JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.232.196.14

191.232.196.14 was found in our database!

This IP was reported 263 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft do Brasil Imp. e Com. Software e Video G
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.232.196.14

Whois 191.232.196.14

IP Abuse Reports for 191.232.196.14:

This IP address has been reported a total of 263 times from 213 distinct sources. 191.232.196.14 was first reported on July 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-03 11:09:23 (1 hour ago)	4.309 requests from abuseipdb.com blacklisted IP (7mos12h12m)	Brute-Force Bad Web Bot
🇬🇧 djboddington	2026-07-03 09:02:58 (3 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇫🇷 Guardian	2026-07-03 08:48:39 (3 hours ago)	Scanning for installed WordPress and vulnerabilities 191.232.196.14 [03/Jul/2026:08:48:38] "GET /wp- ... show more Scanning for installed WordPress and vulnerabilities 191.232.196.14 [03/Jul/2026:08:48:38] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" show less	Port Scan Web App Attack
Anonymous	2026-07-03 08:36:11 (4 hours ago)	Bulk report from WAF Auto-Blocker Dashboard	Brute-Force SSH
🇲🇾 Rizzy	2026-07-03 07:32:18 (5 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 LotPhantom	2026-07-03 06:24:01 (6 hours ago)	191.232.196.14 - - [03/Jul/2026:06:23:21 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 191.232.196.14 - - [03/Jul/2026:06:23:21 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 9 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-03 05:06:49 (7 hours ago)	Trying to access config files	Web App Attack
Anonymous	2026-07-03 03:46:21 (9 hours ago)		Bad Web Bot
🇩🇪 BlueWire Hosting	2026-07-03 03:01:02 (9 hours ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot
Anonymous	2026-07-03 02:40:39 (10 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 ghostwarriors	2026-07-03 01:21:04 (11 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-07-02 21:12:08 (15 hours ago)	{"level":"info","ts":1783026560.6338139,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1783026560.6338139,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"191.232.196.14","remote_port":"7415","client_ip":"191.232.196.14","proto":"HTTP/1.1","method":"GET","host":"q4qt.status.updown.io","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000074872,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://q4qt.status.updown.io/wp-content/plugins/hellopress/wp_filemanager.php"]}} {"level":"info","ts":1783026566.5823843,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"191.232.196.14","remote_port":"7459","client_ip":"191.232.196.14","proto":"HTTP/1.1","method":"GET","host":"q4qt.status.updown.io","uri":"/this_is_a_new_hello_world.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000080864,"size":0,"status":308,"resp_headers":{"Location":["https://q4qt.status.updown ... show less	DDoS Attack Web App Attack
Anonymous	2026-07-02 20:45:02 (16 hours ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇩🇪 4server	2026-07-02 20:06:23 (16 hours ago)	[ThuJul0222:06:17.6746442026][security2:error][pid3412023:tid3412126][client191.232.196.14:0]ModSecu ... show more [ThuJul0222:06:17.6746442026][security2:error][pid3412023:tid3412126][client191.232.196.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"modules/mod_simplefileuploadv1\\\\\\\\.3\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"640\"][id\"390746\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:KnownVulnerableJoomlaSimpleFileUploadv1.3Accessblocked\"][hostname\"autodiscover.assistenza-pc-mac-ticino.ch\"][uri\"/modules/mod_simplefileuploadv1.3/elements/filemanager.php\"][unique_id\"akbEuVrWrYRRn_O6d7q_EAAAAQM\"] show less	Port Scan Brute-Force Web App Attack
🇳🇴 Abuse Buster	2026-07-02 16:45:05 (20 hours ago)	191.232.196.14 - - [02/Jul/2026:18:44:58 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 191.232.196.14 - - [02/Jul/2026:18:44:58 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 404 22 "-" "-" 191.232.196.14 - - [02/Jul/2026:18:44:59 +0200] "GET /this_is_a_new_hello_world.php HTTP/2.0" 404 22 "-" "-" 191.232.196.14 - - [02/Jul/2026:18:45:00 +0200] "GET /x.php HTTP/2.0" 404 22 "-" "-" 191.232.196.14 - - [02/Jul/2026:18:45:03 +0200] "GET /wss.php HTTP/2.0" 404 22 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 263 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.32.52.150

🇬🇧 198.244.168.73

🇧🇬 193.24.211.107

🇩🇪 54.37.74.179

🇺🇸 216.73.216.72

🇩🇪 213.209.159.241

🇨🇦 167.114.139.68

🇫🇷 164.68.118.218

🇵🇰 111.92.145.205

🇵🇱 83.219.248.100

🇳🇱 45.148.10.239

🇶🇦 37.211.189.238

🇰🇷 218.146.45.68

🇺🇸 185.238.231.117

🇧🇷 179.181.133.153

🇨🇳 113.215.189.194

🇨🇳 112.32.14.118

🇮🇳 103.242.232.165

🇺🇸 66.132.172.179

🇬🇧 54.38.147.98