JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.116.239.38

14.116.239.38 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 23%: ?

23%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.116.239.38

Whois 14.116.239.38

IP Abuse Reports for 14.116.239.38:

This IP address has been reported a total of 18 times from 6 distinct sources. 14.116.239.38 was first reported on June 28th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 myintarweb	2026-09-01 18:18:02 (1 hour ago)	14.116.239.38 - - [01/Sep/2026:19:18:01 +0100] 443 "GET /kirton-pigot-1828-9/courthouse.jpg HTTP/1.1 ... show more 14.116.239.38 - - [01/Sep/2026:19:18:01 +0100] 443 "GET /kirton-pigot-1828-9/courthouse.jpg HTTP/1.1" 301 7004 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0" ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-22 09:09:04 (1 month ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-07-20 20:05:22 (1 month ago)	(mod_security) mod_security (id:100011) triggered by 14.116.239.38 (CN/China/Guangdong/Guangzhou/-/[ ... show more (mod_security) mod_security (id:100011) triggered by 14.116.239.38 (CN/China/Guangdong/Guangzhou/-/[AS4134 CHINANET-BACKBONE No.31,Jin-rong Street]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 20 23:05:17.428542 2026] [security2:error] [pid 2195539:tid 2195710] [client 14.116.239.38:19879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/olympus-digital-camera-304.jpg"] [unique_id "al5_fWgQpjyYEbW81ZGGMgAAAsk"] show less	Port Scan
🇫🇷 Sklurk	2026-07-20 13:34:51 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-07-16 08:11:00 (1 month ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇬🇷 setupgr	2026-07-11 18:19:58 (1 month ago)	(mod_security) mod_security (id:100011) triggered by 14.116.239.38 (CN/China/Guangdong/Guangzhou/-/[ ... show more (mod_security) mod_security (id:100011) triggered by 14.116.239.38 (CN/China/Guangdong/Guangzhou/-/[AS4134 CHINANET-BACKBONE No.31,Jin-rong Street]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Jul 11 21:19:57.282239 2026] [security2:error] [pid 2451931:tid 2452073] [client 14.116.239.38:3146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/louis-xv-furniture-1_code41_02.jpg"] [unique_id "alKJTfbj4tP0_iHaOeCCCQAAAAs"] show less	Port Scan
Anonymous	2026-07-11 15:44:00 (1 month ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-07-10 11:14:00 (1 month ago)	"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"	DDoS Attack
🇫🇷 Sklurk	2026-07-10 03:48:18 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-07-09 13:12:00 (1 month ago)	"Triggered WAF and Multiple attempts to access nonexistent vulnerable php files"	Web App Attack
🇫🇷 Sklurk	2026-07-07 13:14:24 (1 month ago)	Web App Attack	Web App Attack
🇸🇬 securejdprop	2026-07-06 06:34:44 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇬🇷 setupgr	2026-07-05 11:09:10 (1 month ago)	(mod_security) mod_security (id:100011) triggered by 14.116.239.38 (CN/China/Guangdong/Guangzhou/-/[ ... show more (mod_security) mod_security (id:100011) triggered by 14.116.239.38 (CN/China/Guangdong/Guangzhou/-/[AS4134 CHINANET-BACKBONE No.31,Jin-rong Street]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Jul 05 14:09:09.569304 2026] [security2:error] [pid 268012:tid 268061] [client 14.116.239.38:15718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/slab-legs.png"] [unique_id "ako7Vedy2K9ALYthgcvkawAAABQ"] show less	Port Scan
🇫🇷 GabrielJST	2026-07-04 14:23:30 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 14.116.239.38 (CN/Ch ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 14.116.239.38 (CN/China/-) show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-04 01:32:11 (1 month ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 85.30.212.24

🇬🇧 35.203.211.179

🇺🇸 34.96.36.118

🇨🇱 181.119.89.168

🇺🇸 167.148.33.215

🇺🇸 162.142.76.57

🇺🇸 147.185.132.91

🇨🇳 144.123.153.214

🇹🇼 114.46.143.176

🇫🇷 89.93.69.84

🇸🇬 47.237.15.121

🇨🇲 41.204.82.238

🇸🇪 34.51.128.150

🇷🇴 2.57.121.112

🇪🇨 186.42.173.67

🇮🇳 161.123.217.255

🇸🇬 103.13.206.152

🇺🇸 52.248.41.160

🇳🇱 45.142.193.132

🇬🇧 45.82.76.107