149.248.79.52

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
53% Elevated
9 reports
9 reporters · latest 15 minutes ago
ISP
BL Networks
Usage Type
Data Center/Web Hosting/Transit
ASN
AS399629
Domain Name
blnwx.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
9 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇺🇸 United States of America 2 🇭🇰 Hong Kong 1
Most common categories Port Scan 4 Bad Web Bot 3 Web App Attack 2 Hacking 1 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Web application exploitation attempts blocked at the web server edge
Web App Attack
🇮🇳 nadnitin
Automated block via Nginx Police. Detected: IP-SCANNER attempting probe 'GET /api/metrics/run'.
Port Scan
🇳🇱 Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-ams6-1)
Hacking Bad Web Bot
🇫🇷 security.rdmc.fr
Web scan: 4xx requests without User-Agent
Web App Attack Bad Web Bot
Anonymous
149.248.79.52 - - [06/Nov/2026:20:12:28 +0200] "GET /abc6 HTTP/1.1" 404 250 149.248.79.52 - - [06/Nov/2026:20:12:28 +0200] "GET /abc7 HTTP/1.1" 404 250 149.248.79.52 - - [06/Nov/2026:20:12:28 +0200] "GET /abc8 HTTP/1.1" 404 250
Bad Web Bot
🇯🇵 xamb
Honeypot: 6 unsolicited connection(s) to decoy HTTP.
Port Scan
🇺🇸 lavnet.net
Brute-Force
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 36 application-level events across 4 target ports and 36 source port(s). Ports: 4443/service, 8081/HTTP, 9443/service, 31337/service. Sensors: Honeytrap.
Port Scan
🇭🇰 sandra361
Port scan detected: 8 packets across 1 port (9000). | Evidence: GHOST_SCAN: IN=eth0 SRC=149.248.79.52 LEN=60 TOS=0x14 PREC=0x00 TTL=53 ID=61748 DF PROTO=TCP SPT=59842 DPT=9000 WINDOW=64240 RES=0x00 SYN URGP=0
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 202.47.47.8
🇺🇸 173.239.211.150
🇺🇸 152.163.101.109
🇮🇳 103.59.134.216
🇷🇴 92.118.39.50
🇫🇷 91.231.89.215
🇮🇳 91.203.132.5
🇺🇸 76.104.112.134
🇳🇱 45.148.10.157
🇷🇴 2.57.122.150
🇵🇰 202.47.45.215
🇺🇸 137.184.26.158
🇨🇳 123.129.205.22
🇨🇳 116.179.37.217
🇲🇺 102.117.175.121
🇺🇸 35.253.203.198
🇨🇦 35.203.54.186
🇧🇪 198.235.24.137
🇺🇸 147.185.132.174
🇳🇱 77.239.124.157
feedback