JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.191.125.17

14.191.125.17 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 0%: ?

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Hiep Duc, Da Nang City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.191.125.17

Whois 14.191.125.17

IP Abuse Reports for 14.191.125.17:

This IP address has been reported a total of 4 times from 3 distinct sources. 14.191.125.17 was first reported on May 4th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 DrLex0	2026-07-12 13:36:06 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 14.191.125.17 443 - [12/Jul/2026:13:36:06 +0000] "GET [redacted] HTTP/1.1" 200 7011 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇳🇱 DrLex0	2026-07-02 18:37:02 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 14.191.125.17 443 - [02/Jul/2026:18:37:02 +0000] "GET [redacted] HTTP/1.1" 503 6178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇦🇺 prologic	2026-06-13 21:54:58 (3 months ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-05-04 14:24:26 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 14.191.125.17 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 14.191.125.17 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 10:24:21.422104 2026] [security2:error] [pid 8438:tid 8438] [client 14.191.125.17:15202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|citystreetsalon.com\|F\|2"] [data ".fionnardesign.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "citystreetsalon.com"] [uri "/www.fionnardesign.com"] [unique_id "afisFRBvdff91iiTP_XHfwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 212.68.34.90

🇵🇱 176.53.159.197

🇺🇸 172.59.189.108

🇧🇬 46.10.56.170

🇳🇱 45.148.10.31

🇺🇸 20.171.192.139

🇰🇪 196.216.64.110

🇬🇧 193.176.29.19

🇺🇸 184.105.139.70

🇩🇪 154.217.203.84

🇰🇷 118.39.219.45

🇸🇪 81.236.211.54

🇰🇷 59.29.219.54

🇳🇱 45.148.10.157

🇨🇳 36.32.3.126

🇺🇸 34.10.117.36

🇺🇸 216.218.206.68

🇧🇷 201.28.237.90

🇭🇰 156.225.1.87

🇰🇷 118.194.249.8