AbuseIPDB » 65.49.20.66

Check an IP Address, Domain Name, or Subnet

e.g. 3.92.74.105, microsoft.com, or 5.188.10.0/24

65.49.20.66 was found in our database!

This IP was reported 2341 times. Confidence of Abuse is 100%: ?

100%

ISP	The Shadow Server Foundation
Usage Type	Commercial
Domain Name	civicactions.com
Country	United States
City	Milpitas, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 65.49.20.66

Whois 65.49.20.66

IP Abuse Reports for 65.49.20.66:

This IP address has been reported a total of 2341 times from 134 distinct sources. 65.49.20.66 was first reported on December 4th 2019, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
23p02732	17 hours ago	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
Michael Sayapin	17 hours ago	Sep 26 22:42:26 mail sshd\[49205\]: Invalid user from 65.49.20.66 ...	Brute-Force SSH
somberdemise	17 hours ago	2020-09-05T01:21:50.409706finland sshd[919000]: Unable to negotiate with 65.49.20.66 port 44290: no ... show more2020-09-05T01:21:50.409706finland sshd[919000]: Unable to negotiate with 65.49.20.66 port 44290: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] 2020-09-10T01:30:04.855574finland sshd[953876]: Connection from 65.49.20.66 port 15814 on 95.217.116.180 port 22 rdomain "" 2020-09-10T01:30:05.018440finland sshd[953876]: Unable to negotiate with 65.49.20.66 port 15814: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] 2020-09-13T02:57:42.647736finland sshd[960144]: Connection from 65.49.20.66 port 40686 on 95.217.116.180 port 22 rdomain "" 2020-09-13T02:57:42.810863finland sshd[960144]: Unable to negotiate with 65.49.20.66 port 40686: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] 2020-09-17T01:26:55.683684finland sshd[1009570]: Connection from 65.49.20.66 port 27174 on 95.217.116.180 port 22 rdomain "" 2020-09-17T01:26:55.927576finland sshd[1009570]: Unable to negotiate with 65.49.20.66 p ... show less	Brute-Force SSH
sxvn	17 hours ago		SSH
Largnet SOC	19 hours ago	Icarus honeypot on github	Hacking
sverre26	19 hours ago	Bruteforce detected by fail2ban	Brute-Force SSH
webserfer	19 hours ago	[f2b] sshd bruteforce, retries: 1	Brute-Force SSH
Ppcode	19 hours ago	honeypot 22 port	Brute-Force
m4lwhere	20 hours ago	Scanned 2 times in the last 24 hours on port 22	Port Scan
Anonymous	25 Sep 2020	" "	Brute-Force
RiddlerWebmaster	25 Sep 2020	SSH Brute-Force reported by Fail2Ban	Brute-Force SSH
Anonymous	25 Sep 2020	Sep 26 04:09:40 host sshd\[19118\]: Invalid user from 65.49.20.66 port 35584	Brute-Force SSH
theitjuggler.com	25 Sep 2020	Sep 26 11:59:14 localhost sshd[11063]: Invalid user from 65.49.20.66 port 5152 ...	Brute-Force SSH
Anonymous	25 Sep 2020	Tried our host z.	Port Scan Hacking Exploited Host
Anonymous	25 Sep 2020	Sep 25 17:54:11 propaganda sshd[19428]: Connection from 65.49.20.66 port 48396 on 10.0.0.161 port 22 ... show moreSep 25 17:54:11 propaganda sshd[19428]: Connection from 65.49.20.66 port 48396 on 10.0.0.161 port 22 rdomain "" Sep 25 17:54:11 propaganda sshd[19428]: Unable to negotiate with 65.49.20.66 port 48396: no matching MAC found. Their offer: hmac-sha2-256,hmac-sha1,hmac-sha1-96 [preauth] show less	Brute-Force SSH