This IP address has been reported a total of
9
times from
8 distinct
sources.
14.191.138.228 was first reported on
November 18th 2022 , and the most recent report was
3 days ago Indonesia
with 1
report.
The most common categories in these recent reports were:
Hacking
1
time;
Email Spam
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-22 09:58:20
(3 days ago)
[Thu Oct 22 16:58:19.643355 2026] [security2:error] [pid 97733:tid 139901295122112] [client 14.191.1 ...
show more
[Thu Oct 22 16:58:19.643355 2026] [security2:error] [pid 97733:tid 139901295122112] [client 14.191.138.228:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "atneOyawHV1xozJ6iAFO6wAAAMw"], referer https://www.bmkg.go.id/ [stak
...
show less
Email Spam
Hacking
🇫🇷
bigorre.org
2026-08-06 16:40:20
(2 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇨🇦
1gz
2026-08-04 19:01:10
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/real-madridi-trondit-arsenalin-kerkon-150-milione-euro-per-vinicius-jr/957885/
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3837.131 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇷🇴
INTEQ
2026-07-26 04:33:51
(2 months ago)
Web attack from 14.191.138.228
Web App Attack
2025-11-25 19:16:14
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-14 19:18:00
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇨🇭
backslash
2025-08-14 04:00:30
(1 year ago)
block ruleset honeypot detection from VN 94A4A313D6448382F283B457A9C419564BD9A72C
Bad Web Bot
🇩🇪
IP Analyzer
2023-02-08 10:01:22
(3 years ago)
Unauthorized connection attempt from IP address 14.191.138.228 on Port 445(SMB)
Port Scan
🇱🇹
NotACaptcha
2022-11-18 21:11:11
(3 years ago)
Unauthorised access (Nov 19 04:11) SRC=14.191.138.228 LEN=52 TTL=108 ID=11303 DF TCP DPT=445 WINDOW= ...
show more
Unauthorised access (Nov 19 04:11) SRC=14.191.138.228 LEN=52 TTL=108 ID=11303 DF TCP DPT=445 WINDOW=8192 SYN
show less
Port Scan
Showing 1 to
9
of 9 reports
