This IP address has been reported a total of
4
times from
2 distinct
sources.
115.55.130.202 was first reported on
October 15th 2026 , and the most recent report was
23 hours ago France
with 3
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Hacking
3
times;
Brute-Force
3
times;
Exploited Host
3
times;
IoT Targeted
3
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
abdullahmughal
2026-10-18 06:04:58
(23 hours ago)
Jaal Deceptive Lab: Unauthorized malicious activity observed.
• Targets: Telnet:23 (78725 sessions b ...
show more
Jaal Deceptive Lab: Unauthorized malicious activity observed.
• Targets: Telnet:23 (78725 sessions between 2026-10-16 06:02 UTC and 2026-10-17 06:04 UTC)
• Activity:
- Credential stuffing targeting accounts: [root, support, admin, telecomadmin, user]
- Probes / input: start, enable, config terminal
- Dropper URL: hxxp://42[.]53[.]12[.]33:58009/i
- Quarantined payloads: 49 binary sample(s) captured
• Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded.
show less
Hacking
Brute-Force
Exploited Host
IoT Targeted
🇫🇷
abdullahmughal
2026-10-17 06:02:18
(1 day ago)
Jaal Deceptive Lab: Unauthorized malicious activity observed.
• Targets: Telnet:23 (107026 sessions ...
show more
Jaal Deceptive Lab: Unauthorized malicious activity observed.
• Targets: Telnet:23 (107026 sessions between 2026-10-15 02:02 UTC and 2026-10-16 06:01 UTC)
• Activity:
- Credential stuffing targeting accounts: [root, tech, admin, ximo, cht]
- Probes / input: start, enable, config terminal
- Dropper URL: hxxp://42[.]53[.]12[.]33:58009/i
- Quarantined payloads: 311 binary sample(s) captured
• Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded.
show less
Hacking
Brute-Force
Exploited Host
IoT Targeted
🇫🇷
abdullahmughal
2026-10-16 02:02:48
(3 days ago)
Jaal Deceptive Lab: Unauthorized malicious activity observed.
• Targets: Telnet:23 (1785 sessions be ...
show more
Jaal Deceptive Lab: Unauthorized malicious activity observed.
• Targets: Telnet:23 (1785 sessions between 2026-10-14 23:30 UTC and 2026-10-15 02:01 UTC)
• Activity:
- Credential stuffing targeting accounts: [root, admin, cunmgadmin, user, nmgcuadmin]
- Probes / input: start, enable, config terminal
- Dropper URL: hxxp://42[.]53[.]12[.]33:58009/i
- Quarantined payloads: 312 binary sample(s) captured
• Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded.
show less
Hacking
Brute-Force
Exploited Host
IoT Targeted
2026-10-15 03:47:02
(4 days ago)
denied traffic to a non-approved destination port. destination port 37215.
Port Scan
Showing 1 to
4
of 4 reports
