AbuseIPDB » 65.49.1.164

65.49.1.164 was found in our database!

This IP was reported 3,384 times. Confidence of Abuse is 100%: ?

100%
ISP The Shadowserver Foundation, Inc.
Usage Type Fixed Line ISP
ASN AS6939
Hostname(s) 164.0-24.1.49.65.in-addr.arpa
scan-72-02.shadowserver.org
Domain Name shadowserver.org
Country United States of America
City San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

IP Abuse Reports for 65.49.1.164:

This IP address has been reported a total of 3,384 times from 229 distinct sources. 65.49.1.164 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp in UTC Comment Categories
MPL
tcp ports: 6443,60000 (4 or more attempts)
Port Scan
MPL
tcp/8030 (2 or more attempts)
Port Scan
MPL
tcp/8040 (2 or more attempts)
Port Scan
Beta
ports, 5432/24H:1/7D:1
Port Scan
MPL
tcp/8020 (2 or more attempts)
Port Scan
ATV
Unsolicited connection attempts to port 5901
Port Scan
oonux.net
RouterOS: Scanning detected TCP 65.49.1.164:33574 > x.x.x.x:7443
Port Scan
urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
rtbh.com.tr
list.rtbh.com.tr report: tcp/212, tcp/22
Brute-Force
zwh
Port Scan
Port Scan
CRASH
Brute-Force SSH (Port 22)
Brute-Force SSH
Anonymous
Jul 16 11:47:25 localhost sshd[908416]: Invalid user from 65.49.1.164 port 57255
...
SSH
MPL
tcp/22
Port Scan
MPL
tcp/22
Port Scan
mkaraki
1752685415 # Service_probe # SIGNATURE_SEND # source_ip:65.49.1.164 # dst_port:1337
...
Port Scan

Showing 31 to 45 of 3384 reports


Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs: