JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.16.244.91

116.16.244.91 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 16%: ?

16%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS140309
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.16.244.91

Whois 116.16.244.91

IP Abuse Reports for 116.16.244.91:

This IP address has been reported a total of 5 times from 3 distinct sources. 116.16.244.91 was first reported on March 9th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-11 22:39:06 (20 hours ago)	(mod_security) mod_security (id:210831) triggered by 116.16.244.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 116.16.244.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 18:38:59.849864 2026] [security2:error] [pid 9547:tid 9564] [client 116.16.244.91:19720] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|teanaunz.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "teanaunz.com"] [uri "/"] [unique_id "alLGAyL7mR7WUcqSWvSiTwAAAI8"], referer: http://teanaunz.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 21:19:25 (21 hours ago)	(mod_security) mod_security (id:210831) triggered by 116.16.244.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 116.16.244.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 17:19:21.060294 2026] [security2:error] [pid 10574:tid 10574] [client 116.16.244.91:18714] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.gictd.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gictd.com"] [uri "/"] [unique_id "alKzWcvTv4HJ_TYOjCVe2gAAAAA"], referer: https://www.gictd.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-11 20:24:04 (22 hours ago)	[SatJul1122:23:57.3679702026][security2:error][pid3025417:tid3025595][client116.16.244.91:0]ModSecur ... show more [SatJul1122:23:57.3679702026][security2:error][pid3025417:tid3025595][client116.16.244.91:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx$http://bsalsa\\\\\\\\.com\\|\^site24x7$\"against\"REQUEST_HEADERS:user-agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"282\"][id\"330094\"][rev\"5\"][msg\"Atomicorp.comWAFRules:CompromisedUser-AgentAgentAttackblocked\"][severity\"CRITICAL\"][hostname\"fondazionemontgrand.ch\"][uri\"/\"][unique_id\"alKmXbVuDQE77-Ow9X8UXgAAAUM\"]\,referer:https://fondazionemontgrand.ch/ show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 20:23:43 (22 hours ago)	(mod_security) mod_security (id:210831) triggered by 116.16.244.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 116.16.244.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 16:23:36.173340 2026] [security2:error] [pid 16686:tid 16686] [client 116.16.244.91:18231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ahuramazda.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ahuramazda.com"] [uri "/"] [unique_id "alKmSHQGOeOflm-OT5RFRgAAAAk"], referer: http://www.ahuramazda.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-09 01:05:04 (4 months ago)	Web attack	Bad Web Bot Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.202.230.81

🇮🇱 199.203.203.37

🇧🇪 198.235.24.226

🇬🇧 172.253.82.16

🇺🇸 162.241.129.208

🇵🇱 91.240.139.221

🇧🇬 79.124.40.126

🇹🇷 78.177.167.22

🇳🇱 46.151.178.13

🇺🇸 45.156.131.7

🇭🇰 152.32.189.59

🇱🇹 81.30.98.142

🇺🇸 81.30.98.92

🇺🇸 81.30.98.91

🇱🇹 45.227.254.170

🇻🇳 113.162.47.121

🇮🇳 110.172.54.52

🇹🇷 77.92.144.97

🇳🇱 45.156.87.253

🇮🇩 202.155.157.131