JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.132.236.221

116.132.236.221 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 11%: ?

11%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhangjiakou, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.132.236.221

Whois 116.132.236.221

IP Abuse Reports for 116.132.236.221:

This IP address has been reported a total of 88 times from 10 distinct sources. 116.132.236.221 was first reported on December 9th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GabrielJST	2026-07-14 08:54:08 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/China/-) show less	Bad Web Bot
🇳🇱 GabrielJST	2026-05-21 10:13:47 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/China/-) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-17 22:45:15 (1 month ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 2026-05-17 00:55:52 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-06 23:11:12 (2 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 2026-05-06 07:27:22 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Faqts%2F202602%2Ft20260222_1432376.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"116.132.236.221:40117","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"} show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-24 22:44:01 (2 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 2026-04-24 01:27:46 /dfdfd show less	Web App Attack
🇩🇪 rh24	2026-04-23 13:02:18 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/China/-) show less	Bad Web Bot
🇩🇪 rh24	2026-04-20 17:31:22 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/China/-) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-04-19 23:00:36 (2 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 2026-04-19 16:12:41 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Fyxwg%2F202604%2Ft20260415_1472644.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"116.132.236.221:39545","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"} show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-13 23:04:12 (3 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 2026-04-13 06:56:53 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Ffczj%2F202511%2Ft20251118_1363049.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"116.132.236.221:35623","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"} show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-12 20:03:22 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 116.132.236.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 116.132.236.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 16:03:06.091212 2026] [security2:error] [pid 836916:tid 836916] [client 116.132.236.221:58939] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|heathdiesel.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "heathdiesel.com"] [uri "/WebResource.axd"] [unique_id "adv6ejWB7ZBQxNDIms7Z4QAAAAI"], referer: https://heathdiesel.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-04-05 23:01:32 (3 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 2026-04-05 09:22:54 / show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-07 00:42:42 (4 months ago)	(mod_security) mod_security (id:217200) triggered by 116.132.236.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217200) triggered by 116.132.236.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 19:42:24.970785 2026] [security2:error] [pid 7984:tid 7984] [client 116.132.236.221:32867] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|matomo.prolifeli.org\|F\|2"] [data "/matomo.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "matomo.prolifeli.org"] [uri "/matomo.php"] [unique_id "aat0cNun-JzXj3Vl3PlF6wAAABE"], referer: https://prolifeli.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-03-03 15:01:17 (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.132.236.221 (CN/China/-) show less	Bad Web Bot
🇳🇱 i-turnradio.nl	2026-02-15 22:04:32 (4 months ago)	2026-02-15 23:04:32 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇨🇳 ThreatBook.io	2026-02-05 22:54:14 (5 months ago)	ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 202 ... show more ThreatBook Intelligence: iot_device,IDC more details on https://threatbook.io/ip/116.132.236.221 2026-02-05 05:19:09 /dfdfd 2026-02-05 07:23:35 /dfdfd show less	Web App Attack

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 207.148.114.25

🇩🇪 206.81.23.216

🇵🇭 161.49.89.39

🇺🇸 72.212.176.37

🇧🇷 205.210.31.199

🇺🇸 192.169.180.166

🇳🇱 190.2.150.143

🇺🇸 169.62.199.25

🇺🇸 161.35.141.232

🇯🇵 118.194.228.239

🇻🇳 103.75.183.57

🇸🇬 45.78.206.111

🇺🇸 20.65.195.62

🇺🇸 20.65.195.61

🇺🇸 162.216.150.52

🇺🇸 162.216.149.206

🇹🇭 161.82.146.86

🇺🇸 144.172.114.51

🇺🇸 20.65.195.58

🇺🇸 20.65.195.38