JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.191.220.108

14.191.220.108 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 26%: ?

26%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.191.220.108

Whois 14.191.220.108

IP Abuse Reports for 14.191.220.108:

This IP address has been reported a total of 20 times from 16 distinct sources. 14.191.220.108 was first reported on March 11th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-18 11:33:50 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 10:16:24 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 14.191.220.108 (static.vnpt.vn): 1 in the last ... show more (mod_security) mod_security (id:240335) triggered by 14.191.220.108 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 06:16:20.257333 2026] [security2:error] [pid 26013:tid 26013] [client 14.191.220.108:28642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 14.191.220.108 (+1 hits since last alert)\|iostation.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iostation.com"] [uri "/xmlrpc.php"] [unique_id "aivcdPkX8i17oVn3vnuA4gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-11 01:07:51 (2 weeks ago)	14.191.220.108 - - [11/Jun/2026:03:07:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.c ... show more 14.191.220.108 - - [11/Jun/2026:03:07:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" 14.191.220.108 - - [11/Jun/2026:03:07:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 14.191.220.108 - - [11/Jun/2026:03:07:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" 14.191.220.108 - - [11/Jun/2026:03:07:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" 14.191.220.108 - - [11/Jun/2026:03:07:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.0; WordPress/6.1; http://site52556364.com" ... show less	Brute-Force Web App Attack
🇨🇦 1gz	2026-05-30 04:55:24 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/soni-malaj-zbulon-arsyen-e-ndarjes-me-flor-mumajesin/882436/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.3713.147 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2026-05-21 05:06:32 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-04-20 08:41:37 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-04-19 21:32:03 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇨🇦 1gz	2026-04-08 06:45:43 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/qendra-e-re-e-sigurise-kibernetike/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-02-03 11:33:29 (4 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack
Anonymous	2026-01-26 03:53:19 (5 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2025-12-29 18:52:32 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2025-11-25 10:30:01 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-17 15:15:47 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-14 17:35:16 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-09-06 09:03:01 (9 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 200.58.84.193

🇬🇧 193.32.209.243

🇲🇽 187.191.48.4

🇹🇭 110.77.131.229

🇫🇷 85.217.140.9

🇩🇪 83.135.191.158

🇮🇳 49.204.74.149

🇷🇴 2.57.121.25

🇩🇪 213.209.159.238

🇬🇧 195.206.182.201

🇬🇧 193.163.125.241

🇲🇾 180.73.200.163

🇹🇼 165.154.227.8

🇺🇸 162.216.150.214

🇺🇸 136.56.39.101

🇸🇬 118.139.164.171

🇨🇳 106.13.74.207

🇮🇳 103.216.145.2

🇰🇿 92.47.46.174

🇺🇸 65.49.1.34