IP address


.279193.149.187.61
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
193.149.187.61 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-05-06 02:50:00.798000
Was present on blacklist at: 2026-05-03 02:50, 2026-05-04 02:50, 2026-05-05 02:50, 2026-05-06 02:50

Threat categories

TLRoleCategoryDetails
75 src scan port: 80, 443, 8000, 8080, 8443, 8888
25 src

Warden events (141)
2026-05-05
ReconScanning (node.ce2b59): 14
ReconScanning (node.9c1411): 38
2026-05-04
ReconScanning (node.ce2b59): 20
ReconScanning (node.9c1411): 10
2026-05-03
ReconScanning (node.ce2b59): 37
2026-05-02
ReconScanning (node.ce2b59): 22
DShield reports (IP summary, reports)
2026-05-02
Number of reports: 66
Distinct targets: 39
2026-05-03
Number of reports: 66
Distinct targets: 39
2026-05-04
Number of reports: 89
Distinct targets: 69
2026-05-05
Number of reports: 71
Distinct targets: 41
Origin AS
AS399629 - BLNWX
BGP Prefix
193.149.187.0/24
geo
United Kingdom, London
🕑 Europe/London
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
193.149.187.0 - 193.149.187.255
last_activity
2026-05-05 19:51:01
last_warden_event
2026-05-05 19:51:01
rep
0.2785714285714285
reserved_range
0
Shodan's InternetDB
Open ports: 80
Tags:
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:apache:http_server:2.4.41
ts_added
2026-05-02 17:35:21.733000
ts_last_update
2026-05-06 17:35:30.390000

Warden event timeline

DShield event timeline

Presence on blacklists