JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.132.138.241

116.132.138.241 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 12%: ?

12%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhangjiakou, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.132.138.241

Whois 116.132.138.241

IP Abuse Reports for 116.132.138.241:

This IP address has been reported a total of 58 times from 9 distinct sources. 116.132.138.241 was first reported on April 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇨 icp77	2026-07-07 15:48:00 (1 week ago)	Abuse DDoS	DDoS Attack Port Scan Brute-Force Exploited Host Web App Attack SSH FTP Brute-Force Hacking SQL Injection
🇨🇦 Mediashaker	2026-05-29 09:01:12 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/China/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-25 04:46:18 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 116.132.138.241 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 116.132.138.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 00:46:03.438774 2026] [security2:error] [pid 29031:tid 29031] [client 116.132.138.241:38267] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahPUCw_yK5S4aodvD5T0zQAAAAA"], referer: http://civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-13 00:47:13 (2 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 2026-05-12 11:39:42 /bbs/posting.php?mode=quote&p=976000 show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-06 02:04:01 (2 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 2026-05-05 19:35:21 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Fyxwg%2F202508%2Ft20250813_1287632.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"116.132.138.241:55995","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"} show less	Web App Attack
🇩🇪 rh24	2026-03-24 06:37:57 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/China/-) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-03-22 00:06:03 (3 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 2026-03-21 01:55:15 /dfdfd show less	Web App Attack
🇳🇱 GabrielJST	2026-03-20 11:44:21 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/China/-) show less	Bad Web Bot
🇳🇱 i-turnradio.nl	2026-03-15 03:08:55 (4 months ago)	2026-03-15 04:08:55 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇩🇪 rh24	2026-02-28 10:18:21 (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/China/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-12 19:39:55 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 116.132.138.241 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 116.132.138.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 14:39:46.295314 2026] [security2:error] [pid 1064661:tid 1064738] [client 116.132.138.241:55043] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gafm.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "aY4sgg17iyJuiGuKFMJoVgAAAYo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-02-09 23:57:15 (5 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 2026-02-09 04:36:49 /dfdfd show less	Web App Attack
🇩🇪 rh24	2026-01-22 21:09:54 (5 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.138.241 (CN/China/-) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2025-12-27 00:17:25 (6 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 2025-12-26 01:51:57 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-04 23:06:45 (7 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.138.241 2025-12-04 08:46:17 /dfdfd show less	Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.69

🇺🇸 147.185.132.204

🇺🇸 142.147.169.77

🇰🇷 115.68.177.11

🇰🇷 112.162.219.48

🇫🇷 85.217.140.2

🇺🇸 64.62.197.137

🇨🇳 220.197.85.70

🇹🇼 198.235.24.17

🇨🇳 182.44.116.87

🇦🇺 172.105.166.177

🇺🇸 172.104.11.34

🇸🇬 157.52.92.88

🇺🇸 147.185.132.207

🇺🇸 138.197.222.35

🇭🇰 118.141.148.154

🇧🇩 103.92.212.21

🇮🇹 95.210.105.202

🇲🇾 47.254.192.213

🇳🇱 45.148.10.239