JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.144.12.172

14.144.12.172 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 5%: ?

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS140318
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.144.12.172

Whois 14.144.12.172

IP Abuse Reports for 14.144.12.172:

This IP address has been reported a total of 9 times from 3 distinct sources. 14.144.12.172 was first reported on January 14th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-12 00:19:45 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 20:19:38.968049 2026] [security2:error] [pid 32085:tid 32085] [client 14.144.12.172:20641] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|myairbalance.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "myairbalance.org"] [uri "/"] [unique_id "alLdms8jRbQ9V-q-fe3cNwAAABg"], referer: http://myairbalance.org show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 20:24:40 (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 16:24:34.830493 2026] [security2:error] [pid 30923:tid 30923] [client 14.144.12.172:14359] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.astariamusic.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.astariamusic.com"] [uri "/"] [unique_id "ajBfgshZkoaBjvIgj5RECAAAABU"], referer: http://www.astariamusic.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 21:55:55 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 17:55:50.984790 2026] [security2:error] [pid 27464:tid 27464] [client 14.144.12.172:14642] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.edgecombe.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.edgecombe.net"] [uri "/"] [unique_id "aindZnMFiKZwO6S4_W5gkAAAAAI"], referer: http://www.edgecombe.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 00:48:03 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 20:47:57.751300 2026] [security2:error] [pid 11793:tid 11837] [client 14.144.12.172:36709] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.selfhelpbook.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.selfhelpbook.org"] [uri "/"] [unique_id "aiDLPeQqdBH4kO3-kZEl2QAAAY8"], referer: http://www.selfhelpbook.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 20:24:01 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 16:23:57.189870 2026] [security2:error] [pid 24926:tid 24926] [client 14.144.12.172:28476] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thegreatleapforward.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thegreatleapforward.com"] [uri "/"] [unique_id "aiCNXUi6N6fs02v3SniA3QAAAAg"], referer: http://thegreatleapforward.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 21:08:26 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 17:08:23.911717 2026] [security2:error] [pid 26667:tid 26667] [client 14.144.12.172:40467] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ricketyshack.ca\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ricketyshack.ca"] [uri "/"] [unique_id "achDR0ipJx_bIQeGqvdG3AAAAAc"], referer: http://www.ricketyshack.ca/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-03 22:07:18 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.12.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 17:07:15.602847 2026] [security2:error] [pid 4429:tid 4429] [client 14.144.12.172:4746] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.beteleios.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.beteleios.org"] [uri "/index.html"] [unique_id "aYJxkyZGkSDQtfzGPFiunQAAABc"], referer: http://www.beteleios.org/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-01-28 00:03:48 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/14.144.12.172 2025-01-27 14 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/14.144.12.172 2025-01-27 14:46:44 /cc.gif show less	Web App Attack
🇿🇦 IrisFlower	2022-01-14 03:35:32 (4 years ago)	Unauthorized connection attempt detected from IP address 14.144.12.172 to port 443 [J]	Port Scan Hacking

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.13.201.210

🇫🇷 161.97.113.41

🇺🇸 147.185.132.55

🇫🇮 86.54.25.235

🇺🇸 50.116.96.120

🇲🇩 45.15.226.100

🇬🇧 35.203.211.22

🇰🇷 222.239.251.12

🇺🇸 216.25.89.95

🇧🇷 205.210.31.218

🇧🇷 205.210.31.199

🇻🇪 190.6.16.134

🇸🇬 167.71.222.255

🇬🇧 154.16.44.94

🇩🇪 151.243.11.232

🇧🇷 131.103.44.158

🇻🇳 125.235.232.146

🇨🇳 106.13.134.220

🇸🇬 101.47.159.50

🇳🇱 89.248.173.162