JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.49.1.192

65.49.1.192 was found in our database!

This IP was reported 23,862 times. Confidence of Abuse is 100%: ?

100%

ISP	The Shadowserver Foundation, Inc.
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	192.0-24.1.49.65.in-addr.arpa scan-75-00.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.49.1.192

Whois 65.49.1.192

IP Abuse Reports for 65.49.1.192:

This IP address has been reported a total of 23,862 times from 945 distinct sources. 65.49.1.192 was first reported on February 20th 2025, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 donarev419	2026-08-21 07:05:47 (11 minutes ago)	Connection to port 2031 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:2031 ... show more Connection to port 2031 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:2031 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl show less	Port Scan Hacking
🇩🇪 SiyCah	2026-08-21 06:00:04 (1 hour ago)	65.49.1.192 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wa ... show more 65.49.1.192 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 184B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇭🇰 sandra361	2026-08-21 05:20:16 (1 hour ago)	Port scan detected: 6 attempts across 1 port (11453). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=65.49.1 ... show more Port scan detected: 6 attempts across 1 port (11453). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=65.49.1.192 LEN=40 TOS=0x14 PREC=0x00 TTL=51 ID=9106 DF PROTO=TCP SPT=55470 DPT=11453 WINDOW=42340 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇧🇷 diego	2026-08-21 04:54:21 (2 hours ago)	[rede-top188] 08/21/2026-01:54:21.819266, 65.49.1.192, Protocol: 6, ET DROP Dshield Block Listed Sou ... show more [rede-top188] 08/21/2026-01:54:21.819266, 65.49.1.192, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
Anonymous	2026-08-21 04:43:14 (2 hours ago)	Blocked by firewall on hugin [8015/tcp] \| Rule: Blocklist \| SPT: 52462 \| TTL: 241 \| LEN: 40 \| TOS: 0 ... show more Blocked by firewall on hugin [8015/tcp] \| Rule: Blocklist \| SPT: 52462 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-08-21 04:26:21 (2 hours ago)	Connection to port 25 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:25 Use ... show more Connection to port 25 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:25 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) Ap show less	Port Scan Hacking
🇺🇸 sefinek.net	2026-08-21 04:25:57 (2 hours ago)	Blocked by UFW on NY01 [25/tcp] \| SPT: 47565 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on NY01 [25/tcp] \| SPT: 47565 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Email Spam
🇺🇸 RAP	2026-08-21 04:25:24 (2 hours ago)	2026-08-21 04:25:24 UTC Unauthorized activity to TCP port 25.	Port Scan
🇺🇸 SSP	2026-08-21 04:15:36 (3 hours ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 20 Unique Ports: 52 Destination Ports: , 8070, 6081, 800, 88, 85, 9643, 6000, 51200, 4080, 4433, 8111, 50070, 9999, 9000, 9990, 7900, 18789, 9090, 23656, 8123, 8040, 65422, 50075, 2375, 65443, 811, 6516, 2096, 2095, 33443, 4840, 8013, 10000, 31337, 11434, 445, 8090, 4369, 61617, 8030, 240 First Seen: 2026-08-13 04:00 UTC Last Seen: 2026-08-21 04:15 UTC show less	Port Scan
🇺🇸 MPL	2026-08-21 04:13:15 (3 hours ago)	tcp port scan (8 or more attempts)	Port Scan
🇩🇪 andorin	2026-08-21 04:05:43 (3 hours ago)	SSH/Telnet honeypot (endlessh) on habith.eu: 1 connection attempts trapped, total tarpit time 20s. A ... show more SSH/Telnet honeypot (endlessh) on habith.eu: 1 connection attempts trapped, total tarpit time 20s. Automated report. show less	Port Scan Brute-Force SSH
🇺🇸 donarev419	2026-08-21 03:52:18 (3 hours ago)	Connection to port 6443 with data transfer. Data preview:	Port Scan Hacking
🇦🇺 LiftUp Hosting	2026-08-21 02:39:58 (4 hours ago)	Honeypot hit: HTTP/1.1 request on 11453 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) Gecko/200 ... show more Honeypot hit: HTTP/1.1 request on 11453 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) Gecko/20060609 Firefox/123.0esr Accept: / Accept-Encoding: gzip; 11453 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 donarev419	2026-08-21 02:21:10 (4 hours ago)	Connection to port 13443 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 MPL	2026-08-21 02:14:56 (5 hours ago)	tcp/4646 (3 or more attempts)	Port Scan

Showing 1 to 15 of 23862 reports

1
2
3
4
5
6
7
8
9
10
...
1590
1591
›

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.167

🇺🇸 66.132.172.116

🇩🇪 31.70.85.152

🇳🇱 5.61.209.44

🇸🇪 171.25.158.47

🇨🇳 111.113.89.39

🇬🇧 104.252.209.248

🇷🇺 78.37.7.109

🇺🇸 66.132.186.228

🇸🇬 43.160.241.129

🇹🇼 198.235.24.46

🇨🇳 183.239.20.236

🇧🇷 179.185.18.67

🇺🇸 170.106.84.136

🇺🇸 143.198.134.9

🇾🇹 92.142.199.42

🇺🇸 66.132.186.180

🇺🇸 65.49.1.122

🇺🇸 64.207.185.5

🇺🇸 12.156.67.18