JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.217.10.58

114.217.10.58 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 85%: ?

85%

ISP	Chinanet Jiangsu Province Network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.217.10.58

Whois 114.217.10.58

IP Abuse Reports for 114.217.10.58:

This IP address has been reported a total of 22 times from 15 distinct sources. 114.217.10.58 was first reported on June 25th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 as211431.net	2026-06-30 09:49:02 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.save UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 myintarweb	2026-06-30 08:09:16 (2 days ago)	114.217.10.58 - - [30/Jun/2026:09:09:15 +0100] 443 "GET /config HTTP/1.1" 404 1502 "-" "Mozilla/5.0 ... show more 114.217.10.58 - - [30/Jun/2026:09:09:15 +0100] 443 "GET /config HTTP/1.1" 404 1502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 07:49:44 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 03:49:37.435365 2026] [security2:error] [pid 14659:tid 14659] [client 114.217.10.58:41416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fasllc.rooksfamily.com"] [uri "/.env.example"] [unique_id "akN1EU96dMsDR_6mrXWYawAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 07:38:55 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
Anonymous	2026-06-30 07:33:56 (2 days ago)	Probing\(5\) HTTP Ports ...	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-30 07:09:31 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-30 06:58:01 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 02:57:53.164072 2026] [security2:error] [pid 10772:tid 10772] [client 114.217.10.58:55452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clubfansite.com"] [uri "/config/.env"] [unique_id "akNo8ZdxYhNVNHEN3PcO_AAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 tentwentyfour	2026-06-30 06:42:31 (2 days ago)	Blocked for probing for sensitive web application components	Brute-Force Web App Attack
🇮🇹 VHosting	2026-06-30 06:20:09 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 Starburst SysOp Team	2026-06-30 06:16:46 (2 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-nue6-1)	Hacking Web App Attack
Anonymous	2026-06-30 06:03:40 (2 days ago)	114.217.10.58 - - [30/Jun/2026:08:03:39 +0200] "GET /storage/framework/.env HTTP/1.1" 403 5440 "-" " ... show more 114.217.10.58 - - [30/Jun/2026:08:03:39 +0200] "GET /storage/framework/.env HTTP/1.1" 403 5440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" ... show less	Brute-Force Web App Attack
🇬🇧 Axel	2026-06-30 05:53:35 (2 days ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /wp-config.ph ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /wp-config.php~ Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇨🇭 4server	2026-06-30 05:38:03 (2 days ago)	[TueJun3007:37:55.8385022026][security2:error][pid1964207:tid1964286][client114.217.10.58:0]ModSecur ... show more [TueJun3007:37:55.8385022026][security2:error][pid1964207:tid1964286][client114.217.10.58:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".key\"][severity\"ERROR\"][hostname\"4hosts.net\"][uri\"/config/master.key\"][unique_id\"akNWM9UNwy28kuTrmJISYgAAAY4\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 10:42:05 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 06:41:58.074349 2026] [security2:error] [pid 15583:tid 15583] [client 114.217.10.58:35856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solohombre.es"] [uri "/.env.test.local"] [unique_id "akJL9qZjPB4WWnRGfq6PBQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 07:28:49 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 114.217.10.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 03:28:42.400960 2026] [security2:error] [pid 3071:tid 3071] [client 114.217.10.58:37734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.yun-san.com"] [uri "/.env.development.local"] [unique_id "akDNKh3WNDyBB9v9vobfzgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4004:c1b::12e

🇺🇸 2001:470:0:f0::2

🇺🇸 207.90.244.19

🇨🇳 180.165.7.120

🇵🇱 176.53.159.197

🇺🇸 172.208.25.111

🇺🇸 154.83.197.126

🇭🇰 152.32.254.89

🇦🇷 149.50.147.126

🇫🇮 147.185.133.252

🇺🇸 147.185.132.231

🇺🇸 143.14.6.174

🇭🇰 114.111.52.109

🇻🇳 113.160.82.122

🇮🇩 103.38.101.195

🇺🇸 99.72.171.118

🇵🇱 89.67.37.52

🇩🇪 87.120.84.174

🇺🇸 66.132.172.131

🇺🇸 66.132.172.46