JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 162.243.53.48

162.243.53.48 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 38%: ?

38%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Secaucus, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 162.243.53.48

Whois 162.243.53.48

IP Abuse Reports for 162.243.53.48:

This IP address has been reported a total of 28 times from 26 distinct sources. 162.243.53.48 was first reported on February 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-04 22:27:44 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-06-04 19:05:23 (1 day ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=51	Hacking
🇩🇪 big-cloud.nl	2026-06-04 18:19:35 (1 day ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇮🇹 VHosting	2026-06-04 18:15:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 18:05:30 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 162.243.53.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 162.243.53.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:05:22.442334 2026] [security2:error] [pid 23016:tid 23016] [client 162.243.53.48:63026] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ablogisticsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ablogisticsgroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiG-YjMfST8-_9xleea_KQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-02-24 20:11:44 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-23 20:11:43 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 Anybody9975	2026-02-23 18:59:59 (3 months ago)	63 SSH login attempts on 2026-02-23	Brute-Force SSH
🇦🇺 Anytech	2026-02-23 02:31:56 (3 months ago)	CrowdSec detected: crowdsecurity/ssh-slow-bf	Brute-Force Web App Attack
🇳🇱 Study Bitcoin 🤗	2026-02-23 02:31:34 (3 months ago)	SSH Fail2Ban [srv62]	Brute-Force
Anonymous	2026-02-23 02:17:27 (3 months ago)	2026-02-23T03:15:50.775208+01:00 ubuntu sshd-session[251941]: Failed password for root from 162.243. ... show more 2026-02-23T03:15:50.775208+01:00 ubuntu sshd-session[251941]: Failed password for root from 162.243.53.48 port 43190 ssh2 2026-02-23T03:16:37.325874+01:00 ubuntu sshd-session[251970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.53.48 user=root 2026-02-23T03:16:39.714152+01:00 ubuntu sshd-session[251970]: Failed password for root from 162.243.53.48 port 44296 ssh2 2026-02-23T03:17:24.976892+01:00 ubuntu sshd-session[252013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.53.48 user=root 2026-02-23T03:17:26.757844+01:00 ubuntu sshd-session[252013]: Failed password for root from 162.243.53.48 port 45814 ssh2 ... show less	Brute-Force
🇺🇸 ras07	2026-02-23 02:00:08 (3 months ago)	SSH login attempts with user root.	Brute-Force SSH
🇩🇪 Threat Intelligence Agency	2026-02-23 01:54:19 (3 months ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-02-23T01:45:33Z and 2026-02- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-02-23T01:45:33Z and 2026-02-23T01:54:18Z show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-02-23 01:51:11 (3 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 wteiken	2026-02-23 01:50:50 (3 months ago)	2026-02-22T20:48:45.732018-05:00 nostromo.teiken.net sshd-session[3092242]: pam_unix(sshd:auth): aut ... show more 2026-02-22T20:48:45.732018-05:00 nostromo.teiken.net sshd-session[3092242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.53.48 user=root 2026-02-22T20:48:48.012819-05:00 nostromo.teiken.net sshd-session[3092242]: Failed password for root from 162.243.53.48 port 38236 ssh2 2026-02-22T20:49:47.534517-05:00 nostromo.teiken.net sshd-session[3092872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.53.48 user=root 2026-02-22T20:49:49.422082-05:00 nostromo.teiken.net sshd-session[3092872]: Failed password for root from 162.243.53.48 port 35734 ssh2 2026-02-22T20:50:47.026439-05:00 nostromo.teiken.net sshd-session[3093502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.53.48 user=root 2026-02-22T20:50:49.118010-05:00 nostromo.teiken.net sshd-session[3093502]: Failed password for root from 162.243.53.48 port 50390 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 79.119.61.147

🇺🇸 216.132.133.26

🇹🇷 212.87.199.64

🇲🇽 201.123.96.185

🇷🇺 178.178.222.53

🇮🇳 103.123.53.88

🇺🇸 50.187.96.100

🇸🇬 43.156.60.15

🇨🇳 14.22.23.243

🇪🇹 196.190.43.162

🇧🇪 172.253.248.58

🇺🇸 162.216.150.109

🇺🇸 142.93.26.70

🇸🇪 85.203.44.153

🇪🇸 79.116.109.219

🇭🇰 154.198.162.75

🇵🇰 59.103.108.151

🇱🇹 45.227.254.170

🇬🇧 2a06:4880:4000::6a

🇩🇪 213.209.159.56