This IP address has been reported a total of
25,556
times from
964 distinct
sources.
65.49.1.122 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
firewall port scanning detected. 2 or more observation(s) from 2026-08-23T14:05:28.000Z through 2026 ...
show morefirewall port scanning detected. 2 or more observation(s) from 2026-08-23T14:05:28.000Z through 2026-08-23T14:05:28.000Z.
show less
Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH
• Client: GET / H ...
show moreHoneypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH
• Client: GET / HTTP/1.1
show less
SSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoin ...
show moreSSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoint, behavior consistent with automated SSH scanning or brute-force reconnaissance.
show less
Blocked by UFW on amperetwo [2083/tcp]
Source port: 52169
TTL: 236
Packet length: 40
TOS: 0x00
This ...
show moreBlocked by UFW on amperetwo [2083/tcp]
Source port: 52169
TTL: 236
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Connection to port 8899 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155:8899
...
show moreConnection to port 8899 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155:8899
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc).
Family fingerprin ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/6080 (novnc).
Family fingerprint: vnc-scanner
Commands captured:
$ http:
show less
Honeypot [fra-de-honeypot]: Unauthorized traffic (221 bytes of payload); 61617 [1] TCP
Reported by D ...
show moreHoneypot [fra-de-honeypot]: Unauthorized traffic (221 bytes of payload); 61617 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less