JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

14.191.180.19

Neutral Activity

Abuse confidence score ?

0% Low Risk

16 reports

14 reporters · latest 1 month ago

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Tuyen Quang, Tuyen Quang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

14.191.180.19 has been reported 16 times. The most recent report is from 1 month ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 14.191.180.19

This IP address has been reported a total of 16 times from 14 distinct sources. 14.191.180.19 was first reported on July 6th 2023, and the most recent report was 1 month ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-28 20:56:02 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-05-12 02:09:39 (4 months ago)	Fail2Ban - Wordpress brute-force ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 01:41:33 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 14.191.180.19 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 14.191.180.19 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 21:41:25.810091 2026] [security2:error] [pid 5454:tid 5454] [client 14.191.180.19:29143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.191.180.19 (+1 hits since last alert)\|sharawi-gum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sharawi-gum.com"] [uri "/xmlrpc.php"] [unique_id "agKFRb7QLbxLt8BSNNOAagAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-12 01:05:29 (4 months ago)	wordpress: XML-RPC metaWeblog.newPost attack	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-06 04:40:41 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 14.191.180.19 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 14.191.180.19 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 00:40:32.648335 2026] [security2:error] [pid 24217:tid 24217] [client 14.191.180.19:4005] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.191.180.19 (+1 hits since last alert)\|odinathletes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odinathletes.com"] [uri "/xmlrpc.php"] [unique_id "afrGQJCqyk0EOAV2U8AZ5gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-05-06 02:45:04 (4 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-05 02:08:43 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 14.191.180.19 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 14.191.180.19 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 22:08:35.806189 2026] [security2:error] [pid 9555:tid 9555] [client 14.191.180.19:1182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.191.180.19 (+1 hits since last alert)\|natickvillagerentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "natickvillagerentals.com"] [uri "/xmlrpc.php"] [unique_id "aflRI2fnonqR_KSaDDqPBQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-05 02:06:17 (4 months ago)	[redacted] 14.191.180.19 - - [05/May/2026:04:05:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 14.191.180.19 - - [05/May/2026:04:05:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site38630595.com" [redacted] 14.191.180.19 - - [05/May/2026:04:05:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 14.191.180.19 - - [05/May/2026:04:05:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 14.191.180.19 - - [05/May/2026:04:06:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 14.191.180.19 - - [05/May/2026:04:06:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇩🇪 abdubhai	2026-05-04 06:54:49 (4 months ago)	14.191.180.19 - - [04/May/2026:1 ...	Brute-Force
🇳🇱 ConsulHosting	2026-05-04 03:21:40 (4 months ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 applemooz	2026-05-04 02:11:24 (4 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-02-01 00:38:50 (7 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2025-11-13 22:09:18 (10 months ago)	Malicious activity detected	Hacking Web App Attack
🇪🇸 Global Cyber Police	2025-07-27 18:24:59 (1 year ago)	Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).	Port Scan Brute-Force Web App Attack
🇫🇷 oonux.net	2023-07-07 01:09:27 (3 years ago)	RouterOS: Scanning detected TCP 14.191.180.19:17785 > x.x.x.x:445	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.245.193.189

🇺🇸 162.216.150.17

🇱🇰 122.255.14.70

🇨🇳 118.196.119.108

🇱🇹 77.90.185.121

🇺🇸 74.249.197.34

🇩🇪 69.5.169.250

🇩🇪 64.89.163.180

🇳🇱 45.148.10.151

🇩🇪 31.56.24.50

🇺🇸 20.98.133.166

🇺🇦 195.211.255.68

🇳🇱 91.92.42.232

🇧🇬 83.97.115.19

🇩🇪 64.227.114.1

🇺🇸 64.62.197.64

🇬🇧 35.203.210.79

🇯🇵 34.85.78.17

🇳🇱 195.178.110.30

🇵🇹 185.153.151.170