JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.21.162.111

116.21.162.111 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 4%: ?

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.21.162.111

Whois 116.21.162.111

IP Abuse Reports for 116.21.162.111:

This IP address has been reported a total of 4 times from 1 distinct source. 116.21.162.111 was first reported on July 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 21:36:43 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 17:36:39.802588 2026] [security2:error] [pid 31331:tid 31331] [client 116.21.162.111:64195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.keystonebrass.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.keystonebrass.com"] [uri "/"] [unique_id "akl8554MPL74aR8BhOvQaQAAAA4"], referer: http://www.keystonebrass.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 11:55:37 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 07:55:32.726132 2026] [security2:error] [pid 3781:tid 3781] [client 116.21.162.111:63872] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|heavenonearthonline.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "heavenonearthonline.net"] [uri "/"] [unique_id "akj0tGoy9IVEa2hu5jZH2wAAAIo"], referer: http://heavenonearthonline.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:37:05 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:36:57.686909 2026] [security2:error] [pid 27423:tid 27423] [client 116.21.162.111:64258] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.stewarttaylor.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.stewarttaylor.com"] [uri "/"] [unique_id "akgPWYBldYwwi1AzkXWDvQAAABA"], referer: http://www.stewarttaylor.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 18:57:03 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 116.21.162.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:56:54.719273 2026] [security2:error] [pid 4917:tid 4917] [client 116.21.162.111:61639] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.rodandreelpiercam.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.rodandreelpiercam.com"] [uri "/"] [unique_id "aka0dv4o8XwZuoFE5irGugAAAAw"], referer: https://www.rodandreelpiercam.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.223

🇧🇷 205.210.31.170

🇧🇷 172.69.42.8

🇧🇴 166.114.128.117

🇻🇳 160.191.244.158

🇳🇵 103.191.166.105

🇳🇵 103.186.196.152

🇳🇵 103.124.99.242

🇧🇩 103.111.225.160

🇳🇵 103.86.57.69

🇫🇷 89.92.168.48

🇳🇱 45.148.10.141

🇨🇳 36.250.221.70

🇺🇸 20.228.193.165

🇩🇪 213.209.159.11

🇹🇷 213.74.255.12

🇵🇱 194.180.49.218

🇲🇽 187.141.126.234

🇺🇸 185.126.181.39

🇮🇩 180.252.92.92