JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.29.206.160

14.29.206.160 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 76%: ?

76%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.29.206.160

Whois 14.29.206.160

IP Abuse Reports for 14.29.206.160:

This IP address has been reported a total of 27 times from 14 distinct sources. 14.29.206.160 was first reported on June 26th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-18 04:13:11 (2 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇳🇱 Site.eu	2026-07-17 23:07:39 (7 hours ago)	Excessive multi-domain requests	Brute-Force
🇧🇷 Halux	2026-07-17 17:47:42 (12 hours ago)	14.29.206.160 Probing protected path or service	Web App Attack
🇫🇷 dynamix	2026-07-17 15:37:03 (15 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 14:49:21 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 10:49:12.450997 2026] [security2:error] [pid 20655:tid 20655] [client 14.29.206.160:41643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimwilsongallery.com"] [uri "/.env"] [unique_id "alpA6KQpCtqQbwp5jIoTgQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 13:37:23 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:37:16.011213 2026] [security2:error] [pid 1016053:tid 1016078] [client 14.29.206.160:52709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "executiveconsultingpr.com"] [uri "/.env.production"] [unique_id "alowDFYbiv84ISgxu6w-2QAAAZY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 13:07:46 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:07:40.065941 2026] [security2:error] [pid 763988:tid 763988] [client 14.29.206.160:44722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bee432.garyrankin.com"] [uri "/.env"] [unique_id "alopHGmT3KK7Tig-hzJu2QAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:29:17 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:29:11.579256 2026] [security2:error] [pid 11873:tid 11873] [client 14.29.206.160:55654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danzantesdehuesca.com.disnet-m.com"] [uri "/.env"] [unique_id "aloD99QP68AT-ty7eMVefgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 09:56:21 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 05:56:17.111259 2026] [security2:error] [pid 9617:tid 9617] [client 14.29.206.160:60622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "golflavahotsprings.com"] [uri "/.env"] [unique_id "aln8QbI6cmAkR_xQ6w4ilQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 08:42:33 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:42:27.003380 2026] [security2:error] [pid 12689:tid 12689] [client 14.29.206.160:39799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "d365geek.com"] [uri "/.env"] [unique_id "alnq84HfI7G2Cur-DMSc7wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-07-17 07:50:55 (22 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, source_backup, config_backup, actuator, aws_creds. Observed by 1 sensor(s); 95 hits. show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:46:46 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:46:38.580250 2026] [security2:error] [pid 409587:tid 409587] [client 14.29.206.160:34229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mangamaster.hongkonger.org"] [uri "/.env.dev"] [unique_id "alnd3uHAw0mVrlq5vKSosQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 04:18:19 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:18:15.922190 2026] [security2:error] [pid 10852:tid 10852] [client 14.29.206.160:58715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "go-901.com"] [uri "/.env.development.local"] [unique_id "almtB3Jm28FqMFA3-PDs6wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 mravb	2026-07-17 03:57:46 (1 day ago)	14.29.206.160 - - [17/Jul/2026:06:57:45 +0300] "GET /app/.env HTTP/1.1" 404 9208 "-" "Mozilla/5.0 (W ... show more 14.29.206.160 - - [17/Jul/2026:06:57:45 +0300] "GET /app/.env HTTP/1.1" 404 9208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" ... show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-17 02:44:39 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 14.29.206.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:44:33.784660 2026] [security2:error] [pid 159261:tid 159261] [client 14.29.206.160:48607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mahoninginn.com"] [uri "/var/.env"] [unique_id "almXEVU3JQwODOl89HDrGwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.84

🇳🇱 176.65.148.2

🇨🇳 171.37.193.108

🇩🇪 167.94.146.51

🇭🇰 156.225.1.32

🇨🇳 117.172.226.189

🇹🇼 59.125.2.190

🇨🇳 36.104.144.114

🇬🇧 35.203.211.45

🇬🇧 35.203.210.127

🇨🇦 20.63.63.128

🇺🇸 5.254.5.85

🇦🇺 223.27.18.80

🇹🇭 203.172.213.166

🇸🇬 203.116.129.55

🇫🇮 135.181.251.219

🇺🇸 107.150.105.153

🇨🇦 85.217.149.58

🇺🇸 64.23.213.68

🇯🇵 43.165.178.246