AbuseIPDB » 65.49.1.204
65.49.1.204 was found in our database!
This IP was reported 14,051 times. Confidence of Abuse is 100%: ?
| ISP | The Shadowserver Foundation, Inc. |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS6939 |
| Hostname(s) |
204.0-24.1.49.65.in-addr.arpa scan-76-02.shadowserver.io |
| Domain Name | shadowserver.org |
| Country | 🇺🇸 United States of America |
| City | San Francisco, California |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 65.49.1.204:
This IP address has been reported a total of 14,051 times from 520 distinct sources. 65.49.1.204 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 MPL |
tcp/5094 (2 or more attempts)
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/7900
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-21 08:19:42 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Telnet IoT Attack)
|
Brute-Force Port Scan IoT Targeted | ||
| 🇳🇱 VMHeaven.io |
Blocked by UFW [58888/tcp]
Source port: 60721
TTL: 238
Packet length: 40
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/58888
|
Port Scan | ||
| 🇧🇬 MazenHost |
1787296005 - 08/21/2026 09:06:45 Host: 65.49.1.204/65.49.1.204 Port: 1080 TCP Blocked
...
|
Port Scan | ||
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
|
Port Scan | ||
| 🇩🇪 iNetWorker |
firewall-block, port(s): 2404/tcp
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/2404 (2 or more attempts)
|
Port Scan | ||
| 🇩🇪 onkeltom |
Unauthorized connection attempts
|
Brute-Force Hacking | ||
| 🇨🇦 celestialcity |
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/5080 (2 or more attempts)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-21 04:35:02 UTC Unauthorized activity to TCP port 8088. Web App
|
Port Scan Web App Attack | ||
| 🇺🇸 donarev419 |
Connection to port 9200 with data transfer.
Data preview:
|
Port Scan Hacking |
Showing 1 to 15 of 14051 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩