AbuseIPDB » 201.249.206.65

201.249.206.65 was found in our database!

This IP was reported 164 times. Confidence of Abuse is 94%: ?

94%

ISP	CANTV Servicios, Venezuela
Usage Type	Fixed Line ISP
ASN	AS8048
Domain Name	cantv.net
Country	Venezuela (Bolivarian Republic of)
City	Caracas, Distrito Federal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 201.249.206.65

Whois 201.249.206.65

IP Abuse Reports for 201.249.206.65:

This IP address has been reported a total of 164 times from 102 distinct sources. 201.249.206.65 was first reported on November 13th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
OuverneY	2025-01-16 15:36:37 (1 day ago)	FW-PortScan: Traffic Blocked (Port=3306 <- 986 attempts), (Port=1433 <- 575 attempts), (Port=445 <- ... show moreFW-PortScan: Traffic Blocked (Port=3306 <- 986 attempts), (Port=1433 <- 575 attempts), (Port=445 <- 481 attempts), Total connections: 4091, Total destination IPs: 238 show less	Port Scan
diego	2025-01-09 16:42:02 (1 week ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
Bruno	2025-01-09 14:36:19 (1 week ago)	Port Scanner: 201.249.206.65	Port Scan
smopdidi	2025-01-07 23:34:15 (1 week ago)	Ports: 445; 3 attempts	Port Scan
diego	2025-01-07 19:12:08 (1 week ago)	[rede-top188] 01/07/2025-16:12:08.406996, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to ... show more[rede-top188] 01/07/2025-16:12:08.406996, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
diego	2025-01-07 17:44:26 (1 week ago)	[rede-164-29] 01/07/2025-14:44:26.576916, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to ... show more[rede-164-29] 01/07/2025-14:44:26.576916, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
diego	2025-01-07 16:44:04 (1 week ago)	[rede-164-29] 01/07/2025-13:44:03.803763, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to ... show more[rede-164-29] 01/07/2025-13:44:03.803763, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
KPS	2024-12-29 04:09:48 (2 weeks ago)	PortscanM	Port Scan
Anonymous	2024-12-17 00:16:38 (1 month ago)	Dec 17 01:16:34 rendez-vous sshd[146969]: Failed password for root from 201.249.206.65 port 44520 ss ... show moreDec 17 01:16:34 rendez-vous sshd[146969]: Failed password for root from 201.249.206.65 port 44520 ssh2 Dec 17 01:16:36 rendez-vous sshd[146973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.206.65 user=root Dec 17 01:16:38 rendez-vous sshd[146973]: Failed password for root from 201.249.206.65 port 34220 ssh2 show less	Brute-Force
urnilxfgbez	2024-12-16 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
maddler	2024-12-16 23:39:05 (1 month ago)	2024-12-16T23:39:02.391078+00:00 saccapposh sshd[1665614]: Invalid user user from 201.249.206.65 por ... show more2024-12-16T23:39:02.391078+00:00 saccapposh sshd[1665614]: Invalid user user from 201.249.206.65 port 44895 2024-12-16T23:39:03.486581+00:00 saccapposh sshd[1665641]: Invalid user user from 201.249.206.65 port 47513 2024-12-16T23:39:04.559880+00:00 saccapposh sshd[1665674]: Invalid user user from 201.249.206.65 port 60785 ... show less	Brute-Force SSH
rtbh.com.tr	2024-12-16 20:52:40 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
diego	2024-12-16 19:37:36 (1 month ago)	[rede-top188] 12/16/2024-16:37:36.615619, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to ... show more[rede-top188] 12/16/2024-16:37:36.615619, 201.249.206.65, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
F63NNKJ4	2024-12-16 17:34:23 (1 month ago)	...	Brute-Force SSH
london2038.com	2024-12-16 16:13:15 (1 month ago)	Connection atttempts against closed TCP ports Dec 16 17:09:58 BLOCK SRC=201.249.206.65 LEN=52 ... show moreConnection atttempts against closed TCP ports Dec 16 17:09:58 BLOCK SRC=201.249.206.65 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=20723 DF PROTO=TCP SPT=52211 DPT=1433 WINDOW=8192 RES=0x00 SYN Dec 16 17:10:01 BLOCK SRC=201.249.206.65 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=22185 DF PROTO=TCP SPT=52211 DPT=1433 WINDOW=8192 RES=0x00 SYN Dec 16 17:12:44 BLOCK SRC=201.249.206.65 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=2209 DF PROTO=TCP SPT=44148 DPT=3306 WINDOW=8192 RES=0x00 SYN show less	Port Scan