JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.144.14.11

14.144.14.11 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 5%: ?

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS140318
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.144.14.11

Whois 14.144.14.11

IP Abuse Reports for 14.144.14.11:

This IP address has been reported a total of 6 times from 1 distinct source. 14.144.14.11 was first reported on May 19th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-27 21:09:09 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 17:09:05.440287 2026] [security2:error] [pid 31653:tid 31653] [client 14.144.14.11:12495] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backtosleep.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backtosleep.com"] [uri "/"] [unique_id "akA78TCVgUmHDib7Wj3AwgAAAAM"], referer: http://backtosleep.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 12:19:39 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 08:19:34.918736 2026] [security2:error] [pid 24410:tid 24410] [client 14.144.14.11:11318] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.somuchtoread.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.somuchtoread.com"] [uri "/"] [unique_id "aj5uVpkZEOwK1UgnjuZ9xQAAAAs"], referer: http://www.somuchtoread.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 14:16:13 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 10:16:06.968966 2026] [security2:error] [pid 14646:tid 14646] [client 14.144.14.11:21560] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.sfgardening.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.sfgardening.com"] [uri "/"] [unique_id "ajKsJhLSe_bpyHwucdm2SQAAAAY"], referer: https://www.sfgardening.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-23 20:39:36 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 16:39:32.370933 2026] [security2:error] [pid 8910:tid 8910] [client 14.144.14.11:9434] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.accu-tuner.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.accu-tuner.com"] [uri "/"] [unique_id "ahIQhMW5QMfagAQ6gixltgAAAAU"], referer: http://www.accu-tuner.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 22:15:59 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 18:15:53.632602 2026] [security2:error] [pid 15935:tid 15945] [client 14.144.14.11:28511] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.lamco.us\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.lamco.us"] [uri "/index.html"] [unique_id "agzhGetC2BkLW2-y9rfHXgAAAEc"], referer: http://www.lamco.us/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 00:08:44 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 20:08:41.267462 2026] [security2:error] [pid 4155:tid 4155] [client 14.144.14.11:26493] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|amatosdrywall.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "amatosdrywall.com"] [uri "/index.html"] [unique_id "aguqCb7IUA7vEVW932ywnAAAAAc"], referer: http://amatosdrywall.com/index.html show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇪 185.70.54.71

🇺🇸 108.12.249.33

🇿🇦 102.64.43.234

🇯🇴 94.142.47.2

🇨🇳 218.92.236.102

🇬🇧 193.163.125.187

🇳🇱 185.242.226.103

🇻🇳 171.237.176.209

🇮🇳 103.57.176.202

🇹🇷 94.154.43.158

🇷🇺 90.150.77.25

🇺🇸 47.253.177.159

🇬🇧 35.203.211.182

🇹🇷 185.226.92.110

🇫🇷 185.177.72.58

🇿🇦 102.129.51.209

🇳🇱 91.92.40.151

🇫🇷 85.217.140.52

🇮🇶 65.20.175.6

🇺🇸 34.105.73.103