AbuseIPDB » 65.49.20.68

65.49.20.68 was found in our database!

This IP was reported 38,938 times. Confidence of Abuse is 100%: ?

100%

ISP	The Shadow Server Foundation
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	68.64-26.20.49.65.in-addr.arpa scan-19.shadowserver.org
Domain Name	shadowserver.org
Country	United States of America
City	Pleasanton, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 65.49.20.68

Whois 65.49.20.68

IP Abuse Reports for 65.49.20.68:

This IP address has been reported a total of 38,938 times from 878 distinct sources. 65.49.20.68 was first reported on November 21st 2020, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Murazaki	2024-10-12 22:00:38 (5 hours ago)	65.49.20.68 - - [12/Oct/2024:07:27:55 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xC5\x976S\x11\x ... show more65.49.20.68 - - [12/Oct/2024:07:27:55 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xC5\x976S\x11\x1C%~l) ei\xF0\xB1,\x03P\xE1\xF8\x11\xE7\x11\xBC" 500 170 "-" "-" "-" ... show less	Hacking
Anonymous	2024-10-12 18:42:52 (9 hours ago)	SPAM EMAIL 65.49.20.68 (RBL_TRIGGER)	Email Spam
Kraften	2024-10-12 16:53:48 (10 hours ago)	Dovecot imap-login ...	DDoS Attack Brute-Force
Anonymous	2024-10-12 13:24:06 (14 hours ago)	Tried our host z.	Port Scan Hacking Exploited Host
Guardian	2024-10-12 13:12:51 (14 hours ago)	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
swrlly	2024-10-12 11:32:21 (16 hours ago)	attempted directly connecting to webserver using origin ip	Web App Attack
LRNP	2024-10-12 11:22:50 (16 hours ago)	_:80 65.49.20.68 - - [12/Oct/2024:11:22:49 +0000] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03&r\x18##\x9 ... show more_:80 65.49.20.68 - - [12/Oct/2024:11:22:49 +0000] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03&r\x18##\x95\xB8$cm\xC3/\xA8\xF5\xE9\x95\x9C\xAE\xC9\x92\xEB\x02W\x0Cs\xD7\xEF\x83@\xA8b6\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
v1nc	2024-10-12 08:29:40 (19 hours ago)	65.49.20.68 - - [12/Oct/2024:08:29:39 +0000] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xE7V\xC7\x81\xE ... show more65.49.20.68 - - [12/Oct/2024:08:29:39 +0000] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xE7V\xC7\x81\xE7\xE9\x89\xB4\xC6\x07\xDE\x9C\xDE\xAC\x12\x91\xFE\xF6\xB7l\xF3\xD1\xF0\xF2]\x89\xF5\xEFI\xFF" 400 150 "-" "-" ... show less	Hacking
Una Hofmans	2024-10-12 08:06:33 (19 hours ago)	2024-10-12T08:06:32.670594+00:00 gouda sshd[2683465]: banner exchange: Connection from 65.49.20.68 p ... show more2024-10-12T08:06:32.670594+00:00 gouda sshd[2683465]: banner exchange: Connection from 65.49.20.68 port 36272: invalid format ... show less	Brute-Force
PulseServers	2024-10-12 07:54:10 (19 hours ago)	FTP Brute-Force Attack on a server hosted by PulseServers.com - CA10 Honeypot ...	FTP Brute-Force Brute-Force
Largnet SOC	2024-10-12 07:52:42 (19 hours ago)	65.49.20.68 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
sid3windr	2024-10-12 06:54:50 (20 hours ago)	GET /.git/config (Tarpitted for , wasted 0B)	Web App Attack
Largnet SOC	2024-10-12 02:28:51 (1 day ago)	65.49.20.68 triggered Icarus honeypot on port 110. Check us out on github.	Port Scan Hacking
marioselgreco	2024-10-12 01:07:52 (1 day ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
david1117	2024-10-11 13:49:20 (1 day ago)	Bruteforcing Access to Web Application	Web App Attack IoT Targeted