61.185.41.248
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Shanxi(SN) province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- xa.sn.cn
- Country
- 🇨🇳 China
- City
- Xi'an, Shaanxi
Abuse Reports
Total reports
66 from
29 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 61.185.41.248
2026-01-26T07:46:01+01:00 Invalid user NL5xUDpV2xRa from 61.185.41.248 port 51290
|
Brute-Force SSH | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=27525 dstport=22
|
Port Scan Hacking SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇬🇧 aug42 |
2026-01-08T03:51:46.307726+02:00 nexus6 sshd[2054379]: Invalid user NL5xUDpV2xRa from 61.185.41.248 port 33937
...
|
Brute-Force SSH | |
| 🇨🇭 Modules |
|
Port Scan SSH | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/61.185.41.248
|
SSH | |
| 🇦🇷 Bruno |
Port Scanner: 61.185.41.248
|
Port Scan | |
| 🇺🇸 RAP |
2025-12-09 03:33:52 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇬🇧 openstrike.co.uk |
8 packets to ports 22 2222
|
Brute-Force SSH | |
| Anonymous |
|
Brute-Force SSH | |
| 🇺🇸 SSP |
Automatic report from iptables firewall - detected malicious activity
|
DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH | |
| 🇺🇸 psh-ack |
Honeypot detection: SSH attack on port 22. Details: SSH banner exchange Recent activity: SSH on port 22 - SSH banner exchange
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown