JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.48.253.83

61.48.253.83 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	China Unicom Beijing province network
Usage Type	Fixed Line ISP
ASN	AS4808
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.48.253.83

Whois 61.48.253.83

IP Abuse Reports for 61.48.253.83:

This IP address has been reported a total of 56 times from 48 distinct sources. 61.48.253.83 was first reported on August 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-14 06:00:12 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇵🇱 mkey	2026-08-04 07:20:06 (3 weeks ago)	[First: 2026-08-04 03:02:37/single] HITS=1 Repeated suspicious IDS-detected activity; sample=WEB-ATA ... show more [First: 2026-08-04 03:02:37/single] HITS=1 Repeated suspicious IDS-detected activity; sample=WEB-ATACK: Invalid destination host in header show less	Port Scan Hacking Web App Attack
🇩🇪 DyhnenTv	2026-08-04 06:50:28 (3 weeks ago)	CrowdSec webserver: crowdsecurity/http-cve-2021-41773	Web App Attack Bad Web Bot
🇮🇳 evicky2002	2026-08-04 06:00:00 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 CBJ	2026-08-04 05:20:47 (3 weeks ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇩🇪 ipcop.net	2026-08-04 05:03:05 (3 weeks ago)	Aug 4 07:01:21 bongen-tmp-rt.local sshd[279978]: Connection closed by authenticating user admin 61. ... show more Aug 4 07:01:21 bongen-tmp-rt.local sshd[279978]: Connection closed by authenticating user admin 61.48.253.83 port 43890 [preauth] Aug 4 07:01:54 bongen-tmp-rt.local sshd[279994]: Invalid user orangepi from 61.48.253.83 port 35398 Aug 4 07:01:55 bongen-tmp-rt.local sshd[279994]: Connection closed by invalid user orangepi 61.48.253.83 port 35398 [preauth] Aug 4 07:02:29 bongen-tmp-rt.local sshd[280091]: Connection closed by authenticating user root 61.48.253.83 port 51646 [preauth] Aug 4 07:03:03 bongen-tmp-rt.local sshd[280100]: Connection closed by authenticating user root 61.48.253.83 port 37498 [preauth] show less	Brute-Force
🇩🇪 iNetWorker	2026-08-04 04:20:59 (3 weeks ago)	firewall-block, port(s): 443/tcp	Port Scan
🇨🇿 ICT KnTl	2026-08-04 04:17:01 (3 weeks ago)	[Tue Aug 04 06:16:26.822392 2026] [php7:error] [pid 1307203:tid 1307203] [client 61.48.253.83:38616] ... show more [Tue Aug 04 06:16:26.822392 2026] [php7:error] [pid 1307203:tid 1307203] [client 61.48.253.83:38616] script '/var/www/html/index.php' not found or unable to stat [Tue Aug 04 06:16:28.110998 2026] [php7:error] [pid 1307203:tid 1307203] [client 61.48.253.83:38616] script '/var/www/html/index.php' not found or unable to stat [Tue Aug 04 06:17:01.192478 2026] [php7:error] [pid 1307203:tid 1307203] [client 61.48.253.83:38616] script '/var/www/html/index.php' not found or unable to stat ... show less	Web App Attack
🇺🇸 nasset	2026-08-04 04:06:37 (3 weeks ago)	2026-08-03T21:05:52.570600-07:00 ftp-green sshd[3138494]: Connection closed by invalid user admin 61 ... show more 2026-08-03T21:05:52.570600-07:00 ftp-green sshd[3138494]: Connection closed by invalid user admin 61.48.253.83 port 51712 [preauth] 2026-08-03T21:06:33.534430-07:00 ftp-green sshd[3138498]: Invalid user orangepi from 61.48.253.83 port 42100 2026-08-03T21:06:33.537053-07:00 ftp-green sshd[3138498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.48.253.83 2026-08-03T21:06:35.985149-07:00 ftp-green sshd[3138498]: Failed password for invalid user orangepi from 61.48.253.83 port 42100 ssh2 2026-08-03T21:06:36.958766-07:00 ftp-green sshd[3138498]: Connection closed by invalid user orangepi 61.48.253.83 port 42100 [preauth] ... show less	Brute-Force SSH
🇺🇸 MPL	2026-08-04 03:58:52 (3 weeks ago)	tcp/2222 (2 or more attempts)	Port Scan
🇩🇪 ghostwarriors	2026-08-04 03:50:11 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 xmission.com	2026-08-04 03:42:48 (3 weeks ago)	Blocked by UFW (TCP on 80) Source port: 61218 TTL: 48 Packet length: 44 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 61218 TTL: 48 Packet length: 44 TOS: 0x08 This report (for 61.48.253.83) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 xmission.com	2026-08-04 02:44:13 (3 weeks ago)	Blocked by UFW (TCP on 80) Source port: 61589 TTL: 48 Packet length: 44 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 61589 TTL: 48 Packet length: 44 TOS: 0x08 This report (for 61.48.253.83) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇳🇱 majo-it.nl	2026-08-04 02:16:50 (3 weeks ago)	Aug 4 02:16:47 fail2ban sshd[3969702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Aug 4 02:16:47 fail2ban sshd[3969702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.48.253.83 Aug 4 02:16:49 fail2ban sshd[3969702]: Failed password for invalid user admin from 61.48.253.83 port 34484 ssh2 ... show less	Brute-Force SSH
🇭🇰 amyriad	2026-08-04 02:14:21 (3 weeks ago)	61.48.253.83 - - [04/Aug/2026:10:14:19 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.p ... show more 61.48.253.83 - - [04/Aug/2026:10:14:19 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "libredtail-http" 61.48.253.83 - - [04/Aug/2026:10:14:20 +0800] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "libredtail-http" 61.48.253.83 - - [04/Aug/2026:10:14:20 +0800] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "libredtail-http" ... show less	DDoS Attack Hacking Brute-Force

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.217

🇺🇸 198.74.58.213

🇦🇷 190.244.160.202

🇩🇪 185.100.159.165

🇺🇸 135.119.92.148

🇺🇸 103.143.231.24

🇳🇱 85.11.167.212

🇸🇦 82.167.19.42

🇱🇹 77.90.185.20

🇨🇳 58.19.78.97

🇳🇱 45.142.193.196

🇩🇪 5.231.120.194

🇩🇪 5.231.120.191

🇺🇸 216.180.246.34

🇨🇳 211.159.162.128

🇧🇷 205.210.31.137

🇦🇷 201.177.29.112

🇺🇸 195.184.76.94

🇲🇽 189.218.49.90

🇺🇸 64.62.197.104