JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.56.107.244

14.56.107.244 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.56.107.244

Whois 14.56.107.244

IP Abuse Reports for 14.56.107.244:

This IP address has been reported a total of 15 times from 12 distinct sources. 14.56.107.244 was first reported on February 20th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-03-07 00:36:28 (3 months ago)	Form spam	Web Spam
Anonymous	2026-03-05 18:30:20 (3 months ago)	Forum/form spam	Web Spam
🇵🇱 IROK	2026-03-04 23:03:24 (3 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇧🇪 cmbplf	2026-03-01 23:00:03 (3 months ago)	1015 limiting connections by zone (2w9h35m)	DDoS Attack
🇧🇪 cmbplf	2026-03-01 06:00:05 (3 months ago)	1820 limiting connections by zone (1h39m59s)	DDoS Attack
🇧🇬 cheatmaster.store	2026-02-26 05:58:40 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇵🇱 cheatmaster.store	2026-02-25 23:25:40 (3 months ago)	Automated report: This IP address has been identified as an active high anonymity/private proxy. Cla ... show more Automated report: This IP address has been identified as an active high anonymity/private proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple private proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. show less	Web Spam Port Scan Web App Attack
🇺🇸 windowsforum	2026-02-25 22:20:57 (3 months ago)	Spam bot registration: triggers=js_challenge, inv_honeypot, pow_fail, username=KareemG60	Web Spam Bad Web Bot
🇫🇷 masterguru	2026-02-25 21:40:12 (3 months ago)	wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_UR ... show more wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_URI. (88520-196) show less	Hacking
🇮🇳 Bharat Datacenter	2026-02-25 15:59:59 (3 months ago)	1: date=2026-02-25 time=21:28:05 eventtime=1772035085282381000 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-02-25 time=21:28:05 eventtime=1772035085282381000 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=14.56.107.244 srccountry="Korea, Republic of" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=103887 attack="tcp_syn_flood" srcport=39619 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 3151 > threshold 2000, repeats 103887 times since last log, pps 3182 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇸🇬 pusathosting.com	2026-02-25 03:06:02 (3 months ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 02:38:59 (3 months ago)	(mod_security) mod_security (id:217280) triggered by 14.56.107.244 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217280) triggered by 14.56.107.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 21:38:52.842147 2026] [security2:error] [pid 27678:tid 27678] [client 14.56.107.244:53227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.johnprimerano.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.johnprimerano.com"] [uri "/contact.html"] [unique_id "aZ5gvOvJ7ysbu8CVxVigYAAAAAA"], referer: http://www.johnprimerano.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-02-24 05:20:03 (3 months ago)	634 limiting connections by zone (14m59s)	DDoS Attack
🇩🇪 grassau.com	2026-02-22 18:33:38 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 14.56.107.244 (KR/South Korea/Gyeonggi- ... show more (mod_security) mod_security triggered on hostname [redacted] 14.56.107.244 (KR/South Korea/Gyeonggi-do/Uijeongbu-si/-) show less	SQL Injection
🇨🇦 1gz	2026-02-20 13:05:11 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/138.0 Mobile/15E148 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 192.109.200.78

🇳🇱 176.65.139.231

🇺🇸 172.253.221.22

🇲🇲 103.59.163.132

🇮🇩 69.5.0.120

🇩🇪 212.80.7.172

🇺🇸 199.217.104.101

🇳🇱 185.242.226.9

🇨🇴 179.1.14.66

🇫🇮 172.253.83.215

🇭🇰 172.253.6.19

🇺🇸 113.20.4.9

🇮🇩 103.172.42.35

🇮🇱 84.111.136.211

🇺🇸 172.253.213.19

🇫🇷 164.68.117.96

🇺🇸 107.170.40.174

🇮🇩 103.226.138.52

🇲🇾 101.99.81.96

🇺🇸 74.87.117.149