JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.54.56.14

1.54.56.14 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 84%: ?

84%

ISP	FPT Telecom Company
Usage Type	Fixed Line ISP
ASN	AS18403
Domain Name	fpt.com
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 1.54.56.14

Whois 1.54.56.14

IP Abuse Reports for 1.54.56.14:

This IP address has been reported a total of 17 times from 15 distinct sources. 1.54.56.14 was first reported on June 19th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-06-22 20:23:17 (1 hour ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 18:08:27 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 1.54.56.14 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 1.54.56.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 14:08:12.763818 2026] [security2:error] [pid 19035:tid 19035] [client 1.54.56.14:56105] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|daisydoesoap.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daisydoesoap.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajl6DG2L14XOatYnYeS7kAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 15:43:36 (6 hours ago)	(mod_security) mod_security (id:225170) triggered by 1.54.56.14 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 1.54.56.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 11:43:20.373584 2026] [security2:error] [pid 27313:tid 27313] [client 1.54.56.14:52907] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|americanexportimport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "americanexportimport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajlYGNirvIB6_22mapjzBwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-06-22 12:02:37 (9 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇫🇷 dynamix	2026-06-22 09:16:31 (12 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-22 00:00:49 (21 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 mccsoft.io	2026-06-21 23:01:06 (22 hours ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-06-21 21:29:01 (1 day ago)	Multiple WAF Violations	Web App Attack
🇩🇪 LRob.fr	2026-06-21 17:30:20 (1 day ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-06-21 06:13:22 (1 day ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-06-20 18:54:40 (2 days ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=onar-pension.gr; logs=/var/log/httpd/domains/onar-pension.gr.l ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=onar-pension.gr; logs=/var/log/httpd/domains/onar-pension.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-20 16:13:55 (2 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC VN/Vietnam/-	Web App Attack
Anonymous	2026-06-20 05:21:15 (2 days ago)	1.54.56.14 - - [20/Jun/2026:13:21:14 +0800] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Win ... show more 1.54.56.14 - - [20/Jun/2026:13:21:14 +0800] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇲🇽 impra	2026-06-20 03:13:52 (2 days ago)	Detected 15 connection attempts.	Port Scan Hacking Web App Attack
🇪🇸 masterguru	2026-06-19 14:11:39 (3 days ago)	(xmlrpc) Failed xmlrpc access from 1.54.56.14 (VN/Vietnam/-): 5 in the last 3600 secs (0-122)	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 196.196.150.4

🇺🇸 192.81.229.181

🇹🇼 165.154.227.158

🇨🇳 110.249.202.14

🇺🇸 107.167.34.125

🇹🇷 78.187.206.159

🇺🇸 48.217.187.105

🇧🇷 45.205.1.73

🇳🇱 45.148.10.152

🇺🇸 44.193.115.232

🇮🇪 3.252.122.197

🇫🇷 2001:41d0:33a:a00::408

🇹🇼 198.235.24.18

🇳🇬 152.32.141.176

🇭🇰 152.32.132.230

🇵🇰 115.186.183.74

🇮🇩 103.210.250.198

🇺🇸 91.230.168.247

🇺🇸 75.138.40.135

🇮🇳 49.207.40.162