JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.237.69.28

114.237.69.28 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 5%: ?

ISP	Chinanet Jiangsu Province Network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.237.69.28

Whois 114.237.69.28

IP Abuse Reports for 114.237.69.28:

This IP address has been reported a total of 6 times from 1 distinct source. 114.237.69.28 was first reported on June 26th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 05:01:30 (1 hour ago)	(mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 01:01:25.692334 2026] [security2:error] [pid 25386:tid 25386] [client 114.237.69.28:43267] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.comsew.com.au\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.comsew.com.au"] [uri "/index.html"] [unique_id "ak3ZpbYGAEk2eC9Ox9XmLwAAAA8"], referer: https://www.comsew.com.au/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 13:11:53 (17 hours ago)	(mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 09:11:46.973159 2026] [security2:error] [pid 11416:tid 11416] [client 114.237.69.28:42957] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|lloydprins.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "lloydprins.com"] [uri "/"] [unique_id "akz7EnsjK0YgdMs57zH7BQAAAA4"], referer: http://lloydprins.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 19:45:13 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:45:07.942689 2026] [security2:error] [pid 26183:tid 26183] [client 114.237.69.28:45552] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.jasonmcquain.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jasonmcquain.com"] [uri "/"] [unique_id "akwFw9dBDHnSuLHSUSNBoAAAAAg"], referer: http://www.jasonmcquain.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 16:58:50 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 12:58:42.368218 2026] [security2:error] [pid 29999:tid 29999] [client 114.237.69.28:43444] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.silverdump.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.silverdump.com"] [uri "/"] [unique_id "akvewtn17CPVp2MPiwKHSAAAAAM"], referer: http://www.silverdump.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 10:10:31 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 06:10:26.573927 2026] [security2:error] [pid 22569:tid 22569] [client 114.237.69.28:45263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.peaksalesnw.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.peaksalesnw.com"] [uri "/"] [unique_id "akDzEkfSfpKBSlSp-CfyXQAAAAM"], referer: http://www.peaksalesnw.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 01:27:39 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 114.237.69.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:27:33.201195 2026] [security2:error] [pid 958:tid 958] [client 114.237.69.28:42270] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.instepdogobedience.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.instepdogobedience.com"] [uri "/"] [unique_id "aj3Vhb1A9A_42cZ0sWxz4gAAABE"], referer: http://www.instepdogobedience.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.24.102.23

🇺🇦 194.44.225.69

🇸🇬 194.5.82.18

🇨🇱 186.64.123.124

🇧🇷 131.161.249.165

🇱🇹 91.224.92.95

🇰🇷 59.8.107.113

🇮🇳 49.43.241.11

🇬🇧 35.203.210.35

🇪🇬 197.163.219.105

🇲🇦 196.70.139.96

🇮🇳 182.78.112.174

🇨🇳 171.213.200.255

🇩🇪 144.76.117.175

🇺🇸 104.192.3.106

🇮🇳 103.207.4.190

🇧🇬 79.124.62.126

🇺🇸 64.62.197.27

🇳🇱 45.148.10.147

🇺🇸 44.249.29.26