JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 69.5.20.14

69.5.20.14 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 100%: ?

100%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇮🇩 Indonesia
City	Sewon, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 69.5.20.14

Whois 69.5.20.14

IP Abuse Reports for 69.5.20.14:

This IP address has been reported a total of 115 times from 81 distinct sources. 69.5.20.14 was first reported on September 14th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 uchat-ai.com	2026-09-16 15:58:09 (1 hour ago)	IP 69.5.20.14 在过去24小时内进行了 9 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data fo ... show more IP 69.5.20.14 在过去24小时内进行了 9 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found show less	Web App Attack
🇩🇪 ghostwarriors	2026-09-16 15:20:16 (1 hour ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 netman	2026-09-16 15:14:54 (1 hour ago)	HTTP: 69.5.20.14 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇱🇻 garmtech.com	2026-09-16 15:02:53 (2 hours ago)	Attempted access to sensitive endpoint (/.env.production) detected. Automated scan or unauthorized p ... show more Attempted access to sensitive endpoint (/.env.production) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇧🇪 sid3windr	2026-09-16 14:22:25 (2 hours ago)	GET /.env (Tarpitted for 1d15h8m27s, wasted 8.06MB)	Web App Attack
🇫🇷 arsonist	2026-09-16 13:35:31 (3 hours ago)	[fail2ban] 2026-09-16T13:35:30.378915+00:00 arson caddy[1890453]: {"level":"info","ts":1789565730.37 ... show more [fail2ban] 2026-09-16T13:35:30.378915+00:00 arson caddy[1890453]: {"level":"info","ts":1789565730.3788817,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"69.5.20.14","remote_port":"52964","client_ip":"69.5.20.14","proto":"HTTP/1.1","method":"GET","host":"panel.arson.gg","uri":"/.git/config","headers":{"User-Agent":["curl/7.68.0"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"panel.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000042279,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}} ... show less	Bad Web Bot
🇭🇰 sandra361	2026-09-16 13:28:18 (3 hours ago)	Port scan detected: 6 attempts across 1 port (443). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=69.5.20.1 ... show more Port scan detected: 6 attempts across 1 port (443). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=69.5.20.14 LEN=463 TOS=0x14 PREC=0x00 TTL=53 ID=47077 DF PROTO=TCP SPT=42128 DPT=443 WINDOW=64240 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇬🇧 Apache	2026-09-16 13:17:12 (3 hours ago)	(mod_security) mod_security (id:920350) triggered by 69.5.20.14 (ID/Indonesia/-): 5 in the last 300 ... show more (mod_security) mod_security (id:920350) triggered by 69.5.20.14 (ID/Indonesia/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇹🇭 thaizone.com	2026-09-16 13:11:06 (4 hours ago)	Hacking attempts against websites (D1) #2	Web App Attack Hacking
🇬🇧 thetomtaylor.co.uk	2026-09-16 13:08:00 (4 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-16 13:07:58 (4 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /config.yaml \| UA: Googlebot/2.1 (+http://www.google.com/bot.html) \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 jormaster3k	2026-09-16 11:26:07 (5 hours ago)	Attack against Apache (too many 404s)	Web App Attack
🇧🇷 ufn.edu.br	2026-09-16 11:01:05 (6 hours ago)	[Wed Sep 16 08:01:04.975987 2026] [access_compat:error] [pid 8304] [client 69.5.20.14:50766] AH01797 ... show more [Wed Sep 16 08:01:04.975987 2026] [access_compat:error] [pid 8304] [client 69.5.20.14:50766] AH01797: client denied by server configuration: /var/www/html/alicloud.php [Wed Sep 16 08:01:04.977916 2026] [access_compat:error] [pid 15771] [client 69.5.20.14:50764] AH01797: client denied by server configuration: /var/www/html/credentials.php [Wed Sep 16 08:01:04.983062 2026] [access_compat:error] [pid 1426] [client 69.5.20.14:50758] AH01797: client denied by server configuration: /var/www/html/oss.php ... show less	Exploited Host Web App Attack
🇩🇪 loveprod	2026-09-16 09:04:20 (8 hours ago)	69.5.20.14 - - [16/Sep/2026:12:04:19 +0300] "GET /.env HTTP/1.1" 403 5766 "-" "Mozilla/5.0 (compatib ... show more 69.5.20.14 - - [16/Sep/2026:12:04:19 +0300] "GET /.env HTTP/1.1" 403 5766 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.5.20.14 - - [16/Sep/2026:12:04:19 +0300] "GET /.env.production HTTP/1.1" 403 5764 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇲🇾 Rizzy	2026-09-16 09:02:43 (8 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 220.241.0.1

🇷🇺 178.251.142.166

🇻🇳 113.176.85.112

🇺🇸 66.132.186.254

🇫🇮 65.21.197.13

🇺🇸 43.224.66.166

🇸🇬 43.156.243.208

🇨🇳 36.134.96.76

🇳🇬 197.253.54.22

🇸🇬 175.156.127.127

🇦🇪 165.154.12.175

🇮🇩 103.162.1.80

🇹🇼 101.13.4.120

🇷🇴 92.118.39.71

🇪🇬 82.129.133.188

🇬🇧 51.195.183.254

🇬🇧 51.195.183.242

🇫🇷 5.39.10.241

🇨🇳 220.189.209.18

🇺🇸 195.184.76.49