AbuseIPDB » 65.49.1.211
65.49.1.211 was found in our database!
This IP was reported 14,239 times. Confidence of Abuse is 100%: ?
| ISP | The Shadowserver Foundation, Inc. |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS6939 |
| Hostname(s) |
211.0-24.1.49.65.in-addr.arpa scan-76-09.shadowserver.io |
| Domain Name | shadowserver.org |
| Country | 🇺🇸 United States of America |
| City | San Francisco, California |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 65.49.1.211:
This IP address has been reported a total of 14,239 times from 502 distinct sources. 65.49.1.211 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 MPL |
tcp ports: 83,2082 (3 or more attempts)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-17 04:15:56 UTC Unauthorized activity to TCP port 25.
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/16993 (2 or more attempts)
|
Port Scan | ||
| 🇦🇺 HostFission |
PSAD port scan detected
|
Port Scan | ||
| 🇳🇱 StopAbuse |
tcp/9593
|
Port Scan | ||
| 🇺🇸 thororen |
|
Port Scan | ||
| 🇺🇸 MPL |
tcp port scan (6 or more attempts)
|
Port Scan | ||
| 🇺🇸 donarev419 |
Connection to port 9192 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| 🇺🇸 mutebot.net |
SRC=65.49.1.211, PROTO=TCP, SPT=44757, DPT=445
|
Port Scan | ||
| 🇺🇸 MPL |
tcp port scan (8 or more attempts)
|
Port Scan | ||
| 🇧🇷 diego |
|
Hacking | ||
| 🇺🇸 sefinek.net |
|
Port Scan | ||
| 🇺🇸 MPL |
tcp port scan (15 or more attempts)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-16 14:57:45 UTC Unauthorized activity to TCP port 445. SMB
|
Port Scan | ||
| 🇺🇸 SSP |
|
Port Scan |
Showing 1 to 15 of 14239 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩