JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.49.9.172

65.49.9.172 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 57%: ?

57%

ISP	In-Depth
Usage Type	Fixed Line ISP
ASN	AS6939
Domain Name	in-depth.co
Country	🇺🇸 United States of America
City	Fremont, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.49.9.172

Whois 65.49.9.172

IP Abuse Reports for 65.49.9.172:

This IP address has been reported a total of 18 times from 18 distinct sources. 65.49.9.172 was first reported on May 8th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zGrav	2026-08-24 05:20:02 (1 week ago)	2026-08-24T07:19:53.235223+02:00 zgrav sshd-session[4118502]: Failed password for root from 65.49.9. ... show more 2026-08-24T07:19:53.235223+02:00 zgrav sshd-session[4118502]: Failed password for root from 65.49.9.172 port 57772 ssh2 2026-08-24T07:19:56.019043+02:00 zgrav sshd-session[4118507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-24T07:19:57.807358+02:00 zgrav sshd-session[4118507]: Failed password for root from 65.49.9.172 port 53674 ssh2 2026-08-24T07:19:59.171068+02:00 zgrav sshd-session[4118510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-24T07:20:01.419972+02:00 zgrav sshd-session[4118510]: Failed password for root from 65.49.9.172 port 53678 ssh2 ... show less	Brute-Force SSH
🇺🇸 LSPCCU	2026-08-15 07:58:18 (2 weeks ago)	TSEC Honeypot Network report. Threat score: 94/100. Categories: Port Scan, Hacking, Brute-Force, Exp ... show more TSEC Honeypot Network report. Threat score: 94/100. Categories: Port Scan, Hacking, Brute-Force, Exploited Host, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: Attacker IP 65.49.9.172 observed using SSH client fingerprint 'Unknown SSH Client (98f63c4d9c87)' 5 times when connecting to a healthcare sector honeypot between 2026-08-15 06:00 and 2026-08-15 06:.... show less	Port Scan Hacking Brute-Force Exploited Host Web App Attack SSH
🇳🇱 EGP Abuse Dept	2026-08-15 05:33:56 (2 weeks ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇮🇹 alph44	2026-08-14 23:29:03 (2 weeks ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇺🇸 bigscoots.com	2026-08-12 13:28:56 (2 weeks ago)	(sshd) Failed SSH login from 65.49.9.172 (US/United States/-): 5 in the last 3600 secs; Ports: ; Di ... show more (sshd) Failed SSH login from 65.49.9.172 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 12 08:28:26 15022 sshd[30810]: Did not receive identification string from 65.49.9.172 port 56970 Aug 12 08:28:27 15022 sshd[30811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root Aug 12 08:28:29 15022 sshd[30811]: Failed password for root from 65.49.9.172 port 56978 ssh2 Aug 12 08:28:30 15022 sshd[30813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root Aug 12 08:28:32 15022 sshd[30813]: Failed password for root from 65.49.9.172 port 56994 ssh2 show less	Brute-Force SSH
🇮🇹 Baldelli Spartaco	2026-08-12 13:28:06 (2 weeks ago)	Aug 12 15:27:57 backup sshd[2440537]: Failed password for root from 65.49.9.172 port 51532 ssh2 Aug ... show more Aug 12 15:27:57 backup sshd[2440537]: Failed password for root from 65.49.9.172 port 51532 ssh2 Aug 12 15:28:00 backup sshd[2440539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root Aug 12 15:28:02 backup sshd[2440539]: Failed password for root from 65.49.9.172 port 51534 ssh2 Aug 12 15:28:04 backup sshd[2440551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root Aug 12 15:28:06 backup sshd[2440551]: Failed password for root from 65.49.9.172 port 40948 ssh2 ... show less	Brute-Force SSH
🇩🇪 arc21	2026-08-11 06:33:40 (3 weeks ago)	2026-08-11T06:33:30.139044+00:00 new-billing sshd[236064]: Failed password for root from 65.49.9.172 ... show more 2026-08-11T06:33:30.139044+00:00 new-billing sshd[236064]: Failed password for root from 65.49.9.172 port 45588 ssh2 2026-08-11T06:33:32.679963+00:00 new-billing sshd[236067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-11T06:33:34.661271+00:00 new-billing sshd[236067]: Failed password for root from 65.49.9.172 port 45604 ssh2 2026-08-11T06:33:37.494001+00:00 new-billing sshd[236069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-11T06:33:39.164113+00:00 new-billing sshd[236069]: Failed password for root from 65.49.9.172 port 50506 ssh2 ... show less	Brute-Force SSH
🇧🇬 OHOST.BG	2026-08-11 04:18:18 (3 weeks ago)	2026-08-11T07:18:05.589570+03:00 thebulgarroleplay sshd[1184250]: Failed password for root from 65.4 ... show more 2026-08-11T07:18:05.589570+03:00 thebulgarroleplay sshd[1184250]: Failed password for root from 65.49.9.172 port 39778 ssh2 2026-08-11T07:18:08.736380+03:00 thebulgarroleplay sshd[1184253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-11T07:18:10.769436+03:00 thebulgarroleplay sshd[1184253]: Failed password for root from 65.49.9.172 port 34356 ssh2 2026-08-11T07:18:14.686551+03:00 thebulgarroleplay sshd[1184255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-11T07:18:17.210204+03:00 thebulgarroleplay sshd[1184255]: Failed password for root from 65.49.9.172 port 39110 ssh2 ... show less	Brute-Force SSH
🇺🇸 markawes	2026-08-10 07:16:20 (3 weeks ago)	[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ... show more [markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: 2026-08-10T07:16:07.103427+00:00 sshd-session[898929]: Failed password for root from 65.49.9.172 port 40788 ssh2 2026-08-10T07:16:11.064940+00:00 sshd-session[898932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-10T07:16:13.180940+00:00 sshd-session[898932]: Failed password for root from 65.49.9.172 port 40800 ssh2 2026-08-10T07:16:16.587397+00:00 sshd-session[898935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-10T07:16:18.778583+00:00 sshd-session[898935]: Failed password for root from 65.49.9.172 port 52462 ssh2 show less	Brute-Force SSH
🇩🇪 senkodev	2026-08-09 08:05:18 (3 weeks ago)	2026-08-09T10:05:14.683676+02:00 vm1386.de.snk.wtf sshd[36228]: pam_unix(sshd:auth): authentication ... show more 2026-08-09T10:05:14.683676+02:00 vm1386.de.snk.wtf sshd[36228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-09T10:05:17.232286+02:00 vm1386.de.snk.wtf sshd[36228]: Failed password for root from 65.49.9.172 port 51962 ssh2 ... show less	Brute-Force SSH
🇫🇷 Lunix	2026-08-08 17:41:57 (3 weeks ago)		FTP Brute-Force Brute-Force
🇭🇰 demonsword	2026-08-08 10:16:44 (3 weeks ago)	SSH brute-force detected: 135 failed login attempts in the last 1 hour.	Brute-Force SSH
🇩🇪 LoNET	2026-08-07 16:03:50 (3 weeks ago)	Report 2600956 with IP 3648523 for SSH brute-force attack by source 3643181 via ssh-honeypot/0.2.1+h ... show more Report 2600956 with IP 3648523 for SSH brute-force attack by source 3643181 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇮🇹 emernetsrl	2026-08-07 05:43:27 (3 weeks ago)	2026-08-07T07:43:25.645189+02:00 pve sshd-session[558896]: Failed password for root from 65.49.9.172 ... show more 2026-08-07T07:43:25.645189+02:00 pve sshd-session[558896]: Failed password for root from 65.49.9.172 port 49004 ssh2 2026-08-07T07:43:26.869632+02:00 pve sshd-session[558896]: Connection closed by authenticating user root 65.49.9.172 port 49004 [preauth] ... show less	Brute-Force SSH
🇩🇪 dnsguard.pub	2026-08-06 22:35:47 (3 weeks ago)	2026-08-06T22:35:36.542513+00:00 taxi sshd[4963]: Failed password for root from 65.49.9.172 port 607 ... show more 2026-08-06T22:35:36.542513+00:00 taxi sshd[4963]: Failed password for root from 65.49.9.172 port 60756 ssh2 2026-08-06T22:35:39.955054+00:00 taxi sshd[4966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-06T22:35:41.439605+00:00 taxi sshd[4966]: Failed password for root from 65.49.9.172 port 51106 ssh2 2026-08-06T22:35:45.060841+00:00 taxi sshd[4968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.9.172 user=root 2026-08-06T22:35:47.037420+00:00 taxi sshd[4968]: Failed password for root from 65.49.9.172 port 60912 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇭 197.251.193.234

🇺🇸 165.154.163.171

🇹🇭 118.175.249.248

🇺🇸 118.26.109.7

🇮🇳 103.232.247.203

🇮🇷 95.38.161.131

🇹🇷 88.234.239.19

🇸🇬 47.236.83.152

🇬🇧 45.82.76.133

🇺🇸 45.79.181.179

🇺🇸 43.166.224.29

🇧🇪 34.22.217.192

🇷🇺 31.25.29.163

🇺🇸 3.129.187.38

🇮🇩 203.145.35.29

🇹🇼 198.235.24.8

🇨🇴 181.51.32.228

🇺🇸 173.252.87.113

🇳🇱 173.194.170.92

🇺🇸 162.216.149.61