209.14.28.166

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
16 reports
13 reporters · latest 1 hour ago
ISP
WIX NET DO BRASIL LTDA
Usage Type
Fixed Line ISP
ASN
AS267124
Hostname(s)
209-14-28-166.redevirtualnet.com.br
Domain Name
ufinet.com
Country
🇧🇷 Brazil
City
Barueri, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 2 🇩🇪 Germany 1
Most common categories Port Scan 3 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 RAP
2026-11-07 16:23:21 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇦🇺 LiftUp Hosting
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
🇺🇸 Axel
Blocked by UFW on MVI [23/tcp] | SPT: 39084 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
🇧🇷 chronos
Attempted unauthorized access to Telnet (port 23), likely brute force. | Port: 23 | Proto: TCP | Location: Brazil, Carapicuíba
Brute-Force Exploited Host Port Scan Hacking
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host
🇧🇾 sashan
2026-06-13T12:06:30.010556+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=209.14.28.166 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=35711 DF PROTO=TCP SPT=54376 DPT=23 WINDOW=28800 RES=0x00 SYN URGP=0 ...
Port Scan
🇧🇾 stroytrest
2026-06-07T12:44:05.611521+03:00 gate kernel: [1140044.778374] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=209.14.28.166 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=65520 DF PROTO=TCP SPT=55929 DPT=23 WINDOW=28800 RES=0x00 SYN URGP=0 ...
Port Scan
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host
🇺🇸 NetGuard
Brute-Force SSH
🇬🇧 PeravixGroup
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
IoT Targeted Brute-Force
🇨🇦 polycoda
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇧🇾 sashan
2026-02-16T19:16:40.615895+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=209.14.28.166 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=15345 DF PROTO=TCP SPT=60437 DPT=23 WINDOW=28800 RES=0x00 SYN URGP=0 ...
Port Scan
🇳🇱 exxos
Attacks with Bad user agents
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 169.58.189.78
🇬🇧 77.96.182.208
🇩🇪 209.38.244.245
🇨🇳 182.138.158.56
🇨🇱 148.227.67.219
🇬🇧 86.177.177.173
🇬🇧 82.13.95.224
🇬🇧 51.89.224.8
🇺🇸 34.197.70.90
🇹🇼 34.81.236.105
🇨🇳 14.116.172.42
🇨🇭 179.43.177.130
🇺🇸 165.154.206.250
🇻🇳 125.253.123.34
🇬🇧 82.14.248.23
🇬🇧 78.147.227.220
🇫🇮 65.21.44.205
🇩🇪 64.89.163.134
🇺🇸 50.17.69.241
🇬🇧 194.207.133.183
feedback