201.211.10.49

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
33 reports
23 reporters · latest 3 days ago
ISP
CANTV Servicios, Venezuela
Usage Type
Fixed Line ISP
ASN
AS8048
Hostname(s)
201-211-10-49.cnt-01-p80.cantv.net
Domain Name
cantv.net
Country
🇻🇪 Venezuela (Bolivarian Republic of)
City
Altagracia de Orituco, Guarico
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
33 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 12 🇫🇷 France 7 🇩🇪 Germany 6
Most common categories Port Scan 23 Hacking 12 Brute-Force 6 SSH 2 IoT Targeted 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-11-11 04:41:48 UTC Unauthorized activity to TCP port 2323. Telnet
Port Scan
🇺🇸 MPL
tcp/23 (6 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇳🇱 PixelSlimepup
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-11-10T15:50:26Z
Brute-Force SSH
🇫🇷 Kejult
Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.
Hacking
🇫🇷 Kejult
Honeypot Finding: Telnet brute-force on TCP/23; 3 failed login attempts.
Brute-Force
🇩🇪 RazorLabs.dev
Automated report from fail2ban: unsolicited TCP connection attempt to port 23/2323 (telnet) on a host running no telnet service, dropped by host firewall.
Port Scan Brute-Force IoT Targeted
🇺🇸 RAP
2026-11-09 14:03:42 UTC Unauthorized activity to TCP port 2323. Telnet
Port Scan
🇺🇸 leasj
Observed Threat-intel match: ThreatIntel match (100% confidence): ["Botnet"] - MSTIC HoneyPot: An attacker used a brute force attack to gain access to a service or device [Microsoft Defender Threat Intelligence]
Hacking
🇩🇪 Ilop
[v7-22] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=2323, src_ip=201.211.10.49
Port Scan Hacking
🇺🇸 RAP
2026-11-09 01:14:59 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇧🇾 StatsMe
Date: 2026-11-08T20:06:39.000+00:00 | Action: deny | Port: 23 | Log: Connection Failed
Brute-Force SSH Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.228
🇺🇸 157.22.124.200
🇺🇦 94.178.192.251
🇳🇱 77.67.26.200
🇲🇽 187.161.135.111
🇬🇪 185.228.133.226
🇳🇱 185.136.15.16
🇺🇸 162.216.150.119
🇭🇰 152.32.133.103
🇨🇦 132.210.200.145
🇺🇸 132.145.131.173
🇧🇷 69.6.221.18
🇸🇬 43.172.196.68
🇫🇮 31.134.13.111
🇪🇸 213.235.27.66
🇳🇱 193.47.62.69
🇺🇸 172.236.228.229
🇨🇿 95.129.243.47
🇵🇹 85.240.193.104
feedback