JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.191.165.69

14.191.165.69 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 4%: ?

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.191.165.69

Whois 14.191.165.69

IP Abuse Reports for 14.191.165.69:

This IP address has been reported a total of 24 times from 16 distinct sources. 14.191.165.69 was first reported on June 10th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-06-15 01:54:00 (1 day ago)	Scanning for port/service exploits on tpc-005.mach3builders.nl	Port Scan Hacking
Anonymous	2026-04-12 00:39:33 (2 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-03-19 04:32:02 (2 months ago)	invalid/bad user agent - possible botnet ...	Bad Web Bot
🇨🇭 backslash	2026-01-15 01:10:15 (5 months ago)	block ruleset honeypot detection from VN 94A4A313D6448382F283B457A9C419564BD9A72C	Bad Web Bot
Anonymous	2025-11-20 14:33:35 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇦🇺 MAGIC	2025-10-08 01:35:47 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-30 07:21:36 (8 months ago)	(mod_security) mod_security (id:217210) triggered by 14.191.165.69 (static.vnpt.vn): 1 in the last 3 ... show more (mod_security) mod_security (id:217210) triggered by 14.191.165.69 (static.vnpt.vn): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 03:21:29.111672 2025] [security2:error] [pid 25473:tid 25473] [client 14.191.165.69:27297] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.dmasoftlab.com\|F\|4"] [data "GET http://www.dmasoftlab.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dmasoftlab.com"] [uri "/"] [unique_id "aNuE-WIwphl10fSmrxXzNAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pressler.pro	2025-09-24 00:42:38 (8 months ago)	Fail2ban - DDoS attack on woocommerce shop ...	DDoS Attack
🇺🇸 octageeks.com	2025-04-22 04:17:22 (1 year ago)	Wordpress malicious attack:[octausername]	Web App Attack
🇩🇪 sthoyer.de	2025-03-02 13:37:38 (1 year ago)	Mar 2 14:37:37 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b4:82:2 ... show more Mar 2 14:37:37 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b4:82:23:08:00 SRC=14.191.165.69 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=11136 DF PROTO=TCP SPT=20806 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-03-02 13:12:34 (1 year ago)	Port probe to tcp/445 (smb) [srv125]	Port Scan Hacking
🇳🇱 Study Bitcoin 🤗	2025-03-02 11:39:01 (1 year ago)	Port probe to tcp/445 (smb) [srv125]	Port Scan Hacking
🇩🇪 sthoyer.de	2025-03-02 10:46:59 (1 year ago)	Mar 2 11:46:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b4:82:2 ... show more Mar 2 11:46:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b4:82:23:08:00 SRC=14.191.165.69 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=514 DF PROTO=TCP SPT=1694 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Josef Matula	2024-11-20 04:46:42 (1 year ago)	-----> Jaxx Bauer secures last 24 Hours <----- - tried port 445 1 times -----> survived 7 Days To D ... show more -----> Jaxx Bauer secures last 24 Hours <----- - tried port 445 1 times -----> survived 7 Days To Die <----- - tried port 445 1 times show less	Port Scan
🇵🇱 nfsec.pl	2024-11-20 02:26:15 (1 year ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.117

🇯🇵 123.100.139.177

🇮🇳 122.186.91.50

🇨🇳 121.43.116.110

🇨🇳 121.41.170.8

🇺🇸 66.132.195.96

🇺🇸 66.132.195.65

🇺🇸 50.46.141.125

🇨🇳 49.69.113.133

🇨🇳 47.95.211.43

🇺🇸 35.164.107.89

🇲🇽 187.190.35.163

🇺🇸 165.154.36.225

🇸🇬 152.32.218.244

🇨🇳 121.199.161.125

🇨🇳 121.41.165.109

🇮🇳 117.250.250.2

🇵🇸 82.205.37.191

🇺🇸 67.215.241.112

🇺🇸 63.135.161.130