JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.238.40.142

116.238.40.142 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Shanghai province network
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.238.40.142

Whois 116.238.40.142

IP Abuse Reports for 116.238.40.142:

This IP address has been reported a total of 26 times from 13 distinct sources. 116.238.40.142 was first reported on April 10th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NBCEMS	2023-05-12 21:15:00 (3 years ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2023-05-12 00:48:33 (3 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-05-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-05-11 10:51:05 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=dongyan&passwd=dongyan 2023-05-11 08:03:03 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=angel&passwd=angel 2023-05-11 10:31:42 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=dd&passwd=dd 2023-05-11 19:24:57 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=roger&passwd=roger show less	Web App Attack
🇫🇷 someone	2023-05-09 19:34:50 (3 years ago)	:80 116.238.40.142 - - [09/May/2023:21:34:49 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 466 "-" " ... show more :80 116.238.40.142 - - [09/May/2023:21:34:49 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 466 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
Anonymous	2023-05-09 16:43:35 (3 years ago)	Trawling for 3rd-party CMS installations	Hacking Brute-Force Web App Attack
🇺🇸 NXTwoThou	2023-05-04 20:50:11 (3 years ago)	/back.zip	Web App Attack
Anonymous	2023-05-03 21:58:00 (3 years ago)	Database exfiltration attempt: /dump.gz	Hacking Bad Web Bot
🇿🇦 IrisFlower	2023-05-03 21:18:52 (3 years ago)	Unauthorized connection attempt detected from IP address 116.238.40.142 to port 443 [J]	Port Scan Hacking
🇪🇸 10dencehispahard SL	2023-05-02 21:33:47 (3 years ago)	Unauthorized login attempts [{'apache-attack'}]	Brute-Force
🇨🇳 ThreatBook.io	2023-04-20 00:26:40 (3 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-04-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-04-19 05:10:14 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=pixiedust 2023-04-19 02:23:06 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=virgos 2023-04-19 19:13:35 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=aztig 2023-04-19 02:37:40 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=daniel123 2023-04-19 01:39:29 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=carole 2023-04-19 00:15:42 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=raulito 2023-04-19 21:41:27 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=smiler show less	Web App Attack
🇨🇳 ThreatBook.io	2023-04-19 00:18:21 (3 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-04-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-04-18 20:24:04 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=leland 2023-04-18 21:07:22 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=001122 2023-04-18 19:55:02 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=monkey4 2023-04-18 23:35:43 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=viper show less	Web App Attack
🇩🇪 Sakurada	2023-04-19 00:15:02 (3 years ago)	User [admin] from [116.238.40.142] failed to sign in to [DSM] via [password] due to authorization fa ... show more User [admin] from [116.238.40.142] failed to sign in to [DSM] via [password] due to authorization failure. show less	Brute-Force
🇯🇵 koji	2023-04-18 22:58:51 (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2023-04-18 04:45:51 (3 years ago)	116.238.40.142 - - [18/Apr/2023:05:45:49 +0100] "POST /wp-login.php//wp-login.php HTTP/2.0" 404 1105 ... show more 116.238.40.142 - - [18/Apr/2023:05:45:49 +0100] "POST /wp-login.php//wp-login.php HTTP/2.0" 404 1105 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Bad Web Bot
🇨🇳 ThreatBook.io	2023-04-18 00:14:11 (3 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-04-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/116.238.40.142 2023-04-17 04:25:52 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=sexy22 2023-04-17 05:03:43 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=bhabykoh 2023-04-17 00:12:40 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=heidi 2023-04-17 06:47:28 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=bebeko 2023-04-17 10:08:54 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=boogers 2023-04-17 06:28:21 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=lalaine 2023-04-17 05:22:43 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=carolina1 2023-04-17 05:45:29 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=sanjose show less	Web App Attack
🇦🇺 MAGIC	2023-04-17 21:37:46 (3 years ago)	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.80

🇮🇩 180.243.188.193

🇺🇸 159.65.168.103

🇳🇱 91.92.40.4

🇨🇳 39.146.43.176

🇺🇸 20.127.202.110

🇬🇧 217.154.45.93

🇮🇳 103.54.101.248

🇺🇸 76.134.84.30

🇸🇬 35.187.231.181

🇬🇧 31.14.254.108

🇺🇸 216.226.77.10

🇮🇩 182.8.66.114

🇨🇳 106.75.144.109

🇮🇹 95.210.105.202

🇵🇱 83.168.71.135

🇬🇧 82.34.164.74

🇺🇸 65.49.1.40

🇩🇪 64.89.163.83

🇹🇼 61.220.235.10