JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.172.254.198

14.172.254.198 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 47%: ?

47%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Ca Mau, Ca Mau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.172.254.198

Whois 14.172.254.198

IP Abuse Reports for 14.172.254.198:

This IP address has been reported a total of 25 times from 10 distinct sources. 14.172.254.198 was first reported on August 13th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 dyln	2026-09-20 07:58:46 (3 days ago)	Dyls honeypot brute-force: SMB (16 total hits)	Brute-Force
🇫🇷 sthoyer.de	2026-09-17 03:33:07 (6 days ago)	Sep 17 05:33:06 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Sep 17 05:33:06 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=14.172.254.198 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=8749 DF PROTO=TCP SPT=60766 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-14 03:08:08 (1 week ago)	denied SMB access attempt. destination port 445.	Port Scan Hacking
🇺🇸 drewf.ink	2026-09-10 09:47:48 (1 week ago)	[09:47] Triggered SMB honeypot. Type: SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0 ... show more [09:47] Triggered SMB honeypot. Type: SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking
🇫🇷 sthoyer.de	2026-09-08 22:01:12 (2 weeks ago)	Sep 9 00:01:11 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Sep 9 00:01:11 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=14.172.254.198 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=17259 DF PROTO=TCP SPT=45248 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-09-08 18:15:30 (2 weeks ago)	Sep 8 20:15:29 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Sep 8 20:15:29 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=14.172.254.198 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=17207 DF PROTO=TCP SPT=55684 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 drewf.ink	2026-09-08 06:44:29 (2 weeks ago)	[06:44] Triggered SMB honeypot. Type: SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0 ... show more [06:44] Triggered SMB honeypot. Type: SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking
🇫🇷 vtchost.com	2026-09-06 01:59:05 (2 weeks ago)	portscan ...	Port Scan
🇫🇷 EvoX	2026-09-03 21:01:50 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 46856) to a pas ... show more 🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 46856) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇺🇸 MPL	2026-09-01 11:49:25 (3 weeks ago)	tcp/445	Port Scan
🇦🇺 dyln	2026-08-26 02:47:47 (4 weeks ago)	Dyls honeypot brute-force: SMB (12 total hits)	Brute-Force
Anonymous	2026-08-25 16:36:19 (4 weeks ago)	denied traffic to a honeypot network. destination port 445.	Port Scan Hacking
🇫🇷 sthoyer.de	2026-08-25 14:22:03 (4 weeks ago)	Aug 25 16:22:02 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Aug 25 16:22:02 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=14.172.254.198 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=15466 DF PROTO=TCP SPT=46868 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 zulzeen	2026-08-25 11:51:39 (4 weeks ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)	Hacking Brute-Force
🇳🇱 Tsumugi Kotobuki	2026-08-21 13:26:03 (1 month ago)	Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 111 \| Len: 52B \| Win: ... show more Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 111 \| Len: 52B \| Win: 8192(1) \| rDNS: static.vnpt.vn \| F2B/ufw-honeypot@2026-08-21T13:26:03Z show less	Port Scan Hacking

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 185.255.91.121

🇮🇳 139.59.86.13

🇧🇪 34.14.25.199

🇷🇺 178.178.194.136

🇫🇷 173.249.52.138

🇿🇲 165.56.182.71

🇭🇰 156.225.1.86

🇺🇸 147.203.255.20

🇨🇳 144.52.118.178

🇮🇩 103.155.47.50

🇩🇪 87.163.48.232

🇩🇪 87.106.32.238

🇪🇸 79.154.64.196

🇺🇸 45.63.4.69

🇲🇦 41.249.29.216

🇧🇪 34.62.82.165

🇬🇧 5.252.83.247

🇸🇬 217.216.38.222

🇷🇺 154.83.196.237

🇱🇻 80.89.74.20