JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.141.23.250

14.141.23.250 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 84%: ?

84%

ISP	Internet Service Provider
Usage Type	Fixed Line ISP
ASN	AS4755
Hostname(s)	ciadmin.in
Domain Name	tatacommunications.com
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.141.23.250

Whois 14.141.23.250

IP Abuse Reports for 14.141.23.250:

This IP address has been reported a total of 29 times from 22 distinct sources. 14.141.23.250 was first reported on June 24th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-02 07:26:49 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.141.23.250 (ciadmin.in): 1 in the last 300 s ... show more (mod_security) mod_security (id:210492) triggered by 14.141.23.250 (ciadmin.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 03:26:45.120924 2026] [security2:error] [pid 13931:tid 13931] [client 14.141.23.250:57932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crittergetterpestcontrol.azcrittergetter.com"] [uri "/wp-config.php.bak"] [unique_id "apfPtU9dXam8XLOQ1U9YLQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-09-02 06:22:06 (3 hours ago)	Suspicious URL access.	Web App Attack
🇮🇩 soc-yk	2026-09-02 05:30:19 (4 hours ago)	Type: suspicious_network_activity Risk: 86 Events: 13 Evidence: - Persistent suspicious network act ... show more Type: suspicious_network_activity Risk: 86 Events: 13 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Threat escalation behavior observed show less	Port Scan Hacking
Anonymous	2026-09-02 05:18:04 (4 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 TAY	2026-09-02 02:20:56 (7 hours ago)	14.141.23.250 - - [02/Sep/2026:10:19:37 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 511 "-" "Mozill ... show more 14.141.23.250 - - [02/Sep/2026:10:19:37 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:10:19:43 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:10:20:12 +0800] "GET /wp-config.php.save HTTP/1.1" 301 513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:10:20:13 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:10:20:43 +0800] "GET /wp-config.php.old HTTP/1.1" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Brute-Force
🇸🇪 vaia.cloud	2026-09-02 02:15:01 (7 hours ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
Anonymous	2026-09-02 01:15:38 (8 hours ago)	[ns31.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.git/config	Hacking Web App Attack
🇺🇸 TAY	2026-09-02 01:02:25 (8 hours ago)	14.141.23.250 - - [02/Sep/2026:08:58:03 +0800] "GET /wp-config.php.old HTTP/1.1" 301 6136 "-" "Mozil ... show more 14.141.23.250 - - [02/Sep/2026:08:58:03 +0800] "GET /wp-config.php.old HTTP/1.1" 301 6136 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:08:58:07 +0800] "GET /wp-config.php.txt HTTP/1.1" 301 6136 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:08:58:13 +0800] "GET /wp-config.php.txt HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:09:02:10 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6133 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:09:02:17 +0800] "GET /wp-config.php~ HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec ... show less	Brute-Force
🇺🇸 TAY	2026-09-01 23:50:46 (9 hours ago)	14.141.23.250 - - [02/Sep/2026:07:41:07 +0800] "GET /wp-config.php.save HTTP/1.1" 404 34938 "-" "Moz ... show more 14.141.23.250 - - [02/Sep/2026:07:41:07 +0800] "GET /wp-config.php.save HTTP/1.1" 404 34938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:07:41:13 +0800] "GET /wp-config.php.swp HTTP/1.1" 404 34906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:07:41:18 +0800] "GET /wp-config.php.old HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:07:41:34 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 34906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 14.141.23.250 - - [02/Sep/2026:07:50:12 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT ... show less	Brute-Force
🇩🇰 HostingGroup	2026-09-01 23:46:53 (9 hours ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 3. First blocked: 2026-09-01. show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 22:04:13 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.141.23.250 (ciadmin.in): 1 in the last 300 s ... show more (mod_security) mod_security (id:210492) triggered by 14.141.23.250 (ciadmin.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 18:04:07.660982 2026] [security2:error] [pid 14009:tid 14009] [client 14.141.23.250:41966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joeordie.com"] [uri "/wp-config.php.bak"] [unique_id "apdL1wp5CYlud24BH9tY-QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 SeczarSecureOps	2026-09-01 21:40:52 (12 hours ago)	Auto-blocked by Seczar SecureOps — WAF — SQL Injection Attack Burst (5 events in 10min) at 2026-09-0 ... show more Auto-blocked by Seczar SecureOps — WAF — SQL Injection Attack Burst (5 events in 10min) at 2026-09-01 21:40 show less	Web App Attack
🇩🇪 LRob	2026-09-01 20:27:10 (13 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /le-groupe/nos-filiales/dg-consultants/index.php/wp-json/batch/v1 \| 2026-09-01 20:27 UTC show less	Hacking Web App Attack
🇩🇰 HostingGroup	2026-09-01 19:31:53 (14 hours ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-09-01. show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-01 19:00:05 (14 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 128.14.237.120

🇫🇷 91.231.89.72

🇱🇺 83.99.124.136

🇳🇱 46.151.178.11

🇹🇼 198.235.24.80

🇺🇸 185.180.141.32

🇺🇸 147.185.132.180

🇰🇷 47.80.13.176

🇩🇪 185.242.3.151

🇮🇳 182.95.119.30

🇲🇾 180.74.216.41

🇫🇷 91.196.152.190

🇫🇷 85.217.140.44

🇺🇸 73.44.118.96

🇺🇸 66.132.186.201

🇺🇸 66.132.172.112

🇳🇱 213.177.179.177

🇹🇭 182.52.21.2

🇺🇸 172.104.20.14

🇺🇸 162.35.117.74