AbuseIPDB » 65.49.1.25
65.49.1.25 was found in our database!
This IP was reported 19,514 times. Confidence of Abuse is 100%: ?
| ISP | The Shadowserver Foundation, Inc. |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS6939 |
| Hostname(s) |
25.0-24.1.49.65.in-addr.arpa scan-53b.shadowserver.org |
| Domain Name | shadowserver.org |
| Country |
United States of America
|
| City | San Francisco, California |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.
IP Abuse Reports for 65.49.1.25:
This IP address has been reported a total of 19,514 times from 573 distinct sources. 65.49.1.25 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp in UTC | Comment | Categories | |
|---|---|---|---|---|
|
rtbh.com.tr
|
list.rtbh.com.tr report: tcp/427, udp/427
|
Brute-Force | ||
|
VMHeaven.io
|
Blocked by UFW [12654/tcp]
Source port: 40761 TTL: 243 Packet length: 40 |
Port Scan | ||
|
ATV
|
Unsolicited connection attempts to port 449
|
Port Scan | ||
|
Study Bitcoin 🤗
|
Port probe to tcp/84 (common trace facility)
[srv130] |
Port Scan | ||
|
urnilxfgbez
|
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
|
slartybartfast69420blazit
|
Fail2ban picked up 65.49.1.25 attacking nginx
|
Web App Attack | ||
|
rtbh.com.tr
|
list.rtbh.com.tr report: tcp/135, tcp/20000, tcp/3389, tcp/427, tcp/6379, udp/427
|
Brute-Force | ||
|
MPL
|
tcp/2323 (2 or more attempts)
|
Port Scan | ||
|
Crxa
|
|
Port Scan | ||
|
ps-center
|
SS5-W: TCP-Scanner. Port: 22
|
Port Scan | ||
|
nNordic
|
Connection attempt blocked by IDS/IPS from IP 65.49.1.25/32
|
Hacking | ||
|
RAP
|
2025-07-08 16:54:59 UTC Unauthorized activity to TCP port 25.
|
Port Scan | ||
|
aug42
|
Jul 8 18:56:48 nexus sshd[26000]: Invalid user from 65.49.1.25 port 12039
... |
Brute-Force SSH | ||
|
MPL
|
tcp port scan (8 or more attempts)
|
Port Scan | ||
|
MPL
|
tcp ports: 9200,80 (3 or more attempts)
|
Port Scan |
Showing 1 to 15 of 19514 reports
Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩