JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.232.14.109

49.232.14.109 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 65%: ?

65%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.232.14.109

Whois 49.232.14.109

IP Abuse Reports for 49.232.14.109:

This IP address has been reported a total of 32 times from 23 distinct sources. 49.232.14.109 was first reported on April 23rd 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-07-14 06:03:25 (10 hours ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 omc	2026-07-14 02:56:14 (14 hours ago)	Banned IP [QD]. Banned IP [QN]. GET /ip [Q4]. Layer 7 burst [QF]. Endpoint attack [QS].	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-07-14 01:38:57 (15 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /ip \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-07-13 11:17:41 (1 day ago)	iaki.com.au:443 49.232.14.109 - - [13/Jul/2026:21:17:38 +1000] "GET /ip HTTP/1.1" 404 63038 "-" "Moz ... show more iaki.com.au:443 49.232.14.109 - - [13/Jul/2026:21:17:38 +1000] "GET /ip HTTP/1.1" 404 63038 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 jcbriar	2026-07-11 22:14:49 (2 days ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇨🇦 1gz	2026-07-08 03:02:36 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /ip UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-07-06 16:45:45 (1 week ago)	talentaymerch.com.au:443 49.232.14.109 - - [07/Jul/2026:02:45:42 +1000] "GET /ip HTTP/1.1" 404 10603 ... show more talentaymerch.com.au:443 49.232.14.109 - - [07/Jul/2026:02:45:42 +1000] "GET /ip HTTP/1.1" 404 106039 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 TCATERDSBE	2026-07-01 08:34:00 (1 week ago)	SQL Injection	SQL Injection
🇺🇸 kosada.com	2026-06-27 15:45:11 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-06-19 15:00:18 (3 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇮🇹 Progetto1	2026-06-19 01:55:03 (3 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇷🇺 Mga Admin	2026-06-18 07:10:02 (3 weeks ago)	49.232.14.109 - - [18/Jun/2026:14:10:00 +0700] "GET /ip HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintos ... show more 49.232.14.109 - - [18/Jun/2026:14:10:00 +0700] "GET /ip HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Web App Attack
🇬🇧 CrystalMaker	2026-06-11 01:01:45 (1 month ago)	Vulnerability scan - GET /ip	Hacking
🇦🇺 afleventoffice.com.au	2026-06-09 02:47:05 (1 month ago)	GET /events.cgi/taps/dining.htm?match=RD11_08 HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 09:53:06 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 49.232.14.109 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 49.232.14.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 05:52:58.508333 2026] [security2:error] [pid 13209:tid 13209] [client 49.232.14.109:56090] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|player-care.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "player-care.com"] [uri "/sofi-cds/thumbs.db"] [unique_id "aiKceiy-JsdmIsq3sCXcfwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.154.133.166

🇨🇳 211.158.110.180

🇺🇸 198.12.80.48

🇬🇧 195.96.139.207

🇲🇽 189.190.244.176

🇧🇷 186.195.164.220

🇩🇪 185.209.196.158

🇺🇸 178.128.183.16

🇺🇸 158.46.179.155

🇮🇶 150.228.105.73

🇧🇩 103.141.64.14

🇫🇷 91.196.152.103

🇺🇸 71.6.232.28

🇳🇱 45.148.10.31

🇺🇸 44.44.99.252

🇨🇱 2800:3f0:4003:c08::12a

🇺🇸 2600:1f1c:a8f:a801:ebe2:f72c:9deb:131f

🇻🇪 201.249.66.254

🇬🇧 195.96.139.198

🇦🇷 186.125.95.45