JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.5.249.6

164.5.249.6 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 47%: ?

47%

ISP	DA International Group Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203380
Domain Name	dagroup.bg
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.5.249.6

Whois 164.5.249.6

IP Abuse Reports for 164.5.249.6:

This IP address has been reported a total of 38 times from 29 distinct sources. 164.5.249.6 was first reported on August 7th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-09-06 12:17:39 (1 week ago)	3 incidents: malicious activity. First: 2026-08-25 17:09, Last: 2026-09-06 08:17 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-08-25 17:09, Last: 2026-09-06 08:17 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 micropedro	2026-09-06 12:17:39 (1 week ago)	3 incidents: malicious activity. First: 2026-09-04 06:43, Last: 2026-09-06 08:17 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-09-04 06:43, Last: 2026-09-06 08:17 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 micropedro	2026-08-25 21:10:39 (3 weeks ago)	3 incidents: malicious activity. First: 2026-08-20 06:38, Last: 2026-08-25 17:10 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-08-20 06:38, Last: 2026-08-25 17:10 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 micropedro	2026-08-20 10:47:28 (4 weeks ago)	3 incidents: port scanning. First: 2026-08-07 13:28, Last: 2026-08-20 06:47 UTC. Triggers: non-publi ... show more 3 incidents: port scanning. First: 2026-08-07 13:28, Last: 2026-08-20 06:47 UTC. Triggers: non-public-port,firewall-tcp,unknown. show less	Port Scan
🇩🇪 phil2k	2026-08-08 10:02:00 (1 month ago)	Firewall: Within 2026-08-07 18:59:04 - 2026-08-07 18:59:12 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-08-07 18:59:04 - 2026-08-07 18:59:12 CEST(+0200) identified: unallowed access from 164.5.249.6 on uncommon port/s: 808(tcp:808),8888(tcp:8888) (2 trials) Fail2ban: Within 2026-08-07 18:59:04 - 2026-08-07 18:59:12 CEST(+0200) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇩🇪 luxuria.cfd	2026-08-08 09:50:24 (1 month ago)	Honeypot port scan detected. Auto-blocked by XUI Shield.	DDoS Attack Port Scan
🇬🇧 sonot	2026-08-07 20:28:07 (1 month ago)	Blocked by UFW on tunneluk01 [8090/tcp] \| SPT: 56281 \| TTL: 51 \| LEN: 40 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [8090/tcp] \| SPT: 56281 \| TTL: 51 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sandra361	2026-08-07 20:20:31 (1 month ago)	Port scan detected: 5 attempts across 1 port (10080). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=164 ... show more Port scan detected: 5 attempts across 1 port (10080). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=164.5.249.6 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=60794 DF PROTO=TCP SPT=8880 DPT=10080 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-08-07 19:51:47 (1 month ago)	Port scan on 2 port(s) from 164.5.249.6 detected: 8889 (20:36:34) 8889 (20:51:47)	Port Scan
🇩🇪 sandra361	2026-08-07 19:07:01 (1 month ago)	Port scan detected: 11 attempts across 1 port (3129). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=164.5.2 ... show more Port scan detected: 11 attempts across 1 port (3129). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=164.5.249.6 LEN=40 TOS=0x00 PREC=0x00 TTL=61 ID=51668 DF PROTO=TCP SPT=42710 DPT=3129 WINDOW=64240 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇨🇦 Blinker73	2026-08-07 18:54:05 (1 month ago)	2026-08-07T14:32 kernel: OUT= SRC=164.5.249.6 LEN=40 TOS=0x00 PREC=0x20 TTL=47 ID=9479 DF PROT ... show more 2026-08-07T14:32 kernel: OUT= SRC=164.5.249.6 LEN=40 TOS=0x00 PREC=0x20 TTL=47 ID=9479 DF PROTO=TCP SPT=47580 DPT=6588 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-07T14:39 kernel: OUT= SRC=164.5.249.6 LEN=40 TOS=0x00 PREC=0x20 TTL=47 ID=5914 DF PROTO=TCP SPT=47580 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0 2026-08-07T14:47 kernel: OUT= SRC=164.5.249.6 LEN=40 TOS=0x00 PREC=0x20 TTL=47 ID=31450 DF PROTO=TCP SPT=47580 DPT=6588 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇨🇦 Tanados	2026-08-07 18:51:25 (1 month ago)	Blocked by UFW [8000/tcp] Source port: 47580 TTL: 50 Packet length: 40 TOS: 0x00 This report was ge ... show more Blocked by UFW [8000/tcp] Source port: 47580 TTL: 50 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 celestialcity	2026-08-07 18:42:19 (1 month ago)	Blocked by UFW on celestialcityna [8090/tcp] \| SPT: 47580 \| TTL: 47 \| LEN: 40 \| TOS: 0x00 • Reported ... show more Blocked by UFW on celestialcityna [8090/tcp] \| SPT: 47580 \| TTL: 47 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 drewf.ink	2026-08-07 18:37:33 (1 month ago)	[18:37] Port scanning. Port(s) scanned: TCP/1080, TCP/8008	Port Scan
🇨🇦 polycoda	2026-08-07 18:33:56 (1 month ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.139.109

🇮🇩 182.253.79.194

🇺🇸 152.32.149.246

🇭🇰 129.226.138.44

🇨🇦 35.203.45.136

🇰🇷 211.105.229.237

🇺🇸 193.3.53.3

🇺🇸 172.236.126.127

🇺🇸 152.32.150.5

🇺🇸 16.98.41.15

🇩🇪 8.211.9.248

🇬🇧 213.152.62.43

🇵🇰 203.81.236.197

🇨🇳 202.103.157.115

🇫🇮 193.187.110.213

🇳🇱 193.176.31.235

🇳🇱 193.47.62.167

🇺🇸 143.42.1.213

🇯🇵 111.238.174.6

🇨🇳 111.38.136.211