JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.235.99.14

191.235.99.14 was found in our database!

This IP was reported 321 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft do Brasil Imp. e Com. Software e Video G
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.235.99.14

Whois 191.235.99.14

IP Abuse Reports for 191.235.99.14:

This IP address has been reported a total of 321 times from 269 distinct sources. 191.235.99.14 was first reported on May 29th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-29 18:19:44 (5 days ago)	[Fri May 29 20:18:57.809961 2026] [php:error] [pid 2900386] [client 191.235.99.14:52090] script '/va ... show more [Fri May 29 20:18:57.809961 2026] [php:error] [pid 2900386] [client 191.235.99.14:52090] script '/var/www/html/8.php' not found or unable to stat [Fri May 29 20:19:42.456110 2026] [php:error] [pid 2900412] [client 191.235.99.14:52473] script '/var/www/html/about.php' not found or unable to stat [Fri May 29 20:19:42.456110 2026] [php:error] [pid 2900412] [client 191.235.99.14:52473] script '/var/www/html/about.php' not found or unable to stat [Fri May 29 20:19:42.870588 2026] [php:error] [pid 2900412] [client 191.235.99.14:52473] script '/var/www/html/admin.php' not found or unable to stat ... show less	Bad Web Bot
🇩🇪 psauxit	2026-05-29 18:10:14 (5 days ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
Anonymous	2026-05-29 18:03:28 (5 days ago)	[Fri May 29 20:03:24.200058 2026] [php:error] [pid 2900412] [client 191.235.99.14:24134] script '/va ... show more [Fri May 29 20:03:24.200058 2026] [php:error] [pid 2900412] [client 191.235.99.14:24134] script '/var/www/html/x.php' not found or unable to stat [Fri May 29 20:03:24.625908 2026] [php:error] [pid 2900412] [client 191.235.99.14:24134] script '/var/www/html/wpconf.php' not found or unable to stat [Fri May 29 20:03:25.505960 2026] [php:error] [pid 2900412] [client 191.235.99.14:24134] script '/var/www/html/aaf.php' not found or unable to stat [Fri May 29 20:03:26.937210 2026] [php:error] [pid 2900412] [client 191.235.99.14:24134] script '/var/www/html/tw0.php' not found or unable to stat [Fri May 29 20:03:27.376423 2026] [php:error] [pid 2900412] [client 191.235.99.14:24134] script '/var/www/html/htt.php' not found or unable to stat ... show less	Bad Web Bot
🇧🇬 Stoyko Stoykov	2026-05-29 18:02:58 (5 days ago)	191.235.99.14 - - [29/May/2026:21:02:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 191.235.99.14 - - [29/May/2026:21:02:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 Lezetho	2026-05-29 18:00:21 (5 days ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇩🇪 Lunix	2026-05-29 17:59:55 (5 days ago)		Brute-Force Web App Attack
🇬🇧 Apache	2026-05-29 17:59:08 (5 days ago)	(mod_security) mod_security (id:20000010) triggered by 191.235.99.14 (BR/Brazil/-): 5 in the last 30 ... show more (mod_security) mod_security (id:20000010) triggered by 191.235.99.14 (BR/Brazil/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇬🇧 pinguin	2026-05-29 17:50:49 (5 days ago)	Triggered Cloudflare WAF (linkMaze) from BR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from BR. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: /bel.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Hugopvigo	2026-05-29 17:49:36 (5 days ago)	[Fri May 29 19:49:34.932400 2026] [proxy_fcgi:error] [pid 2222547:tid 137218316277440] [client 191.2 ... show more [Fri May 29 19:49:34.932400 2026] [proxy_fcgi:error] [pid 2222547:tid 137218316277440] [client 191.235.99.14:43801] AH01071: Got error 'Primary script unknown' [Fri May 29 19:49:35.171414 2026] [proxy_fcgi:error] [pid 2222547:tid 137217729083072] [client 191.235.99.14:43801] AH01071: Got error 'Primary script unknown' [Fri May 29 19:49:35.404717 2026] [proxy_fcgi:error] [pid 2222547:tid 137217217390272] [client 191.235.99.14:43801] AH01071: Got error 'Primary script unknown' [Fri May 29 19:49:35.604714 2026] [proxy_fcgi:error] [pid 2222547:tid 137217225782976] [client 191.235.99.14:43801] AH01071: Got error 'Primary script unknown' ... show less	Hacking Brute-Force Web App Attack SSH
🇷🇺 OK	2026-05-29 17:49:22 (5 days ago)	HTTP/HTTPS	Hacking Web App Attack
🇳🇱 i-turnradio.nl	2026-05-29 17:45:31 (5 days ago)	2026-05-29 @ 19:45:31 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-05-29 @ 19:45:31 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 David Ferneding	2026-05-29 17:44:44 (5 days ago)	Blocked by UFW (TCP on 80) Source port: 42418 TTL: 115 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 42418 TTL: 115 Packet length: 52 TOS: 0x00 This report (for 191.235.99.14) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇦🇺 FireGuard Server	2026-05-29 17:40:03 (5 days ago)	Blocked by OPNsense firewall; 5 hits, proto=tcp, ports=443	Port Scan Hacking
🇳🇿 Antinson	2026-05-29 17:30:24 (5 days ago)	Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ... show more Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.) show less	Bad Web Bot
🇩🇪 DaleCooper	2026-05-29 17:29:02 (5 days ago)	191.235.99.14 - - [29/May/2026:19:28:20 +0200] "GET //cgi-bin/index.php HTTP/1.1" 404 139 "-" "-" 19 ... show more 191.235.99.14 - - [29/May/2026:19:28:20 +0200] "GET //cgi-bin/index.php HTTP/1.1" 404 139 "-" "-" 191.235.99.14 - - [29/May/2026:19:28:25 +0200] "GET //cgi-bin/admin.php HTTP/1.1" 404 139 "-" "-" ... show less	Brute-Force

Showing 121 to 135 of 321 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.108.147.76

🇮🇶 81.22.35.238

🇩🇪 69.5.169.3

🇺🇸 66.132.172.34

🇩🇪 47.245.135.78

🇬🇧 37.10.113.218

🇨🇳 221.234.36.123

🇺🇸 205.210.31.103

🇭🇰 199.45.154.119

🇺🇸 195.184.76.125

🇧🇷 177.198.104.230

🇳🇱 109.106.244.93

🇺🇸 91.230.168.215

🇺🇸 91.230.168.89

🇮🇹 91.80.152.183

🇱🇹 45.227.254.170

🇺🇸 32.218.110.75

🇰🇷 211.106.137.135

🇺🇸 205.210.31.85

🇹🇼 198.235.24.78