JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.248.79.205

Recent Activity

Abuse Confidence Score

100% Critical

26 reports

21 reporters · latest 8 hours ago

ISP: BL Networks
Usage Type: Data Center/Web Hosting/Transit
ASN: AS399629
Domain Name: blnwx.com
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

26 from 21 distinct reporters

First reported

November 6th 2026

Most recent report

8 hours ago

Last 60 days

Top reporter locations 🇫🇷 France 6 🇬🇧 United Kingdom of Great Britain and Northern Ireland 3 🇸🇬 Singapore 3

Most common categories Web App Attack 19 Brute-Force 9 Bad Web Bot 5 Hacking 4 Port Scan 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 copestack	2026-11-07 02:30:12 UTC · (8 hours ago)	Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)	Web App Attack
🇫🇷 Kejult	2026-11-07 00:03:00 UTC · (10 hours ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 9 payload-bearing connection/event(s), 3119 payload byte(s) total, maximum payload 517 byte(s). Target port(s): 11601.	Port Scan Hacking
🇹🇷 oalver	2026-11-06 23:56:50 UTC · (10 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_http. Sources: honeypot. First seen: 2026-11-06. Risk score: 30/100.	Web App Attack
🇳🇴 Abuse Buster	2026-11-06 23:37:33 UTC · (11 hours ago)	149.248.79.205 - - [07/Nov/2026:00:37:32 +0100] "GET /api/metrics/run HTTP/1.1" 400 248 "-" "-" ...	Web App Attack
🇸🇬 itachi1706	2026-11-06 23:29:18 UTC · (11 hours ago)	149.248.79.205 - - [07/Nov/2026:07:29:13 +0800] "GET /api/metrics/run HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [07/Nov/2026:07:29:14 +0800] "GET / HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [07/Nov/2026:07:29:14 +0800] "GET / HTTP/1.1" 400 264 ... show more 149.248.79.205 - - [07/Nov/2026:07:29:13 +0800] "GET /api/metrics/run HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [07/Nov/2026:07:29:14 +0800] "GET / HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [07/Nov/2026:07:29:14 +0800] "GET / HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [07/Nov/2026:07:29:17 +0800] "GET / HTTP/1.1" 400 264 "-" "-" ... show less	Brute-Force Web App Attack
🇨🇳 WMK965	2026-11-06 23:22:57 UTC · (11 hours ago)	Malicious requests IP: 149.248.79.205 Time: 07/Nov/2026:07:22:44 +0800 User-Agent: - Activities: "GET /api/metrics/run HTTP/1.1" 302 142 "-" "\x00\x01\x00\x01\x00\x00\x00\x01\x00\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xC9o\x00\ ... show more Malicious requests IP: 149.248.79.205 Time: 07/Nov/2026:07:22:44 +0800 User-Agent: - Activities: "GET /api/metrics/run HTTP/1.1" 302 142 "-" "\x00\x01\x00\x01\x00\x00\x00\x01\x00\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xC9o\x00\x00\x00\x00\x00\x00\x00\xC0{\"version\":\"0.69.1\",\"hostname\":\"scanner-probe-host-0001\",\"os\":\"darwin\",\"arch\":\"arm64\",\"privilege_key\":\"5abe744e9d3dfe7609a39d5ba456f723\",\"timestamp\":1782367876,\"client_spec\":{},\"pool_count\":1}" 400 154 "-" "\x00\x01\x00\x01\x00\x00\x00\x01\x00\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xC9o\x00\x00\x00\x00\x00\x00\x00\xC0{\"version\":\"0.69.1\",\"hostname\":\"scanner-probe-host-0001\",\"os\":\"darwin\",\"arch\":\"arm64\",\"privilege_key\":\"5abe744e9d3dfe7609a39d5ba456f723\",\"timestamp\":1782367876,\"client_spec\":{},\"pool_count\":1}" 400 154 "-" show less	Port Scan Web App Attack
🇬🇧 Apache	2026-11-06 23:13:13 UTC · (11 hours ago)	(PERMBLOCK) 149.248.79.205 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs	Brute-Force
🇫🇷 Thibault Millant	2026-11-06 22:25:24 UTC · (12 hours ago)	149.248.79.205 - - [06/Nov/2026:22:24:59 +0000] "GET /api/metrics/run HTTP/1.1" 400 248 "-" "-" 149.248.79.205 - - [06/Nov/2026:22:25:00 +0000] "GET / HTTP/1.1" 400 248 "-" "-" 149.248.79.205 - - [06/Nov/2026:22:25:01 +0000] "GET / HTTP/1.1" 400 248 ... show more 149.248.79.205 - - [06/Nov/2026:22:24:59 +0000] "GET /api/metrics/run HTTP/1.1" 400 248 "-" "-" 149.248.79.205 - - [06/Nov/2026:22:25:00 +0000] "GET / HTTP/1.1" 400 248 "-" "-" 149.248.79.205 - - [06/Nov/2026:22:25:01 +0000] "GET / HTTP/1.1" 400 248 "-" "-" 149.248.79.205 - - [06/Nov/2026:22:25:06 +0000] "\x00\x01\x00\x01\x00\x00\x00\x01\x00\x5C\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xC9o\x00\x00\x00\x00\x00\x00\x00\xC0{\x22version\x22:\x220.69.1\x22,\x22hostname\x22:\x22scanner-probe-host-0001\x22,\x22os\x22:\x22darwin\x22,\x22arch\x22:\x22arm64\x22,\x22privilege_key\x22:\x225abe744e9d3dfe7609a39d5ba456f723\x22,\x22timestamp\x22:1782367876,\x22client_spec\x22:{},\x22pool_count\x22:1}" 400 150 "-" "-" 149.248.79.205 - - [06/Nov/2026:22:25:07 +0000] "\x00\x01\x00\x01\x00\x00\x00\x01\x00\x5C\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xC9o\x00\x00\x00\x00\x00\x00\x00\xC0{\x22version\x22:\x220.69.1\x22,\x22hostname\x22:\x22scanner-probe-host-0001\x22,\x22os\x22:\x22da ... show less	Brute-Force Exploited Host SSH
🇷🇺 safeinternet	2026-11-06 22:19:53 UTC · (12 hours ago)	Fail2ban: Nginx Bad Request	Brute-Force Web App Attack
🇵🇱 strefapi_com	2026-11-06 20:45:50 UTC · (14 hours ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇵🇱 strefapi_com	2026-11-06 19:33:01 UTC · (15 hours ago)	Brute-force on web app ...	Brute-Force Web App Attack
🇺🇸 drewf.ink	2026-11-06 18:53:11 UTC · (15 hours ago)	[18:53] Probed an open proxy (direct request to the proxy port)	Open Proxy
🇩🇪 Roper123	2026-11-06 18:31:43 UTC · (16 hours ago)	Web exploits	Web App Attack
🇫🇷 georgton.tech	2026-11-06 18:09:47 UTC · (16 hours ago)	149.248.79.205 - - [06/Nov/2026:15:09:44 -0300] "GET /api/metrics/run HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [06/Nov/2026:15:09:45 -0300] "GET / HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [06/Nov/2026:15:09:46 -0300] "GET / HTTP/1.1" 400 264 ... show more 149.248.79.205 - - [06/Nov/2026:15:09:44 -0300] "GET /api/metrics/run HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [06/Nov/2026:15:09:45 -0300] "GET / HTTP/1.1" 400 264 "-" "-" 149.248.79.205 - - [06/Nov/2026:15:09:46 -0300] "GET / HTTP/1.1" 400 264 "-" "-" ... show less	Bad Web Bot Web App Attack
🇳🇴 Abuse Buster	2026-11-06 18:00:37 UTC · (16 hours ago)	149.248.79.205 - - [06/Nov/2026:19:00:35 +0100] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03~\x9AjDJoV,\xE0\x7Fw\xBD\xB2n\xDCD\x92\xFB\xB4l\xF1\xD0\xDEQ\x02\x16\xF8PN\xAC8 \xDEe\|\xD5%\x18\xA1\x1A/\xB0\x0E\xEA\x99\x19M\xF3\xCBIZ,M\xDC\xBF{\x17vq\x8B ... show more 149.248.79.205 - - [06/Nov/2026:19:00:35 +0100] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03~\x9AjDJoV,\xE0\x7Fw\xBD\xB2n\xDCD\x92\xFB\xB4l\xF1\xD0\xDEQ\x02\x16\xF8PN\xAC8 \xDEe\|\xD5%\x18\xA1\x1A/\xB0\x0E\xEA\x99\x19M\xF3\xCBIZ,M\xDC\xBF{\x17vq\x8B6\xD0\xF5z\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 150 "-" "-" ... show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 89.21.67.185

🇳🇱 200.138.46.227

🇺🇸 172.200.195.165

🇺🇸 136.144.35.230

🇺🇸 134.33.97.170

🇳🇱 109.160.32.143

🇻🇳 103.14.48.254

🇺🇸 44.201.239.247

🇧🇪 35.187.35.191

🇧🇪 34.62.246.24

🇳🇱 200.138.46.236

🇬🇧 195.206.182.204

🇬🇧 193.163.125.183

🇳🇱 193.47.62.69

🇺🇸 172.239.71.244

🇺🇸 172.206.227.114

🇯🇵 163.44.101.46

🇻🇳 103.61.44.43

🇩🇪 87.156.183.124

🇳🇱 86.38.187.219