JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.235.99.14

191.235.99.14 was found in our database!

This IP was reported 321 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft do Brasil Imp. e Com. Software e Video G
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.235.99.14

Whois 191.235.99.14

IP Abuse Reports for 191.235.99.14:

This IP address has been reported a total of 321 times from 269 distinct sources. 191.235.99.14 was first reported on May 29th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 ip4.tw	2026-05-29 21:57:01 (5 days ago)	Malicious web scan	Hacking Web App Attack
🇫🇷 Thibault Millant	2026-05-29 21:55:31 (5 days ago)	191.235.99.14 - - [29/May/2026:21:55:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 191.235.99.14 - - [29/May/2026:21:55:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Brute-Force Exploited Host SSH
🇬🇧 Swiptly	2026-05-29 21:48:23 (5 days ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇨🇭 backslash	2026-05-29 21:42:02 (5 days ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
Anonymous	2026-05-29 21:30:41 (5 days ago)		Web App Attack
🇳🇱 vaddilyin	2026-05-29 21:25:35 (5 days ago)	{"ClientAddr":"191.235.99.14:16260","ClientHost":"191.235.99.14","ClientPort":"16260","ClientUsernam ... show more {"ClientAddr":"191.235.99.14:16260","ClientHost":"191.235.99.14","ClientPort":"16260","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":35052,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":35052,"RequestAddr":"browserless.vdkln.com","RequestContentSize":0,"RequestCount":34188,"RequestHost":"browserless.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-content/plugins/hellopress/wp_filemanager.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-05-29T21:25:33.808741904Z","StartUTC":"2026-05-29T21:25:33.808741904Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-05-29T21:25:33Z"} {"ClientAddr":"191.235.99.14:16260","ClientHost":"191.235.99.14","ClientPort":"16260","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":51257,"GzipRatio":0,"OriginContentSize":0, ... show less	Web App Attack
Anonymous	2026-05-29 21:21:00 (5 days ago)	wp admin page access attempt ...	Hacking Web App Attack
🇦🇹 vikal	2026-05-29 21:14:44 (5 days ago)	191.235.99.14 - - [29/May/2026:23:14:43 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 191.235.99.14 - - [29/May/2026:23:14:43 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Brute-Force SSH
🇩🇪 strxmpp	2026-05-29 21:08:25 (5 days ago)	191.235.99.14 - - [29/May/2026:23:08:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 191.235.99.14 - - [29/May/2026:23:08:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 484 "-" "-" ... show less	Bad Web Bot
🇺🇸 almazick	2026-05-29 21:08:18 (5 days ago)	Fail2Ban jail window on srv1.windowrepair.us banned 191.235.99.14 after 1 attempts	Bad Web Bot Web App Attack
🇩🇪 Hugopvigo	2026-05-29 21:02:23 (5 days ago)	"2026-05-29 21:02:23+00:00 191.235.99.14 IP con score alto (100) detectada en el log."	Brute-Force SSH
Anonymous	2026-05-29 21:00:53 (5 days ago)	WordPress plugin direct access attempt: 191.235.99.14 - - [29/May/2026:22:00:53 +0100] "GET /wp-con ... show more WordPress plugin direct access attempt: 191.235.99.14 - - [29/May/2026:22:00:53 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 234 "-" "Unknown" show less	Hacking Web App Attack
🇫🇷 900cm	2026-05-29 20:54:31 (5 days ago)	[Fri May 29 22:54:30.009786 2026] [php7:error] [pid 1711294:tid 1711294] [client 191.235.99.14:8720] ... show more [Fri May 29 22:54:30.009786 2026] [php7:error] [pid 1711294:tid 1711294] [client 191.235.99.14:8720] script '/var/www/nextcloud/x.php' not found or unable to stat [Fri May 29 22:54:30.406526 2026] [php7:error] [pid 1711294:tid 1711294] [client 191.235.99.14:8720] script '/var/www/nextcloud/wpconf.php' not found or unable to stat [Fri May 29 22:54:30.814106 2026] [php7:error] [pid 1711294:tid 1711294] [client 191.235.99.14:8720] script '/var/www/nextcloud/aaf.php' not found or unable to stat ... show less	Port Scan Brute-Force SSH
🇺🇸 vanguardm	2026-05-29 20:50:04 (5 days ago)	Automated report: 202 events detected. Types: web-attack	Web App Attack
🇫🇷 largo-it.net	2026-05-29 20:48:28 (5 days ago)	May 29 22:48:24 vps-9f3cdc33 haproxy[35280]: 191.235.99.14:29530 [29/May/2026:22:48:24.926] www_fron ... show more May 29 22:48:24 vps-9f3cdc33 haproxy[35280]: 191.235.99.14:29530 [29/May/2026:22:48:24.926] www_frontend~ imei1_cluster/imei1_https 0/0/5/12/17 404 1196 - - ---- 58/7/0/0/0 0/0 "GET //wp-content/BypassBest.php HTTP/1.1" May 29 22:48:25 vps-9f3cdc33 haproxy[35280]: 191.235.99.14:29530 [29/May/2026:22:48:25.422] www_frontend~ imei1_cluster/imei1_https 0/0/5/12/17 404 1196 - - ---- 58/7/0/0/0 0/0 "GET /wp-content/ HTTP/1.1" May 29 22:48:25 vps-9f3cdc33 haproxy[35280]: 191.235.99.14:29530 [29/May/2026:22:48:25.919] www_frontend~ imei1_cluster/imei1_https 0/0/5/13/18 404 1196 - - ---- 58/7/0/0/0 0/0 "GET /simple.php HTTP/1.1" May 29 22:48:26 vps-9f3cdc33 haproxy[35280]: 191.235.99.14:29530 [29/May/2026:22:48:26.445] www_frontend~ imei1_cluster/imei1_https 0/0/4/15/19 404 1196 - - ---- 58/7/0/0/0 0/0 "GET /kj.php HTTP/1.1" May 29 22:48:26 vps-9f3cdc33 haproxy[35280]: 191.235.99.14:29530 [29/May/2026:22:48:26.974] www_frontend~ imei1_cluster/imei1_https 0/0/4/12/16 404 1196 - - ---- 58/7/0/0/ ... show less	Hacking Bad Web Bot Web App Attack

Showing 76 to 90 of 321 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:19f0:6801:179f:5400:6ff:fe29:c2b3

🇩🇪 213.209.159.236

🇷🇴 80.94.92.177

🇫🇷 54.38.241.200

🇮🇳 49.43.161.142

🇭🇰 8.218.142.110

🇹🇼 198.235.24.90

🇩🇪 178.104.222.175

🇻🇳 103.186.101.237

🇨🇳 36.33.167.165

🇬🇧 35.203.211.22

🇨🇳 218.78.131.90

🇧🇷 205.210.31.233

🇨🇱 186.103.188.94

🇫🇷 173.212.228.191

🇺🇸 147.185.132.151

🇺🇸 143.198.99.129

🇨🇦 140.228.21.153

🇸🇾 129.224.206.46

🇩🇪 89.58.10.55