JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

14.191.167.27

Neutral Activity

Abuse confidence score ?

0% Low Risk

15 reports

11 reporters · latest 2 months ago

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

14.191.167.27 has been reported 15 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 14.191.167.27

This IP address has been reported a total of 15 times from 11 distinct sources. 14.191.167.27 was first reported on November 10th 2023, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-10 10:03:30 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇺 prologic	2026-06-12 22:45:42 (3 months ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
🇺🇸 canine.tools	2026-05-15 03:00:18 (4 months ago)	[fail2ban Auto Report] {"time":"2026-05-14T22:50:40.429785956-04:00","level":"INFO","source":{"funct ... show more [fail2ban Auto Report] {"time":"2026-05-14T22:50:40.429785956-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/search","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36","accept_language":"en-US,en;q=0.9","priority":"u=0, i","x-forwarded-for":"14.191.167.27","x-real-ip":"14.191.167.27","host":"searxng.canine.tools","check_result":{"name":"bot/aggressive-chinese-asns","rule":"DENY","weight":0}} ... show less	Bad Web Bot
🇨🇦 1gz	2026-05-07 02:01:26 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/uploads/2026/03/bluesparrow.avif UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-04-03 22:43:59 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-07 09:20:59 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 14.191.167.27 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 14.191.167.27 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 04:20:54.398141 2026] [security2:error] [pid 24548:tid 24548] [client 14.191.167.27:27791] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brickyardinn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brickyardinn.com"] [uri "/mail to: [email protected]"] [unique_id "aavt9txBgIhdA-ssLUqBWgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-02 20:03:20 (7 months ago)	(mod_security) mod_security (id:217210) triggered by 14.191.167.27 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:217210) triggered by 14.191.167.27 (static.vnpt.vn): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 15:03:12.798441 2026] [security2:error] [pid 2940999:tid 2940999] [client 14.191.167.27:6793] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|site44glass.online\|F\|4"] [data "GET http://site44glass.online HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "site44glass.online"] [uri "/"] [unique_id "aYEDAEXCm7N98gxAqk8H0AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-04 10:02:24 (9 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
Anonymous	2025-11-21 08:15:09 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-14 11:04:38 (10 months ago)	scanning http requests from known botnet	Web App Attack
🇪🇸 Global Cyber Police	2025-07-28 03:12:09 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
🇬🇧 Steve	2025-04-16 17:34:01 (1 year ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot
🇺🇸 ISPLtd	2023-11-12 05:35:40 (2 years ago)	Nov 11 22:35:10 SRC=14.191.167.27 PROTO=TCP SPT=2588 DPT=445 SYN Nov 11 22:35:39 SRC=14.191.167.27 P ... show more Nov 11 22:35:10 SRC=14.191.167.27 PROTO=TCP SPT=2588 DPT=445 SYN Nov 11 22:35:39 SRC=14.191.167.27 PROTO=TCP SPT=2588 DPT=445 Nov 11 22:35:39 SRC=14.191.167.27 PROTO=TCP SPT=2588 DPT=445 ... show less	Port Scan
🇩🇪 ISPLtd	2023-11-10 22:07:02 (2 years ago)	Nov 10 18:06:32 SRC=14.191.167.27 PROTO=TCP SPT=27012 DPT=445 SYN Nov 10 18:07:02 SRC=14.191.167.27 ... show more Nov 10 18:06:32 SRC=14.191.167.27 PROTO=TCP SPT=27012 DPT=445 SYN Nov 10 18:07:02 SRC=14.191.167.27 PROTO=TCP SPT=27012 DPT=445 Nov 10 18:07:02 SRC=14.191.167.27 PROTO=TCP SPT=27012 DPT=445 ... show less	Port Scan
🇺🇸 withfallback.com	2023-11-10 10:52:49 (2 years ago)	Attempted SMB login	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 103.173.139.2

🇪🇹 196.188.187.21

🇨🇦 108.162.240.7

🇧🇩 103.150.255.72

🇷🇺 89.109.233.181

🇳🇱 45.148.10.240

🇿🇦 41.56.151.186

🇵🇰 39.60.214.238

🇰🇿 37.99.1.24

🇬🇧 35.203.211.24

🇳🇱 34.32.179.8

🇺🇸 216.73.160.175

🇨🇾 193.19.204.77

🇦🇷 190.173.142.232

🇨🇳 182.124.151.116

🇺🇸 165.227.15.209

🇺🇸 147.185.132.72

🇺🇸 139.144.235.132

🇵🇭 139.135.241.243

🇮🇳 118.95.33.69