AbuseIPDB » 65.49.1.230
65.49.1.230 was found in our database!
This IP was reported 12,617 times. Confidence of Abuse is 100%: ?
| ISP | The Shadowserver Foundation, Inc. |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS6939 |
| Hostname(s) |
230.0-24.1.49.65.in-addr.arpa scan-78-08.shadowserver.io |
| Domain Name | shadowserver.org |
| Country | 🇺🇸 United States of America |
| City | San Francisco, California |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 65.49.1.230:
This IP address has been reported a total of 12,617 times from 476 distinct sources. 65.49.1.230 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇳🇱 VMHeaven.io |
Blocked by UFW [5938/tcp]
Source port: 43329
TTL: 238
Packet length: 40
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/3790
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/1080
|
Port Scan | ||
| 🇪🇸 librebit |
Brute force
|
Brute-Force | ||
| 🇺🇸 MPL |
tcp/24156 (4 or more attempts)
|
Port Scan | ||
| 🇬🇧 sandra361 |
|
Port Scan | ||
| 🇺🇸 MPL |
tcp ports: 5555,5984 (6 or more attempts)
|
Port Scan | ||
| 🇧🇷 diego |
|
Hacking | ||
| 🇳🇱 StopAbuse |
tcp/9200
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-21 04:24:34 UTC Unauthorized activity to TCP port 9200.
|
Port Scan | ||
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | ||
| 🇺🇸 MPL |
tcp ports: 6379,30005 (2 or more attempts)
|
Port Scan | ||
| 🇺🇸 Cherryh4ck |
|
Port Scan | ||
| 🇺🇸 RAP |
2026-08-21 00:49:10 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | ||
| 🇺🇸 MPL |
tcp/50075
|
Port Scan |
Showing 1 to 15 of 12617 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩