JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.144.14.185

14.144.14.185 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 5%: ?

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS140318
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.144.14.185

Whois 14.144.14.185

IP Abuse Reports for 14.144.14.185:

This IP address has been reported a total of 6 times from 3 distinct sources. 14.144.14.185 was first reported on August 8th 2023, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-29 23:52:25 (3 hours ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 19:52:18.402605 2026] [security2:error] [pid 23647:tid 23647] [client 14.144.14.185:27197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|convoyforkids.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "convoyforkids.com"] [uri "/"] [unique_id "akMFMiJTrpQNYP3amGr_jwAAAAo"], referer: https://convoyforkids.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 01:01:17 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 21:01:12.610092 2026] [security2:error] [pid 28382:tid 28388] [client 14.144.14.185:37671] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.teanaunz.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.teanaunz.com"] [uri "/"] [unique_id "aj8g2FwkppPS-ZFh_FLbeQAAAEQ"], referer: http://www.teanaunz.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-18 03:53:11 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 23:53:08.564825 2026] [security2:error] [pid 12441:tid 12441] [client 14.144.14.185:17923] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|samelsner.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "samelsner.com"] [uri "/"] [unique_id "agqNJGGDPt99ke1gyo4dVwAAAAU"], referer: http://samelsner.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 04:33:59 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 14.144.14.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 23:33:55.132008 2026] [security2:error] [pid 8734:tid 8734] [client 14.144.14.185:9874] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|lemontreefoods.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "lemontreefoods.com"] [uri "/index.html"] [unique_id "aW20M0mvfcfM6r48Jr1qzAAAABs"], referer: http://lemontreefoods.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-04-25 22:11:15 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/14.144.14.185 2025-04-25 08 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/14.144.14.185 2025-04-25 08:32:18 / show less	Web App Attack
Anonymous	2023-08-08 12:45:02 (2 years ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.86

🇩🇪 193.124.20.252

🇺🇸 162.216.149.19

🇺🇸 146.190.151.40

🇺🇸 74.125.186.83

🇷🇺 45.91.64.6

🇨🇳 221.11.33.254

🇺🇸 205.210.31.105

🇸🇪 192.121.125.190

🇧🇷 189.114.136.231

🇺🇸 162.216.149.175

🇹🇼 111.247.38.228

🇺🇸 98.92.61.255

🇭🇷 83.131.12.83

🇭🇰 58.152.42.174

🇳🇱 45.148.10.151

🇺🇸 43.162.82.212

🇬🇧 35.203.210.13

🇫🇷 34.155.163.109

🇩🇪 34.141.95.187