24 04:27:53 /dfdfd show less	Web App Attack
🇮🇹 Progetto1	2026-03-09 12:45:11 (5 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 rh24	2026-03-05 07:24:38 (5 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/China/-) show less	Bad Web Bot
🇳🇱 GabrielJST	2026-03-01 12:48:28 (6 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.131 (CN/China/-) show less	Bad Web Bot

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 94.154.35.215

🇺🇸 9.234.42.30

🇺🇸 204.124.12.194

🇺🇸 203.168.157.67

🇳🇱 192.253.248.229

🇧🇷 186.248.197.77

🇮🇹 185.68.178.59

🇩🇪 161.35.78.82

🇨🇳 153.0.42.227

🇸🇦 130.164.171.206

🇨🇳 123.53.37.39

🇨🇳 119.108.233.229

🇨🇳 106.75.214.209

🇨🇳 101.96.206.202

🇨🇳 101.96.205.145

🇫🇷 91.231.89.8

🇪🇸 81.37.114.251

🇺🇸 65.111.8.154

🇩🇪 45.10.163.135

🇺🇸 45.3.35.223