JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.215.197.233

114.215.197.233 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.215.197.233

Whois 114.215.197.233

IP Abuse Reports for 114.215.197.233:

This IP address has been reported a total of 28 times from 18 distinct sources. 114.215.197.233 was first reported on March 18th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-05-14 13:02:35 (1 month ago)	ICS Labs identified 114.215.197.233 as a malicious indicator from threat intelligence.	Hacking
🇺🇸 TPI-Abuse	2026-04-13 17:48:31 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 13:48:25.226698 2026] [security2:error] [pid 831740:tid 831740] [client 114.215.197.233:41164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.89"] [uri "/.env"] [unique_id "ad0saQIZtX0Q1WNvJrErIwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-04-11 17:56:02 (2 months ago)	GET /.env (Tarpitted for 18m40s, wasted 65.74kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-04-11 17:01:38 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 13:01:33.221867 2026] [security2:error] [pid 464089:tid 464089] [client 114.215.197.233:45256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.68"] [uri "/.env.bak"] [unique_id "adp-bVrUxYJkFz-izHeeWgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 jkhorvath.com	2026-04-10 12:28:59 (2 months ago)	Request for URL /version	Phishing Brute-Force Web App Attack
🇺🇸 MPL	2026-04-09 19:10:43 (2 months ago)	tcp port scan (26 or more attempts)	Port Scan
🇩🇪 dinginess6354	2026-04-06 18:31:09 (2 months ago)	Unauthorized Access Attempt	Port Scan Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 18:24:37 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 14:24:29.384559 2026] [security2:error] [pid 599090:tid 599090] [client 114.215.197.233:55374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.99"] [uri "/.env.bak"] [unique_id "adP6XUvwPQfw6yKBPiwxLQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-06 17:51:57 (2 months ago)	114.215.197.233 - - [06/Apr/2026:19:51:56 +0200] "GET /.env.bak HTTP/1.1" 402 769 "-" "Mozilla/5.0 ( ... show more 114.215.197.233 - - [06/Apr/2026:19:51:56 +0200] "GET /.env.bak HTTP/1.1" 402 769 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
Anonymous	2026-04-06 14:39:44 (2 months ago)	114.215.197.233 - - [06/Apr/2026:14:39:43 +0000] "GET /containers/json HTTP/1.1" 404 162 "-" "Mozill ... show more 114.215.197.233 - - [06/Apr/2026:14:39:43 +0000] "GET /containers/json HTTP/1.1" 404 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" 114.215.197.233 - - [06/Apr/2026:14:39:43 +0000] "GET /containers/json HTTP/1.1" 404 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-03 22:34:53 (2 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/114.215.197.233 2026-04 ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/114.215.197.233 2026-04-03 02:08:10 /containers/json 2026-04-03 02:08:10 /.env.bak 2026-04-03 02:08:11 /.env 2026-04-03 02:08:10 / 2026-04-03 02:08:11 /containers/json 2026-04-03 02:08:11 /version show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 18:43:59 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 114.215.197.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 14:43:55.287078 2026] [security2:error] [pid 4663:tid 4663] [client 114.215.197.233:56164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.209"] [uri "/.env.bak"] [unique_id "adAKa6yMi2xcknkQx7znuwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RogueAutomata	2026-04-03 14:47:59 (2 months ago)	Detected malicious request: GET /containers/json Detections triggered: Access via IP addr (v4)	Web App Attack
🇮🇩 securejdprop	2026-04-03 14:13:01 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access. WAF block: crowdsecurit ... show more This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access. WAF block: crowdsecurity/vpatch-env-access from 114.215.197.233 (172.18.0.3) show less	Hacking Web App Attack
🇺🇸 MPL	2026-04-02 15:59:20 (2 months ago)	tcp port scan (8 or more attempts)	Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.64.76.202

🇯🇵 151.248.68.180

🇨🇳 120.48.90.166

🇺🇸 52.1.250.135

🇺🇸 172.70.194.134

🇻🇳 157.10.45.70

🇺🇸 146.88.240.132

🇦🇷 131.255.240.10

🇰🇷 112.164.251.239

🇮🇳 88.222.246.228

🇺🇸 85.208.98.198

🇳🇱 45.156.87.13

🇳🇱 45.153.34.235

🇳🇱 45.148.10.152

🇮🇳 14.194.125.58

🇫🇷 4.251.36.214

🇺🇸 216.24.210.6

🇩🇪 213.209.159.225

🇨🇱 201.241.88.185

🇬🇧 194.50.235.141