JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.149.185.24

Recent Activity

Abuse Confidence Score

58% Elevated

61 reports

32 reporters · latest 7 hours ago

ISP: BL Networks
Usage Type: Data Center/Web Hosting/Transit
ASN: AS399629
Domain Name: blnwx.com
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

61 from 32 distinct reporters

First reported

November 27th 2023

Most recent report

7 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 3 🇨🇦 Canada 1

Most common categories Port Scan 8 Brute-Force 2 DDoS Attack 1 Web App Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 reznekcs	2026-11-07 06:01:16 UTC · (7 hours ago)	Blocked by UFW firewall	Brute-Force
🇫🇷 manah	2026-11-07 00:01:05 UTC · (13 hours ago)	Port scan and/or repeated connection to closed ports (daily report)	Port Scan
🇫🇷 uthul	2026-11-06 14:22:12 UTC · (22 hours ago)	T-Pot honeypot: 63 hits on ports [80, 1337, 4443, 7000, 7443, 8000, 8080, 8082, 8888, 9000] (automated)	Port Scan Web App Attack
🇮🇪 wiredalter	2026-11-06 12:06:33 UTC · (1 day ago)	Blocked by UFW on vhVPS [9001/tcp] Source Port: 42269 TTL: 242 Packet Length: 40 TOS: 0x08 Analyzed by https://ip.wiredalter.com	Port Scan Brute-Force
🇩🇪 phil2k	2026-11-06 11:55:27 UTC · (1 day ago)	fail2ban:firewall:2026-11-06T12:08:20.536295+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=193.149.185.24 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=56771 PROTO=TCP SPT=42269 DPT=9000 WINDOW=1024 RE ... show more fail2ban:firewall:2026-11-06T12:08:20.536295+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=193.149.185.24 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=56771 PROTO=TCP SPT=42269 DPT=9000 WINDOW=1024 RES=0x00 SYN URGP=0 2026-11-06T12:55:24.031280+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=193.149.185.24 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=15962 PROTO=TCP SPT=42269 DPT=9443 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇨🇦 Tanados	2026-11-06 11:50:56 UTC · (1 day ago)	Blocked by UFW [8000/tcp] Source port: 42269 TTL: 239 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇵🇱 ToJa	2026-11-06 11:46:40 UTC · (1 day ago)	Port scan [Jail 120], blocked after 4 attempts. The last one: Client: 193.149.185.24, Port: TCP/8443	Port Scan
🇫🇷 Little Iguana	2026-11-06 11:13:33 UTC · (1 day ago)	trying to access non-authorized port	Port Scan
🇩🇪 _ArminS_	2026-11-06 11:09:45 UTC · (1 day ago)	SP-Scan 42269:9000 detected 2026.11.06 12:09:45 blocked until 2026.12.26 05:12:32	Port Scan
Anonymous	2023-11-28 09:52:06 UTC · (2 years ago)	automaticly reported by Fail2Ban	Brute-Force SSH
🇩🇪 suble.org	2023-11-28 09:49:11 UTC · (2 years ago)	Nov 28 10:36:31 swsrv sshd[1859635]: User root from 193.149.185.24 not allowed because not listed in AllowUsers Nov 28 10:44:13 swsrv sshd[1859844]: User root from 193.149.185.24 not allowed because not listed in AllowUsers Nov 28 10:46:40 swsrv sshd ... show more Nov 28 10:36:31 swsrv sshd[1859635]: User root from 193.149.185.24 not allowed because not listed in AllowUsers Nov 28 10:44:13 swsrv sshd[1859844]: User root from 193.149.185.24 not allowed because not listed in AllowUsers Nov 28 10:46:40 swsrv sshd[1859944]: User root from 193.149.185.24 not allowed because not listed in AllowUsers Nov 28 10:49:10 swsrv sshd[1859982]: User root from 193.149.185.24 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-11-28 09:48:28 UTC · (2 years ago)	(sshd) Failed SSH login from 193.149.185.24 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 28 03:40:15 14241 sshd[18672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... show more (sshd) Failed SSH login from 193.149.185.24 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 28 03:40:15 14241 sshd[18672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.149.185.24 user=root Nov 28 03:40:16 14241 sshd[18672]: Failed password for root from 193.149.185.24 port 35456 ssh2 Nov 28 03:45:54 14241 sshd[18991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.149.185.24 user=root Nov 28 03:45:55 14241 sshd[18991]: Failed password for root from 193.149.185.24 port 57916 ssh2 Nov 28 03:48:10 14241 sshd[19163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.149.185.24 user=root show less	Brute-Force SSH
🇭🇺 HoneyPotEu	2023-11-28 09:43:51 UTC · (2 years ago)	Nov 28 10:43:50 [redacted] sshd[553247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.149.185.24 user=root Nov 28 10:43:51 [redacted] sshd[553247]: Failed password fo ...	Brute-Force SSH
🇩🇪 SUNDAIR	2023-11-28 08:38:54 UTC · (2 years ago)	(sshd) Failed SSH login from 193.149.185.24 (GB/United Kingdom/England/London/-/[redacted])	Brute-Force SSH
🇮🇹 GV	2023-11-28 07:00:28 UTC · (2 years ago)	Nov 28 07:54:31 localhost sshd\[19517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.149.185.24 user=root Nov 28 07:54:32 localhost sshd\[19517\]: Failed password for root from 193.149.185.24 port 5 ... show more Nov 28 07:54:31 localhost sshd\[19517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.149.185.24 user=root Nov 28 07:54:32 localhost sshd\[19517\]: Failed password for root from 193.149.185.24 port 50024 ssh2 Nov 28 08:00:24 localhost sshd\[20312\]: Invalid user stack from 193.149.185.24 Nov 28 08:00:24 localhost sshd\[20312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.149.185.24 Nov 28 08:00:26 localhost sshd\[20312\]: Failed password for invalid user stack from 193.149.185.24 port 40206 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 173.239.240.101

🇺🇸 161.35.114.4

🇵🇭 104.28.252.30

🇺🇸 50.6.200.164

🇺🇸 45.131.194.138

🇧🇷 187.35.0.74

🇳🇱 185.223.235.48

🇺🇦 91.214.137.148

🇷🇴 89.32.41.104

🇳🇱 45.148.10.157

🇳🇱 45.148.10.121

🇺🇸 45.80.104.47

🇨🇳 43.242.97.26

🇰🇷 1.238.106.229

🇳🇱 193.47.62.69

🇺🇸 192.169.232.223

🇨🇳 183.63.125.162

🇺🇸 146.88.241.20

🇩🇪 102.220.163.249

🇺🇸 100.29.192.78