Showing current intelligence for this indicator.

IP Information for 65.49.1.94

Location North America, 🇺🇸 United States
ASN AS6939 — HURRICANE - Hurricane Electric LLC, US
BGP Prefix 65.49.0.0/17
Registry arin
IP Address 65.49.1.94

IOC Matches

ID Type Tag Source Last seen Comments
27761 IP honeypot 4 2026-05-03 09:55:22
  • 2026-05-03: Observed 6 times. Targeted ports: 6000. Country: United States. Reputation: mass scanner.
  • 2026-05-02: Observed 6 times. Targeted ports: 23. Country: United States. Reputation: mass scanner.
  • 2026-05-01: Observed 14 times. Targeted ports: 7047, 8001. Country: United States. Reputation: mass scanner.
  • 2026-04-30: Observed 6 times. Targeted ports: 5001. Country: United States. Reputation: mass scanner.
  • 2026-04-29: Observed 13 times. Targeted ports: 9002, 49669. Country: United States. Reputation: mass scanner.
  • 2026-04-28: Observed 8 times. Targeted ports: 5555. Country: United States. Reputation: mass scanner.
  • 2026-04-27: Observed 35 times. Targeted ports: 1723, 2404, 5905. Country: United States. Reputation: mass scanner.
  • 2026-04-23: Observed 9 times. Targeted ports: 5984. Country: United States. Reputation: mass scanner.
  • 2026-04-22: Observed 9 times. Targeted ports: 50075. Country: United States. Reputation: mass scanner.
  • 2026-04-21: Observed 7 times. Targeted ports: 8873. Country: United States. Reputation: mass scanner.
  • 2026-04-10: Observed 7 times. Targeted ports: 2031. Country: United States. Reputation: mass scanner.
  • 2026-03-28: Observed 9 times. Targeted ports: 8880. Country: United States. Reputation: mass scanner.
  • 2026-03-27: Observed 6 times. Targeted ports: 4369. Country: United States. Reputation: mass scanner.
  • 2026-03-26: Observed 6 times. Targeted ports: 20256. Country: United States. Reputation: mass scanner.
  • 2026-03-25: Observed 2 times. Targeted ports: 548. Country: United States. Reputation: mass scanner.
  • 2026-03-24: Observed 7 times. Targeted ports: 80. Country: United States. Reputation: mass scanner. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
  • 2026-03-23: Observed 8 times. Targeted ports: 8000. Country: United States. Reputation: mass scanner.
  • 2026-03-22: Observed 7 times. Targeted ports: 10443. Country: United States. Reputation: mass scanner.
  • 2026-03-21: Observed 6 times. Targeted ports: 27017. Country: United States. Reputation: mass scanner.
  • 2026-03-20: Observed 6 times. Targeted ports: 27017. Country: United States. Reputation: mass scanner.
  • 2026-03-19: Observed 13 times. Targeted ports: 22. Country: United States. Reputation: mass scanner. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions.
  • 2026-03-18: Observed 1 times. Targeted ports: 34980. Country: United States. Reputation: mass scanner.
  • 2026-03-16: Observed 9 times. Targeted ports: 6081, 10161. Country: United States. Reputation: mass scanner.
  • 2026-03-15: Observed 7 times. Targeted ports: 9001. Country: United States. Reputation: mass scanner.
  • 2026-03-14: Observed 5 times. Targeted ports: 50000. Country: United States. Reputation: mass scanner.
  • 2026-03-13: Observed 8 times. Targeted ports: 4369. Country: United States. Reputation: mass scanner.
  • 2026-03-12: Observed 6 times. Targeted ports: 4840. Country: United States. Reputation: mass scanner.
  • 2026-03-11: Observed 7 times. Targeted ports: 2455. Country: United States. Reputation: mass scanner.
  • 2026-03-10: Observed 13 times. Targeted ports: 4080. Country: United States. Reputation: mass scanner.
  • 2026-03-09: Observed 8 times. Targeted ports: 17017. Country: United States. Reputation: mass scanner.
  • 2026-03-07: Observed 7 times. Targeted ports: 2001. Country: United States. Reputation: mass scanner.
  • 2026-03-06: Observed 8 times. Targeted ports: 49667. Country: United States. Reputation: mass scanner.
  • 2026-03-04: Observed 7 times. Targeted ports: 49669. Country: United States. Reputation: mass scanner.
  • 2026-03-03: Observed 7 times. Targeted ports: 8001. Country: United States.

URLs on this IP

No URLs found for this IP.

Passive DNS

No pDNS records found for 65.49.1.94.

Search History

ID Source Last seen
55102 web 2026-05-03 20:28:33

Whois

# # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2026, American Registry for Internet Numbers, Ltd. # # start NetRange: 65.49.0.0 - 65.49.127.255 CIDR: 65.49.0.0/17 NetName: HURRICANE-9 NetHandle: NET-65-49-0-0-1 Parent: NET65 (NET-65-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Hurricane Electric LLC (HURC) RegDate: 2007-10-04 Updated: 2012-02-24 Ref: https://rdap.arin.net/registry/ip/65.49.0.0 OrgName: Hurricane Electric LLC OrgId: HURC Address: 760 Mission Court City: Fremont StateProv: CA PostalCode: 94539 Country: US RegDate: Updated: 2024-11-25 Ref: https://rdap.arin.net/registry/entity/HURC ReferralServer: rwhois://rwhois.he.net:4321 OrgTechHandle: ZH17-ARIN OrgTechName: Hurricane Electric OrgTechPhone: +1-510-580-4100 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN OrgAbuseHandle: ABUSE1036-ARIN OrgAbuseName: Abuse Department OrgAbusePhone: +1-510-580-4100 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN RAbuseHandle: ABUSE1036-ARIN RAbuseName: Abuse Department RAbusePhone: +1-510-580-4100 RAbuseEmail: [email protected] RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1036-ARIN RTechHandle: ZH17-ARIN RTechName: Hurricane Electric RTechPhone: +1-510-580-4100 RTechEmail: [email protected] RTechRef: https://rdap.arin.net/registry/entity/ZH17-ARIN RNOCHandle: ZH17-ARIN RNOCName: Hurricane Electric RNOCPhone: +1-510-580-4100 RNOCEmail: [email protected] RNOCRef: https://rdap.arin.net/registry/entity/ZH17-ARIN # end # start NetRange: 65.49.1.0 - 65.49.1.255 CIDR: 65.49.1.0/24 NetName: HURRICANE-CE2897-409C062A NetHandle: NET-65-49-1-0-1 Parent: HURRICANE-9 (NET-65-49-0-0-1) NetType: Reallocated OriginAS: Organization: The Shadowserver Foundation, Inc. (SF-1051) RegDate: 2025-04-21 Updated: 2025-04-21 Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE Ref: https://rdap.arin.net/registry/ip/65.49.1.0 OrgName: The Shadowserver Foundation, Inc. OrgId: SF-1051 Address: 4695 Chabot Dr. Suite 200 City: Pleasanton StateProv: CA PostalCode: 94588 Country: US RegDate: 2023-03-07 Updated: 2025-04-23 Ref: https://rdap.arin.net/registry/entity/SF-1051 OrgNOCHandle: NOC33598-ARIN OrgNOCName: NOC OrgNOCPhone: +1-408-740-7420 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN OrgAbuseHandle: ABUSE9292-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-408-740-7420 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9292-ARIN OrgTechHandle: NOC33598-ARIN OrgTechName: NOC OrgTechPhone: +1-408-740-7420 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN # end # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you see inaccuracies in the results, please report at # https://www.arin.net/resources/registry/whois/inaccuracy_reporting/ # # Copyright 1997-2026, American Registry for Internet Numbers, Ltd. # Found a referral to rwhois.he.net:4321. %rwhois V-1.5:0012b7:00 concierge.he.net (HE-RWHOISd v:dd31ac8) network:ID;I:NET-65.49.1.0/24 network:Auth-Area:nets network:Class-Name:network network:Network-Name;I:NET-65.49.1.0/24 network:Parent;I:NET-65.49.0.0/17 network:IP-Network:65.49.1.0/24 network:Org-Contact;I:POC-CE-2897 network:Tech-Contact;I:POC-HE-NOC network:Abuse-Contact;I:POC-HE-ABUSE network:NOC-Contact;I:POC-HE-NOC network:Created:20230602163031000 network:Updated:20230602163031000 contact:ID;I:POC-CE-2897 contact:Auth-Area:contacts contact:Class-Name:contact contact:Name:Richard Perlotto contact:Company:The Shadow Server Foundation contact:Street-Address:4695 Chabot Dr. Suite 200 contact:City:Pleasanton contact:Province:CA contact:Postal-Code:94588 contact:Country-Code:US contact:Phone:- contact:E-Mail:- contact:Created:20180817203001000 contact:Updated:20220114163002000 contact:ID;I:POC-HE-NOC contact:Auth-Area:contacts contact:Class-Name:contact contact:Name:Network Operations Center contact:Company:Hurricane Electric contact:Street-Address:760 Mission Ct contact:City:Fremont contact:Province:CA contact:Postal-Code:94539 contact:Country-Code:US contact:Phone:+1-510-580-4100 contact:E-Mail:[email protected] contact:Created:20100901200738000 contact:Updated:20100901200738000 contact:ID;I:POC-HE-ABUSE contact:Auth-Area:contacts contact:Class-Name:contact contact:Name:Abuse Department contact:Company:Hurricane Electric contact:Street-Address:760 Mission Ct contact:City:Fremont contact:Province:CA contact:Postal-Code:94539 contact:Country-Code:US contact:Phone:+1-510-580-4100 contact:E-Mail:[email protected] contact:Created:20100901200738000 contact:Updated:20100901200738000 contact:Comment:For email abuse (spam) only %ok