JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.152.91.202

14.152.91.202 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 40%: ?

40%

ISP	CHINANET Guangdong province network
Usage Type	Commercial
ASN	AS134763
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.152.91.202

Whois 14.152.91.202

IP Abuse Reports for 14.152.91.202:

This IP address has been reported a total of 169 times from 27 distinct sources. 14.152.91.202 was first reported on May 17th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-07-08 16:05:16 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 Lee Daniel	2026-07-03 10:59:41 (6 days ago)	14.152.91.202 - - [03/Jul/2026:06:59:39 -0400] "GET /assets/favicon.ico HTTP/1.1" 404 699 "-" "Go-ht ... show more 14.152.91.202 - - [03/Jul/2026:06:59:39 -0400] "GET /assets/favicon.ico HTTP/1.1" 404 699 "-" "Go-http-client/2.0" 14.152.91.202 - - [03/Jul/2026:06:59:39 -0400] "GET /img/favicon.ico HTTP/1.1" 404 696 "-" "Go-http-client/2.0" 14.152.91.202 - - [03/Jul/2026:06:59:39 -0400] "GET /favicon.png HTTP/1.1" 404 692 "-" "Go-http-client/2.0" 14.152.91.202 - - [03/Jul/2026:06:59:40 -0400] "GET /static/favicon.ico HTTP/1.1" 404 699 "-" "Go-http-client/2.0" 14.152.91.202 - - [03/Jul/2026:06:59:40 -0400] "GET /icon/favicon.ico HTTP/1.1" 404 697 "-" "Go-http-client/2.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 ersei.net	2026-07-02 16:58:28 (1 week ago)	Nonstop scanning with no cooldown or respect for 429.	Bad Web Bot
🇺🇸 Lee Daniel	2026-06-28 17:13:15 (1 week ago)	14.152.91.202 - - [28/Jun/2026:13:12:55 -0400] "GET /favicon.png HTTP/1.1" 404 5849 "-" "Go-http-cli ... show more 14.152.91.202 - - [28/Jun/2026:13:12:55 -0400] "GET /favicon.png HTTP/1.1" 404 5849 "-" "Go-http-client/2.0" 14.152.91.202 - - [28/Jun/2026:13:12:55 -0400] "GET /icon/favicon.ico HTTP/1.1" 404 5854 "-" "Go-http-client/2.0" 14.152.91.202 - - [28/Jun/2026:13:12:55 -0400] "GET /static/favicon.ico HTTP/1.1" 404 5856 "-" "Go-http-client/2.0" 14.152.91.202 - - [28/Jun/2026:13:13:13 -0400] "GET /images/favicon.ico HTTP/1.1" 404 5856 "-" "Go-http-client/2.0" 14.152.91.202 - - [28/Jun/2026:13:13:13 -0400] "GET /img/favicon.ico HTTP/1.1" 404 5853 "-" "Go-http-client/2.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 Skyrider	2026-06-28 05:58:10 (1 week ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
Anonymous	2026-06-24 20:45:20 (2 weeks ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Rate limit bad session: 3 in 2s \| UA: Go-http-client/2.0 \| (Magento Site) show less	DDoS Attack Bad Web Bot
🇺🇸 Lee Daniel	2026-06-18 07:29:29 (3 weeks ago)	14.152.91.202 - - [18/Jun/2026:03:29:28 -0400] "GET /images/favicon.ico HTTP/1.1" 404 699 "-" "Go-ht ... show more 14.152.91.202 - - [18/Jun/2026:03:29:28 -0400] "GET /images/favicon.ico HTTP/1.1" 404 699 "-" "Go-http-client/2.0" 14.152.91.202 - - [18/Jun/2026:03:29:28 -0400] "GET /assets/favicon.ico HTTP/1.1" 404 699 "-" "Go-http-client/2.0" 14.152.91.202 - - [18/Jun/2026:03:29:28 -0400] "GET /icon/favicon.ico HTTP/1.1" 404 697 "-" "Go-http-client/2.0" 14.152.91.202 - - [18/Jun/2026:03:29:28 -0400] "GET /static/favicon.ico HTTP/1.1" 404 699 "-" "Go-http-client/2.0" 14.152.91.202 - - [18/Jun/2026:03:29:28 -0400] "GET /favicon.png HTTP/1.1" 404 692 "-" "Go-http-client/2.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-15 03:07:16 (3 weeks ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-10 21:52:52 (4 weeks ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 202.91.152.14.rbl.malwa ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 202.91.152.14.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇦🇺 MAGIC	2026-06-07 00:23:37 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-11 02:25:13 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 14.152.91.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 14.152.91.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 22:25:00.936750 2026] [security2:error] [pid 6151:tid 6151] [client 14.152.91.202:22344] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/reliable-gutter-replacement-orlando/www.raintechgutters.com"] [unique_id "agE9_BOKi8En1QasVl_QhAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-05 01:54:29 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-05-04 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-05-04 01:14:16 /wp-content/uploads show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-03 01:31:32 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-05-02 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-05-02 04:17:50 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-02 01:22:25 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-05-01 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-05-01 05:10:08 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-28 01:14:38 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-04-27 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/14.152.91.202 2026-04-27 08:53:12 /docs/images/fonts/OpenSans600.woff 2026-04-27 08:53:12 /docs/images/asf-logo.svg 2026-04-27 08:53:12 /docs/setup.html show less	Web App Attack

Showing 1 to 15 of 169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.178.165.251

🇸🇪 185.112.115.244

🇺🇸 172.253.1.22

🇺🇸 66.150.196.153

🇺🇸 66.132.172.156

🇺🇸 20.64.104.195

🇺🇸 20.14.74.80

🇬🇧 5.226.140.12

🇩🇪 194.88.98.91

🇮🇳 125.20.210.182

🇨🇳 106.13.98.129

🇲🇲 103.59.163.133

🇫🇷 91.231.89.113

🇩🇪 69.5.169.249

🇳🇱 45.148.10.35

🇺🇸 195.184.76.94

🇳🇱 185.212.129.206

🇺🇸 162.216.150.207

🇲🇽 148.216.28.11

🇮🇪 84.203.30.71