JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.14.7.149

202.14.7.149 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 3%: ?

ISP	Asia Pacific Network Information Centre
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26658
Domain Name	apnic.net
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.14.7.149

Whois 202.14.7.149

IP Abuse Reports for 202.14.7.149:

This IP address has been reported a total of 13 times from 10 distinct sources. 202.14.7.149 was first reported on May 28th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 KIDOS	2026-08-31 09:53:30 (1 day ago)	malicious activity	Web App Attack
🇱🇻 garmtech.com	2025-08-16 08:39:20 (1 year ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 TPI-Abuse	2025-08-13 14:21:29 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 202.14.7.149 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 202.14.7.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 13 10:21:19.313004 2025] [security2:error] [pid 13858:tid 13858] [client 202.14.7.149:50543] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "aJyfXwsCG8w6JjbqLHMMlgAAABI"], referer: https://roofingcontractormadison.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-07 00:53:52 (1 year ago)	Brute forcing Wordpress login	Hacking Web App Attack
Anonymous	2025-01-02 03:47:21 (1 year ago)	Brute forcing Wordpress login	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-01-02 00:07:15 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 202.14.7.149 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 202.14.7.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 01 19:07:12.497086 2025] [security2:error] [pid 5723:tid 5723] [client 202.14.7.149:51183] [client 202.14.7.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.powerastronomy.com\|F\|2"] [data ".rozblog.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.powerastronomy.com"] [uri "/DataGraphingSims/DataGraphing_buy-backlinks.rozblog.com"] [unique_id "Z3XYsMGDxcrjPYD1_-erTwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-29 17:32:01 (1 year ago)	Brute forcing Wordpress login	Hacking Web App Attack
Anonymous	2024-12-10 22:49:36 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 trbs	2021-06-18 13:09:51 (5 years ago)	02,8-104/07 [bc04/m147] +32,00 PostRequest-Spammer scoring: Lusaka01	Phishing Web Spam
Anonymous	2021-06-18 08:16:07 (5 years ago)	Post spam - long message duplicate in address box: 202.14.7.149 - - [18/Jun/2021:12:22:26 +0100] " ... show more Post spam - long message duplicate in address box: 202.14.7.149 - - [18/Jun/2021:12:22:26 +0100] "GET /contact/ HTTP/1.0" 200 12232 "https://[domain]/" "Mozilla/5.0 (X11; Linux i686 (x86_64)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3394.0 Safari/537.36" show less	Web Spam
🇩🇰 Din-Server Group ApS	2021-06-18 04:56:52 (5 years ago)	(from [email protected]) My name’s Eric and I just came across your website - din-server. ... show more (from [email protected]) My name’s Eric and I just came across your website - din-server.dk - in the search results. Here’s what that means to me… Your SEO’s working. You’re getting eyeballs – mine at least. Your content’s pretty good, wouldn’t change a thing. BUT… Eyeballs don’t pay the bills. CUSTOMERS do. And studies show that 7 out of 10 visitors to a site like din-server.dk will drop by, take a gander, and then head for the hills without doing anything else. It’s like they never were even there. show less	Phishing Web Spam
🇨🇭 backslash	2021-06-10 02:33:55 (5 years ago)		Web Spam
Anonymous	2021-05-28 16:25:05 (5 years ago)		Web Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.220

🇷🇴 193.46.255.86

🇩🇪 134.122.93.100

🇫🇷 77.239.124.181

🇺🇸 72.219.214.236

🇨🇳 39.70.34.242

🇱🇰 222.165.141.115

🇳🇱 213.177.179.172

🇦🇲 195.250.84.210

🇲🇽 189.155.52.199

🇺🇸 175.29.131.211

🇻🇳 171.243.148.195

🇹🇿 102.211.34.37

🇺🇸 91.230.168.215

🇨🇳 49.115.219.90

🇸🇬 47.84.109.69

🇧🇪 35.189.228.212

🇳🇱 34.12.241.35

🇺🇸 8.228.86.215

🇳🇱 2a10:3c0:3:0:1:17:0:5