JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.29.170.51

14.29.170.51 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 65%: ?

65%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.29.170.51

Whois 14.29.170.51

IP Abuse Reports for 14.29.170.51:

This IP address has been reported a total of 26 times from 11 distinct sources. 14.29.170.51 was first reported on June 25th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-17 17:27:53 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:27:47.930005 2026] [security2:error] [pid 3020:tid 3020] [client 14.29.170.51:33717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myhomeflyer.com"] [uri "/.env"] [unique_id "alpmEwVQzRMBCQTMd_er2gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 13:58:20 (12 hours ago)	(mod_security) mod_security (id:949110) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:949110) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:58:16.665965 2026] [security2:error] [pid 886526:tid 886526] [client 14.29.170.51:42707] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.weddingb.trophiesetc.us"] [uri "/.env.dist"] [unique_id "alo0-Go03mNCVIXE1nmXsAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-17 11:35:18 (15 hours ago)	20 attempts against mh-misbehave-ban on ficus	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 11:15:29 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:15:20.795529 2026] [security2:error] [pid 6845:tid 6980] [client 14.29.170.51:45606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hollyandandreproperties.com"] [uri "/.env"] [unique_id "aloOyI51-eXH1Mwfbh1OugAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 08:35:26 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:35:20.791506 2026] [security2:error] [pid 480428:tid 480428] [client 14.29.170.51:52683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spottedeaglearts.com"] [uri "/.env.bak"] [unique_id "alnpSES_K-Da7sP5qRr8pAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:53:40 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:53:33.701505 2026] [security2:error] [pid 15166:tid 15166] [client 14.29.170.51:42636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.tulsatvmemories.com"] [uri "/.env.bak"] [unique_id "alnffZOCPi-J-fqL5VLXGwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-07-17 06:44:27 (20 hours ago)	(modsecurity) srv104 ModSecurity 14.29.170.51 (CN/China/-): 10 in the last 3600 secs; Ports: ; Dire ... show more (modsecurity) srv104 ModSecurity 14.29.170.51 (CN/China/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-07-17 05:00:05 (21 hours ago)	\| [Dangerous/China] Aggressive IP 14.29.170.51 (~30 hits). Type: DoS Defender- Web server 400 error ... show more \| [Dangerous/China] Aggressive IP 14.29.170.51 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 mravb	2026-07-17 03:54:55 (22 hours ago)	14.29.170.51 - - [17/Jul/2026:06:54:54 +0300] "GET /.env.production HTTP/1.1" 404 9208 "-" "Mozilla/ ... show more 14.29.170.51 - - [17/Jul/2026:06:54:54 +0300] "GET /.env.production HTTP/1.1" 404 9208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" ... show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-17 03:53:06 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:53:00.376969 2026] [security2:error] [pid 225515:tid 225515] [client 14.29.170.51:55959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oshawinfree.robtown.com"] [uri "/.env.test"] [unique_id "almnHM9LiSQfKBsAGmOIaAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:33:59 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:33:55.555280 2026] [security2:error] [pid 22262:tid 22262] [client 14.29.170.51:46102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "underraided.com"] [uri "/src/.env"] [unique_id "almio9ZjvwrcWanVPba2SwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-17 03:18:06 (23 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-17 03:08:15 (23 hours ago)	{"reqId":"W03XKcV1AmUEMI9qJmSq","level":1,"time":"2026-07-17T05:06:04+02:00","remoteAddr":"14.29.170 ... show more {"reqId":"W03XKcV1AmUEMI9qJmSq","level":1,"time":"2026-07-17T05:06:04+02:00","remoteAddr":"14.29.170.51","user":"--","app":"core","method":"GET","url":"/var/.env","scriptName":"/index.php","message":"Trusted domain error. \"14.29.170.51\" tried to access using \"n8n.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)","version":"34.0.1.2","data":{"app":"core"}} {"reqId":"hjfxS6bW3SlEDH9iqBGY","level":1,"time":"2026-07-17T05:06:16+02:00","remoteAddr":"14.29.170.51","user":"--","app":"core","method":"GET","url":"/docker-compose.yaml","scriptName":"/index.php","message":"Trusted domain error. \"14.29.170.51\" tried to access using \"n8n.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver ... show less	Web App Attack
🇨🇭 4server	2026-07-16 21:53:58 (1 day ago)	[ThuJul1623:53:53.5724892026][security2:error][pid1473269:tid1473556][client14.29.170.51:0]ModSecuri ... show more [ThuJul1623:53:53.5724892026][security2:error][pid1473269:tid1473556][client14.29.170.51:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aidweb.ch.81-17-25-250.cpanel.site\"][uri\"/.env~\"][unique_id\"allS8VEJcC0OZPhx3AedUgAAARQ\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 20:43:08 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.170.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:43:03.013607 2026] [security2:error] [pid 5617:tid 5617] [client 14.29.170.51:59588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ridgecrestrealtors.com"] [uri "/api/.env"] [unique_id "allCV5vgBk-dHph7NDuMqwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c32::12a

🇧🇪 198.235.24.217

🇫🇮 147.185.133.2

🇺🇸 107.172.226.32

🇫🇷 104.23.225.164

🇺🇸 47.199.125.189

🇹🇷 45.148.65.24

🇩🇿 41.101.29.244

🇯🇵 34.146.248.7

🇨🇳 222.187.115.202

🇩🇪 213.209.159.242

🇩🇪 213.209.159.231

🇵🇱 194.180.49.70

🇫🇷 194.163.145.20

🇬🇧 191.101.59.16

🇦🇷 186.13.211.27

🇸🇪 171.25.158.57

🇧🇷 170.246.83.53

🇫🇷 152.228.213.32

🇪🇸 149.22.104.224