79.124.49.174

Classification: Suspicious

79.124.49.174 is a suspicious IP address. Reported by 7 threat sources, last seen 2026-08-09. Network: AS50360 Tamatiya EOOD.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Port Scanner AbuseIPDB 2025-08-20 20:41:34 2026-08-09 15:00:34 anomalous-activity attacker malicious-activity reconnaissance
HTTP Scrapper AbuseIPDB 2025-09-04 12:22:28 2026-08-09 08:43:37 anomalous-activity attacker malicious-activity
HTTP Attacker AbuseIPDB 2025-09-13 18:00:50 2026-08-09 08:43:37 attacker malicious-activity
Hacking AbuseIPDB 2025-08-26 13:18:45 2026-08-09 08:43:37 attacker malicious-activity
Bruteforce AbuseIPDB 2025-08-28 07:11:29 2026-08-09 06:42:41 attacker malicious-activity
Malicious Host AbuseIPDB 2024-07-10 00:18:01 2026-08-08 15:07:38 attacker compromised malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2026-02-10 02:20:19 2026-08-07 09:08:01 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2026-02-10 02:20:13 2026-08-07 09:07:59 attacker malicious-activity
SSH Attacker AbuseIPDB 2025-08-29 13:45:06 2026-08-06 07:00:24 attacker malicious-activity
DDoS Attacker AbuseIPDB 2025-09-13 18:00:50 2026-08-05 21:20:03 attacker malicious-activity
Known Attacker AbuseIPDB 2026-05-08 22:30:09 2026-08-05 21:20:03 attacker malicious-activity
Malicious Host CIArmy 2024-07-12 23:21:18 2026-08-05 20:01:22 attacker malicious-activity
SIP Attacker AbuseIPDB 2026-01-14 09:36:00 2026-07-25 07:35:32 attacker malicious-activity
SQL Injection AbuseIPDB 2026-02-09 18:58:31 2026-07-21 19:01:49 attacker malicious-activity
IoT Attacker AbuseIPDB 2026-05-22 23:38:14 2026-07-12 16:29:58 iot malicious-activity
Mail Spammer AbuseIPDB 2025-09-13 12:51:01 2026-07-03 12:42:47 attacker malicious-activity
FTP Attacker AbuseIPDB 2026-05-23 06:00:28 2026-05-30 06:01:10 malicious-activity
Proxy AbuseIPDB 2026-05-26 05:49:46 2026-05-29 01:43:30 anonymization
DNS Compromise AbuseIPDB 2025-09-13 13:21:05 2026-05-20 17:03:37 compromised
DNS Poisoning AbuseIPDB 2025-11-21 00:10:53 2026-05-16 19:47:30 compromised
Suspicious Host AbuseIPDB 2025-08-26 15:36:57 2026-04-16 13:16:43 anomalous-activity
Malicious Host HoneyDB 2025-11-29 00:00:00 2025-11-29 00:00:00 malicious-activity
Unauthorized scanning of hosts Blocklist.net.ua 2024-12-08 14:59:55 2024-12-08 14:59:55 malicious-activity
HTTP Attacker Blocklist.de 2024-08-04 08:28:00 2024-09-11 07:07:03 malicious-activity
HTTP bot Blocklist.de 2023-06-01 03:46:16 2023-06-02 03:36:07 malicious-activity
HTTP Scrapper Maltiverse 2023-04-27 05:49:31 2023-05-31 19:50:15 anomalous-activity
HTTP Attacker Maltiverse 2023-04-26 03:08:17 2023-05-31 19:50:15 malicious-activity
Bruteforce Maltiverse 2023-03-20 10:01:57 2023-05-31 19:50:15 malicious-activity
DDoS attack Maltiverse 2023-05-02 22:11:50 2023-05-31 12:08:36 malicious-activity
Hacking Maltiverse 2023-04-26 03:08:17 2023-05-30 19:09:21 malicious-activity
SSH Attacker Maltiverse 2023-05-11 09:11:59 2023-05-11 09:11:59 malicious-activity
Port Scanner Maltiverse 2023-03-03 21:12:39 2023-05-02 22:11:50 anomalous-activity

Tags

attacker spam bruteforce bot apache ddos rfi abuse

Whois information

AS name
AS50360 Tamatiya EOOD
AS registry
ripencc
AS date
2007-07-31 00:00:00
AS CIDR
79.124.49.0/24
CIDR
79.124.49.0/24
Registrant
Tamatiya EOOD
Address
35, Ivan Vazov str., Sopot, Bulgaria
City
Sofia
Postal code
1000
Country
BG — Bulgaria 🇧🇬
Contact email
[email protected], [email protected]
First indexed
2023-06-01 03:46:16
Last updated
2026-08-09 15:03:12

Malicious IPs in the same CIDR

79.124.49.90 79.124.49.70 79.124.49.130 79.124.49.102 79.124.49.58 79.124.49.134 79.124.49.154