AbuseIPDB » 65.49.1.222

65.49.1.222 was found in our database!

This IP was reported 18,868 times. Confidence of Abuse is 100%: ?

100%
ISP The Shadowserver Foundation, Inc.
Usage Type Data Center/Web Hosting/Transit
ASN AS6939
Hostname(s) 222.0-24.1.49.65.in-addr.arpa
scan-78-00.shadowserver.org
Domain Name shadowserver.org
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 65.49.1.222:

This IP address has been reported a total of 18,868 times from 813 distinct sources. 65.49.1.222 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช dispaisyenterprises
Hacking Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช Axel
[2026-06-15 00:51:12 UTC] Honeypot Dev Web Server connection attempt | AXFRA HONEYPOT
Web App Attack
๐Ÿ‡ช๐Ÿ‡ธ librebit
Brute force
Brute-Force
๐Ÿ‡ฌ๐Ÿ‡ง sandra361
Port Scan
๐Ÿ‡ฌ๐Ÿ‡ง gbzret4d
Honeypot [uk-production01]: Empty payload (likely service probe); 5800 [1] TCP
Port Scan
๐Ÿ‡ธ๐Ÿ‡ฌ drewf.ink
[17:45] Port scanning. Port(s) scanned: TCP/5672
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp ports: 44818,5805 (3 or more attempts)
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 5803 [1] TCP
Port Scan
๐Ÿ‡ฏ๐Ÿ‡ต mkaraki
1781456635 # Service_probe # SIGNATURE_SEND # source_ip:65.49.1.222 # dst_port:1723 ...
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ rmvanderspek
FTP Brute-force attempt detected.
FTP Brute-Force Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp ports: 21,5432 (5 or more attempts)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ as211431.net
Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[15:11] Port scanning. Port(s) scanned: TCP/2082
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[14:20] Port scanning. Port(s) scanned: TCP/5000
Port Scan
๐Ÿ‡น๐Ÿ‡ท Squearex
Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 9200)
Brute-Force SSH

Showing 1 to 15 of 18868 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฆ๐Ÿ‡ท 190.220.172.154
๐Ÿ‡บ๐Ÿ‡ธ 146.190.118.126
๐Ÿ‡ง๐Ÿ‡ฉ 103.9.135.46
๐Ÿ‡ง๐Ÿ‡ท 45.5.102.93
๐Ÿ‡ฆ๐Ÿ‡บ 34.151.151.16
๐Ÿ‡ฎ๐Ÿ‡ณ 34.131.118.31
๐Ÿ‡จ๐Ÿ‡ณ 14.103.123.67
๐Ÿ‡ฎ๐Ÿ‡ฉ 223.25.108.2
๐Ÿ‡บ๐Ÿ‡ธ 157.230.226.31
๐Ÿ‡น๐Ÿ‡ผ 140.128.153.204
๐Ÿ‡ฐ๐Ÿ‡ท 118.37.214.187
๐Ÿ‡ฎ๐Ÿ‡ท 93.118.98.84
๐Ÿ‡ณ๐Ÿ‡ฑ 88.151.32.163
๐Ÿ‡ฏ๐Ÿ‡ต 64.176.37.235
๐Ÿ‡บ๐Ÿ‡ธ 50.84.211.204
๐Ÿ‡บ๐Ÿ‡ธ 48.217.87.78
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.141
๐Ÿ‡ฌ๐Ÿ‡ง 35.203.211.194
๐Ÿ‡จ๐Ÿ‡ณ 27.21.29.247
๐Ÿ‡จ๐Ÿ‡ณ 220.250.10.227