JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.191.163.212

14.191.163.212 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 2%: ?

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Cau Dien, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.191.163.212

Whois 14.191.163.212

IP Abuse Reports for 14.191.163.212:

This IP address has been reported a total of 9 times from 8 distinct sources. 14.191.163.212 was first reported on February 24th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-07-05 12:58:34 (2 weeks ago)	[Askari] \| country=VN \| ASN=VNPT Corp \| Behavior: Slow-read attack	Bad Web Bot DDoS Attack
🇫🇷 bigorre.org	2026-04-02 15:27:28 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 Sklurk	2026-01-30 06:47:40 (5 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-24 16:19:47 (6 months ago)	(mod_security) mod_security (id:225080) triggered by 14.191.163.212 (static.vnpt.vn): 1 in the last ... show more (mod_security) mod_security (id:225080) triggered by 14.191.163.212 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 11:19:43.919222 2025] [security2:error] [pid 26170:tid 26170] [client 14.191.163.212:22595] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.cffragrances.iee-usa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cffragrances.iee-usa.com"] [uri "/wp-includes/js/tinymce/plugins/wpgallery/img/"] [unique_id "aUwSn7WxSSI3IpIvpJaGyQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 21:06:45 (8 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-15 12:06:56 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-03 20:53:44 (8 months ago)	[Tue Nov 04 03:53:39.647967 2025] [security2:error] [pid 2633905:tid 140237356275392] [client 14.191 ... show more [Tue Nov 04 03:53:39.647967 2025] [security2:error] [pid 2633905:tid 140237356275392] [client 14.191.163.212:19423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/80-klimatologi/prakiraan-klimatologi/index.php/prakiraan-bulanan/561-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur-tahun-2017 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/80-klimatologi/prakiraan-klimatologi/ind ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-09-02 14:03:01 (10 months ago)	Attacks with Bad user agents	Hacking
🇺🇸 ISPLtd	2024-02-24 07:51:41 (2 years ago)	Feb 24 00:51:10 SRC=14.191.163.212 PROTO=TCP SPT=8672 DPT=445 SYN Feb 24 00:51:40 SRC=14.191.163.212 ... show more Feb 24 00:51:10 SRC=14.191.163.212 PROTO=TCP SPT=8672 DPT=445 SYN Feb 24 00:51:40 SRC=14.191.163.212 PROTO=TCP SPT=8672 DPT=445 Feb 24 00:51:40 SRC=14.191.163.212 PROTO=TCP SPT=8672 DPT=445 ... show less	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 88.147.30.59

🇨🇦 85.217.149.49

🇩🇪 69.5.169.38

🇳🇱 45.150.79.142

🇺🇸 205.210.31.102

🇺🇸 147.185.132.112

🇨🇳 123.54.215.74

🇮🇩 103.122.66.186

🇰🇿 91.201.216.61

🇸🇬 43.128.111.31

🇧🇷 191.235.102.147

🇲🇳 180.149.125.229

🇺🇸 156.232.13.161

🇫🇷 91.231.89.235

🇬🇧 81.19.219.194

🇧🇬 78.128.113.74

🇺🇸 49.51.47.162

🇷🇺 46.44.40.82

🇳🇱 45.148.10.141

🇺🇸 23.239.11.131