JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.29.187.133

14.29.187.133 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 59%: ?

59%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.29.187.133

Whois 14.29.187.133

IP Abuse Reports for 14.29.187.133:

This IP address has been reported a total of 23 times from 9 distinct sources. 14.29.187.133 was first reported on June 25th 2026, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-17 00:22:55 (30 minutes ago)	Web attack/malicious scanning detected	Web App Attack
🇭🇺 bcsaba	2026-07-16 22:06:05 (2 hours ago)	Probing for .env file: 14.29.187.133 - - [17/Jul/2026:00:06:02 +0200] "GET /.env.example HTTP/1.1" 4 ... show more Probing for .env file: 14.29.187.133 - - [17/Jul/2026:00:06:02 +0200] "GET /.env.example HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 21:56:40 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:56:34.067617 2026] [security2:error] [pid 19212:tid 19212] [client 14.29.187.133:33050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.disdis.net.greenlight.us"] [uri "/.env"] [unique_id "allTkqwPQX04cn2xKtCNRQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 21:32:19 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:32:11.640283 2026] [security2:error] [pid 23134:tid 23134] [client 14.29.187.133:49629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mantality.com"] [uri "/.env"] [unique_id "allN21ivT3RSUZEEsT9WawAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-16 21:07:39 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 20:45:31 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:45:23.600846 2026] [security2:error] [pid 28111:tid 28111] [client 14.29.187.133:53349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icaruscreativearts.com"] [uri "/.env.production.local"] [unique_id "allC45ZYX40chcYMfzXdswAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-16 20:43:58 (4 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 20:12:34 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:12:29.130824 2026] [security2:error] [pid 28352:tid 28352] [client 14.29.187.133:32934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.org"] [uri "/.env.test"] [unique_id "alk7La1TX38GTnNFpAJtaQAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 19:20:27 (5 hours ago)	[server.tmg.gr] httpd-config-scan: sites=www.ird2019.gr; logs=/var/log/httpd/domains/ird2019.gr.log; ... show more [server.tmg.gr] httpd-config-scan: sites=www.ird2019.gr; logs=/var/log/httpd/domains/ird2019.gr.log; samples=/.env \| /.env.local \| /.env.production show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 19:17:35 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:17:29.526453 2026] [security2:error] [pid 2108:tid 2108] [client 14.29.187.133:34398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canebrakes.com"] [uri "/.env.dev"] [unique_id "alkuSc1dCyZ1iUdKWdooJAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 18:51:17 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:51:11.044918 2026] [security2:error] [pid 9750:tid 9750] [client 14.29.187.133:47657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yt.grancanariaholidays.com"] [uri "/.env.vault"] [unique_id "alkoH_KtHUfU6x0kvowsugAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-16 18:50:04 (6 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 18:27:28 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:27:22.602141 2026] [security2:error] [pid 544:tid 544] [client 14.29.187.133:48493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djmrmusic.com"] [uri "/private/.env"] [unique_id "alkiipLpf0cNTmEq84YzAAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 17:50:21 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:50:13.487765 2026] [security2:error] [pid 28258:tid 28258] [client 14.29.187.133:54302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.edgecomix.edgeimprov.com"] [uri "/.env~"] [unique_id "alkZ1d6pbhtlaVpX0x_Y7wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 17:28:25 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.187.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:28:19.008839 2026] [security2:error] [pid 5823:tid 5823] [client 14.29.187.133:44981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flutetroupeofyakima.org"] [uri "/.env.prod"] [unique_id "alkUs1pzMuKepj0fuV9_YgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.171

🇺🇸 135.237.122.43

🇪🇬 196.202.110.41

🇺🇸 195.184.76.93

🇷🇺 176.208.50.142

🇺🇸 162.216.150.163

🇫🇷 161.97.173.163

🇨🇴 143.105.99.156

🇮🇳 124.253.226.22

🇨🇳 124.88.113.82

🇰🇷 121.189.198.60

🇸🇬 118.139.164.171

🇺🇸 104.236.53.110

🇸🇬 94.231.206.130

🇸🇬 94.231.206.2

🇹🇷 94.154.43.82

🇳🇱 92.63.197.5

🇫🇷 91.231.89.78

🇳🇱 91.92.40.240

🇨🇦 85.217.149.2