JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.29.227.15

14.29.227.15 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 64%: ?

64%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.29.227.15

Whois 14.29.227.15

IP Abuse Reports for 14.29.227.15:

This IP address has been reported a total of 25 times from 12 distinct sources. 14.29.227.15 was first reported on June 25th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-07-17 12:07:46 (8 minutes ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 11:21:27 (55 minutes ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:21:22.674829 2026] [security2:error] [pid 746343:tid 746343] [client 14.29.227.15:56963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agapeaccounting.com"] [uri "/.env.save"] [unique_id "aloQMgGBA_Epxxu4jqpzbwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 11:03:57 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:03:51.497026 2026] [security2:error] [pid 3918047:tid 3918047] [client 14.29.227.15:48830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronelgas.com"] [uri "/.env.dev"] [unique_id "aloMFxwL5Ak5cTuGJTNxgAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-07-17 09:59:10 (2 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇬🇧 consul.to	2026-07-17 08:58:20 (3 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 raph	2026-07-17 08:53:02 (3 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-17 08:26:36 (3 hours ago)	Try to access /app/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:47:26 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:47:21.682584 2026] [security2:error] [pid 406997:tid 406997] [client 14.29.227.15:60654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mangamaster.hongkonger.org"] [uri "/.env.old"] [unique_id "alneCb84ESRQjuzLbq8QxQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:40:11 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:40:03.398070 2026] [security2:error] [pid 428281:tid 428281] [client 14.29.227.15:43469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arcontractingservices.com"] [uri "/config/.env"] [unique_id "alnAM4x_NesTU9lASMR5mgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:57:48 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:57:41.369193 2026] [security2:error] [pid 3992251:tid 3992251] [client 14.29.227.15:46035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allisonstiles.org"] [uri "/.env.local"] [unique_id "almoNcjNfuoiQCFUwKO98gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:27:49 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:27:45.651788 2026] [security2:error] [pid 196498:tid 196498] [client 14.29.227.15:42156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "limocorpuschristi.com"] [uri "/.env.local"] [unique_id "almhMVgwYv5LUng3QJrlIAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:10:46 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:10:39.175518 2026] [security2:error] [pid 17876:tid 17876] [client 14.29.227.15:52814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.russiacoin.info"] [uri "/.env.prod"] [unique_id "almdL0tEIG6AAtyIycv66QAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-17 02:53:03 (9 hours ago)	csagent: score 20.1: 404 noise floor x2, secrets grab x2; 2 domain(s) in 7s	Web App Attack
🇮🇹 mediarama.com	2026-07-17 02:24:19 (9 hours ago)	Banned by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 01:25:44 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 14.29.227.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 21:25:37.005827 2026] [security2:error] [pid 20520:tid 20520] [client 14.29.227.15:32957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susansambou.org"] [uri "/.env.bak"] [unique_id "almEkYyeB5WQEgvAgrbU4QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 172.70.90.108

🇮🇩 163.7.4.169

🇻🇳 157.20.82.38

🇫🇷 85.217.140.48

🇻🇪 45.198.56.21

🇺🇸 8.234.189.175

🇨🇳 223.223.199.221

🇩🇪 195.201.228.157

🇧🇷 177.87.4.230

🇺🇸 172.68.150.50

🇺🇸 162.216.149.120

🇻🇳 160.22.171.138

🇦🇷 155.103.131.36

🇻🇳 125.212.248.44

🇭🇰 118.193.39.103

🇨🇳 114.55.179.151

🇮🇩 103.112.245.85

🇵🇱 91.196.161.43

🇳🇱 91.92.42.34

🇩🇪 62.54.176.203