JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.51.253.83

49.51.253.83 was found in our database!

This IP was reported 2,633 times. Confidence of Abuse is 100%: ?

100%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.51.253.83

Whois 49.51.253.83

IP Abuse Reports for 49.51.253.83:

This IP address has been reported a total of 2,633 times from 338 distinct sources. 49.51.253.83 was first reported on September 16th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-08-21 15:33:17 (9 hours ago)	Brute force	Brute-Force
🇵🇱 Budyn	2026-08-21 10:31:17 (14 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: minio.astropot.store \| URI: /wp-admin/admin-ajax.php \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-21 09:38:51 (15 hours ago)	FortiWeb WAF: 20 attacks detected. Threat Score: 5200. Types: Client Management(10), Block IP List(1 ... show more FortiWeb WAF: 20 attacks detected. Threat Score: 5200. Types: Client Management(10), Block IP List(10). Origin: United States. show less	Web App Attack
🇫🇮 as211431.net	2026-08-21 08:58:17 (16 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇹🇷 neron	2026-08-21 08:25:58 (16 hours ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇲🇽 FenixHunter🐦‍🔥	2026-08-21 04:13:37 (21 hours ago)	Blocked TLS Cipher Downgrade Attemp. Action Performed: DROP	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 sdos.es	2026-08-21 04:05:15 (21 hours ago)	"Multiple/Conflicting Connection Header Data Found - keep-alive, close"	Web App Attack
🇩🇪 big-cloud.nl	2026-08-20 14:19:43 (1 day ago)	Try to access /xmlrpc.php	Web App Attack
🇪🇸 librebit	2026-08-20 13:52:13 (1 day ago)	Brute force	Brute-Force
🇵🇱 Budyn	2026-08-20 12:18:03 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.sweetpuddingtrap.xyz \| URI: /.env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇹🇷 neron	2026-08-20 02:26:20 (1 day ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 JustMeHere	2026-08-19 18:16:20 (2 days ago)	[Wed Aug 19 14:16:16.405049 2026] [security2:error] [pid 807:tid 917] [client 49.51.253.83:33450] Mo ... show more [Wed Aug 19 14:16:16.405049 2026] [security2:error] [pid 807:tid 917] [client 49.51.253.83:33450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "aoXy8BBXa4C7KWqTLhIEAwAAAA4"] ... show less	Web App Attack
🇪🇸 librebit	2026-08-19 11:00:09 (2 days ago)	Brute force	Brute-Force
Anonymous	2026-08-19 09:40:42 (2 days ago)	FortiWeb WAF: 16 attacks detected. Threat Score: 5000. Types: Client Management(8), Block IP List(8) ... show more FortiWeb WAF: 16 attacks detected. Threat Score: 5000. Types: Client Management(8), Block IP List(8). Origin: United States. show less	Web App Attack
🇭🇷 aktonrs	2026-08-19 05:53:32 (2 days ago)	Blocked by https://aegis.hr — Aegis Single-Hit — Reputation-gated GET / probe - (MITRE T1595.002), 1 ... show more Blocked by https://aegis.hr — Aegis Single-Hit — Reputation-gated GET / probe - (MITRE T1595.002), 1 attempts, Period: 2026-08-19 05:15:51 to 2026-08-19 05:15:51 show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 2633 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.66.32.168

🇩🇪 167.94.146.36

🇷🇴 92.118.39.50

🇧🇬 91.148.190.150

🇺🇸 47.77.182.54

🇺🇸 2a02:4780:1:1548:0:1906:1341:1

🇧🇷 205.210.31.205

🇲🇽 201.114.106.35

🇳🇱 185.226.197.83

🇺🇸 162.216.150.204

🇺🇸 162.216.149.176

🇺🇸 103.215.74.26

🇺🇸 100.29.192.38

🇺🇸 66.132.195.84

🇺🇸 52.173.121.69

🇧🇷 189.39.139.121

🇺🇸 172.237.136.213

🇻🇳 165.99.16.96

🇫🇷 91.196.152.196

🇨🇦 85.217.149.52