61.138.154.240

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
46% Elevated
13 reports
9 reporters · latest 1 hour ago
ISP
China Unicom IP network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Changchun, Jilin
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
13 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 3 🇨🇿 Czechia 1
Most common categories Web App Attack 12 Hacking 4 Brute-Force 2 Bad Web Bot 1 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 WeCloudit-Anti-Abuse
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack Hacking
Anonymous
| [Dangerous/China] Aggressive IP 61.138.154.240 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack Hacking SQL Injection
🇺🇸 OceanTreasure
tcp/443; Probe for a 'system1.php' PHP backdoor/command-execution script left behind by mass-compromise toolkits, requested during a distributed webshell filename enumeration sweep: "GET /system1.php" @ 2026-11-13T03:14:44Z [proxy]
Web App Attack Exploited Host
🇬🇧 CrystalMaker
PHP vulnerability scan - GET /1.php
Web App Attack
Anonymous
Hacking Web App Attack
🇩🇪 LRob
Web shell probe | method: GET | path: /indexback.php | ua: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 | 2026-10-29 17:04 UTC
Hacking Web App Attack
Anonymous
Web application attack detected.
Web App Attack
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 | 2026-10-20 13:55 UTC
Bad Web Bot
🇺🇸 mnsf
Too many Status 40X (15) Scanning/Probing (23)
Brute-Force Web App Attack
🇲🇽 octageeks.com
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸 mnsf
Abuse Detected (9)
Brute-Force Web App Attack
🇩🇪 LRob
Web App Attack
🇩🇪 LRob
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 189.219.67.27
🇹🇬 102.64.166.36
🇫🇮 194.99.27.60
🇷🇺 194.67.103.18
🇮🇳 117.223.142.205
🇫🇷 90.118.193.9
🇦🇷 45.165.44.42
🇳🇱 45.148.10.152
🇵🇰 43.230.94.191
🇩🇪 217.244.140.207
🇭🇰 203.218.203.93
🇺🇸 194.180.232.130
🇷🇴 193.46.255.86
🇫🇷 185.101.20.125
🇧🇷 172.71.234.206
🇺🇸 172.68.71.162
🇺🇸 104.22.56.14
🇺🇸 104.22.1.99
🇺🇸 66.132.159.27
🇲🇾 47.250.182.206
feedback