JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.133.14.142

123.133.14.142 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Shandong Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.133.14.142

Whois 123.133.14.142

IP Abuse Reports for 123.133.14.142:

This IP address has been reported a total of 10 times from 2 distinct sources. 123.133.14.142 was first reported on May 10th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 00:48:01 (7 hours ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 20:47:57.674157 2026] [security2:error] [pid 5467:tid 5482] [client 123.133.14.142:7358] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.jedelectric.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jedelectric.com"] [uri "/index.html"] [unique_id "alBBPd80ADeKr9XrfZjxMwAAAI0"], referer: http://www.jedelectric.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 01:46:38 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 21:46:34.093772 2026] [security2:error] [pid 3320:tid 3320] [client 123.133.14.142:47932] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.jewers.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jewers.org"] [uri "/"] [unique_id "aksI-rtkzODyrgWl4onjRQAAAAg"], referer: http://www.jewers.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:33:55 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:33:50.851303 2026] [security2:error] [pid 27260:tid 27260] [client 123.133.14.142:24087] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|megaandina.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "megaandina.com"] [uri "/index.html"] [unique_id "akgOnrgd6gRsM0k9H9pt8AAAAAQ"], referer: https://megaandina.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 02:08:19 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:08:13.219047 2026] [security2:error] [pid 11907:tid 11972] [client 123.133.14.142:25967] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.boracayglobal.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.boracayglobal.org"] [uri "/"] [unique_id "akcZjThfOYcyDf64XWFdIgAAAAA"], referer: http://www.boracayglobal.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 23:05:28 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 19:05:22.666975 2026] [security2:error] [pid 15723:tid 15723] [client 123.133.14.142:55574] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.wavecomputers.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wavecomputers.com"] [uri "/"] [unique_id "akRLsnmhyWgXw5F-RUfNswAAABA"], referer: https://www.wavecomputers.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 01:47:22 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 21:47:17.412258 2026] [security2:error] [pid 16521:tid 16521] [client 123.133.14.142:8267] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.handi-finder.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.handi-finder.com"] [uri "/"] [unique_id "akB9JflxnxJTiAS9yFkZpAAAAA4"], referer: https://www.handi-finder.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 00:52:48 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 20:52:44.395733 2026] [security2:error] [pid 18309:tid 18318] [client 123.133.14.142:16661] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|idealcentralvac.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "idealcentralvac.com"] [uri "/index.php"] [unique_id "aj8e3L4glw8qWy5ZZK4OqQAAAAI"], referer: http://idealcentralvac.com/index.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 23:03:52 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 19:03:49.117778 2026] [security2:error] [pid 14189:tid 14189] [client 123.133.14.142:44204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.oualierealty.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.oualierealty.com"] [uri "/"] [unique_id "aj8FVYRxD9QaBiUIdNVQZQAAAAk"], referer: https://www.oualierealty.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 20:21:55 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 123.133.14.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 16:21:46.359757 2026] [security2:error] [pid 24987:tid 24987] [client 123.133.14.142:35593] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|high5-vr.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "high5-vr.com"] [uri "/"] [unique_id "aiCM2qof2NQxxRKfMgIFVwAAAA0"], referer: http://high5-vr.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-10 01:09:26 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/123.133.14.142 2026-05-0 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/123.133.14.142 2026-05-09 04:17:51 /webman/favicon.ico?v=4399 show less	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 206.189.95.11

🇸🇬 193.37.32.188

🇺🇸 159.203.83.195

🇬🇧 141.98.100.150

🇨🇦 85.217.149.54

🇬🇧 45.82.76.132

🇳🇱 35.204.174.69

🇺🇿 213.230.87.60

🇫🇷 194.163.173.167

🇸🇬 193.37.32.199

🇺🇸 162.216.150.173

🇨🇳 106.226.165.125

🇳🇱 91.92.40.5

🇺🇸 66.132.186.219

🇨🇳 59.36.233.74

🇸🇬 47.128.122.100

🇳🇱 45.156.87.127

🇺🇸 44.195.50.71

🇺🇦 37.54.35.160

🇨🇳 36.155.101.97