JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.196.64.181

116.196.64.181 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 59%: ?

59%

ISP	Beijing Jingdong 360 Degree E-commerce Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS23724
Domain Name	jd.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.196.64.181

Whois 116.196.64.181

IP Abuse Reports for 116.196.64.181:

This IP address has been reported a total of 9 times from 8 distinct sources. 116.196.64.181 was first reported on July 28th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 chronos	2026-07-30 06:15:50 (1 day ago)	Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: China, N ... show more Web traffic. Possible probing or exploitation attempts. \| Port: 80 \| Proto: TCP \| Location: China, N/A show less	Hacking Port Scan Brute-Force
🇺🇸 xmission.com	2026-07-29 23:13:22 (2 days ago)	Blocked by UFW (TCP on 80) Source port: 45519 TTL: 237 Packet length: 44 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 45519 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 116.196.64.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 Axel	2026-07-29 19:16:16 (2 days ago)	Blocked by UFW on LAXHH [8080/tcp] \| SPT: 45503 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8080/tcp] \| SPT: 45503 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-07-29 11:17:05 (2 days ago)	Malformed or malicious web request 116.196.64.181 - - [29/Jul/2026:13:16:59 +0200] "\x16\x03\x01\x05 ... show more Malformed or malicious web request 116.196.64.181 - - [29/Jul/2026:13:16:59 +0200] "\x16\x03\x01\x05\xE2\x01\x00\x05\xDE\x03\x03\xBD_\x17\xFAz\x05R\xFE*\xDDn\x05\x96\x01J6/\x97 \x07l\xDC\x84'\x80\xE5\xDFxm\x07=\xFE \xD8\x22\x8C\xA4\xEC\x81\xE6\xC7\xFD\xA0\x86\xD0" 400 157 "-" "-" show less	Hacking Web App Attack
🇩🇪 Admins@FBN	2026-07-29 09:00:56 (2 days ago)	FW-PortScan: Traffic Blocked srcport=45503 dstport=443	Port Scan
🇺🇸 TPI-Abuse	2026-07-29 04:44:29 (2 days ago)	(mod_security) mod_security (id:240950) triggered by 116.196.64.181 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240950) triggered by 116.196.64.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 00:44:24.757166 2026] [security2:error] [pid 209653:tid 209653] [client 116.196.64.181:55756] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4539"] [id "240950"] [rev "1"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|192.64.150.233\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "192.64.150.233"] [uri "/_users/org.couchdb.user:poc"] [unique_id "ammFKGYyvnSDg4UjiKF5cgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 00:06:29 (3 days ago)	denied traffic to a honeypot network. destination port 8080.	Port Scan Hacking
🇺🇸 MPL	2026-07-28 21:18:06 (3 days ago)	tcp/8080 (2 or more attempts)	Port Scan
🇺🇸 Axel	2026-07-28 19:58:11 (3 days ago)	Blocked by UFW on LAXHH [8080/tcp] \| SPT: 45503 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8080/tcp] \| SPT: 45503 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.80.223.144

🇨🇳 175.6.109.238

🇺🇸 162.216.149.118

🇮🇳 103.190.92.165

🇵🇹 80.172.227.24

🇰🇷 59.2.114.165

🇬🇧 51.195.215.112

🇺🇸 2a09:bac5:6d1c:aa::11:19a

🇺🇸 216.25.89.97

🇳🇱 213.176.26.77

🇷🇴 193.32.162.42

🇦🇷 181.164.12.188

🇧🇷 179.189.196.59

🇧🇷 177.42.155.101

🇺🇸 172.238.188.122

🇩🇪 167.94.146.60

🇺🇸 162.216.149.252

🇺🇸 107.174.137.235

🇬🇪 91.231.218.149

🇫🇷 91.231.89.86