JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.196.113.68

116.196.113.68 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 40%: ?

40%

ISP	Beijing Jingdong 360 Degree E-commerce Co., Ltd.
Usage Type	Commercial
ASN	AS23724
Domain Name	jd.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.196.113.68

Whois 116.196.113.68

IP Abuse Reports for 116.196.113.68:

This IP address has been reported a total of 31 times from 22 distinct sources. 116.196.113.68 was first reported on June 27th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 stareradia.pl	2026-07-05 13:51:39 (1 hour ago)	[Sun Jul 05 15:50:36.578947 2026] [php:error] [pid 2415403:tid 2415403] [client 116.196.113.68:0] sc ... show more [Sun Jul 05 15:50:36.578947 2026] [php:error] [pid 2415403:tid 2415403] [client 116.196.113.68:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Sun Jul 05 15:50:52.364416 2026] [php:error] [pid 2416810:tid 2416810] [client 116.196.113.68:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Sun Jul 05 15:50:55.493648 2026] [php:error] [pid 2415247:tid 2415247] [client 116.196.113.68:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ucp.php?mode=register&agreed=true&iscanyesno=yeswecan&step=2&coppa=0 [Sun Jul 05 15:51:38.448640 2026] [php:error] [pid 2415247:tid 2415247] [client 116.196.113.68:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ ... show less	Web App Attack
🇺🇸 island-freaks.com	2026-07-05 12:32:49 (3 hours ago)	Attack Type: WordPress Exploit Bot attempt on /photo/113997/ \| DNS 116.196.113.68 \| Agent: Mozilla/5 ... show more Attack Type: WordPress Exploit Bot attempt on /photo/113997/ \| DNS 116.196.113.68 \| Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇧🇪 voormedia	2026-06-06 01:38:30 (4 weeks ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 21:49:57 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 116.196.113.68 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 116.196.113.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:49:51.137436 2026] [security2:error] [pid 7529:tid 7529] [client 116.196.113.68:49788] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "aiNEf-G4H7C0FF0QIYY50QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Roper123	2026-05-29 23:51:12 (1 month ago)	Web exploits	Web App Attack
🇬🇧 relianoid.com	2026-05-29 23:14:25 (1 month ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇳🇱 AS213449.net	2026-05-28 17:33:41 (1 month ago)	05/28/2026-19:33:40.919619 src=116.196.113.68 dst=5.175.170.11:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/28/2026-19:33:40.919619 src=116.196.113.68 dst=5.175.170.11:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇪🇸 el-brujo	2026-05-26 14:59:14 (1 month ago)	Cloudflare WAF: Request Path: /ddos/ Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (comp ... show more Cloudflare WAF: Request Path: /ddos/ Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (compatible; MSIE 23.0; 68K; Trident/93.0) Action: block Source: l7ddos ASN Description: IDC, China Telecommunications Corporation Country: CN Method: GET Timestamp: 2026-05-26T14:59:14Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 BestFans.com	2026-05-22 10:51:26 (1 month ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇳🇱 ByeByte API	2026-05-21 20:32:08 (1 month ago)	byebyte.space auth: GET /portal/login.html at 2026-05-21T20:31:42Z. Source IP is in our local ban li ... show more byebyte.space auth: GET /portal/login.html at 2026-05-21T20:31:42Z. Source IP is in our local ban list and retried; banned offender continuing to probe. UA: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7180.88 Safari/537.36 Edg/146.0.2684.42'. Accept-Language: 'en,en-US;q=0.9'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Chromium";v="146", "Not-A.Brand";v="24", "Microsoft Edge";v="146"'. Platform: "macOS" (mobile=?0). Country (CF): CN. TLS info: {"scheme":"https"}. show less	Brute-Force Web App Attack
🇮🇹 VHosting	2026-05-17 21:41:20 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇸🇪 KIDOS	2026-05-17 03:35:22 (1 month ago)	malicious activity	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-14 22:06:04 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-13. show less	Web App Attack SSH Hacking
🇺🇸 oncord	2026-05-12 21:50:30 (1 month ago)	Form spam	Web Spam

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 200.105.172.184

🇬🇧 193.163.125.100

🇷🇴 185.100.87.174

🇺🇸 178.156.170.244

🇮🇳 103.248.120.6

🇮🇳 103.66.237.186

🇺🇸 52.224.109.126

🇺🇸 45.132.115.112

🇸🇳 41.83.113.147

🇮🇳 38.137.11.14

🇬🇧 2a06:4880:4000::6b

🇺🇸 152.32.151.39

🇰🇷 124.195.255.12

🇨🇳 116.179.32.39

🇱🇰 112.134.143.9

🇧🇷 45.227.195.196

🇸🇪 176.126.104.172

🇫🇮 173.194.98.27

🇺🇸 172.238.171.10

🇷🇺 154.83.196.237