This IP address has been reported a total of
4,035
times from
1,112 distinct
sources.
202.145.0.61 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Apr 11 14:46:31 authie-ny-5 sshd[2371024]: Failed password for root from 202.145.0.61 port 50792 ssh ...
show moreApr 11 14:46:31 authie-ny-5 sshd[2371024]: Failed password for root from 202.145.0.61 port 50792 ssh2
Apr 11 14:48:16 authie-ny-5 sshd[2379249]: Invalid user user1 from 202.145.0.61 port 53080
Apr 11 14:48:16 authie-ny-5 sshd[2379249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.145.0.61
Apr 11 14:48:16 authie-ny-5 sshd[2379249]: Invalid user user1 from 202.145.0.61 port 53080
Apr 11 14:48:19 authie-ny-5 sshd[2379249]: Failed password for invalid user user1 from 202.145.0.61 port 53080 ssh2
...
show less
Apr 11 18:04:03 instance-ytstream sshd[4131801]: Invalid user emma from 202.145.0.61 port 56918
Apr ...
show moreApr 11 18:04:03 instance-ytstream sshd[4131801]: Invalid user emma from 202.145.0.61 port 56918
Apr 11 18:05:45 instance-ytstream sshd[4131836]: Invalid user superadmin from 202.145.0.61 port 59086
Apr 11 18:07:20 instance-ytstream sshd[4131859]: Invalid user deploy from 202.145.0.61 port 33014
Apr 11 18:12:16 instance-ytstream sshd[4131986]: Invalid user rico from 202.145.0.61 port 39510
Apr 11 18:13:50 instance-ytstream sshd[4132021]: Invalid user mohammad from 202.145.0.61 port 41670
...
show less
2026-04-11T16:51:46.927688+00:00 wp20241125 sshd[1615794]: Invalid user server from 202.145.0.61 por ...
show more2026-04-11T16:51:46.927688+00:00 wp20241125 sshd[1615794]: Invalid user server from 202.145.0.61 port 47564
2026-04-11T16:53:25.069825+00:00 wp20241125 sshd[1615810]: Invalid user myuser from 202.145.0.61 port 49856
2026-04-11T16:55:09.318666+00:00 wp20241125 sshd[1615825]: Invalid user user02 from 202.145.0.61 port 52158
2026-04-11T16:56:51.506527+00:00 wp20241125 sshd[1615843]: Invalid user steam from 202.145.0.61 port 54458
2026-04-11T16:58:35.890667+00:00 wp20241125 sshd[1615861]: Invalid user test_1 from 202.145.0.61 port 56758
...
show less
2026-04-11T16:29:34.285014+00:00 wp20241125 sshd[1615471]: Invalid user ghostcms from 202.145.0.61 p ...
show more2026-04-11T16:29:34.285014+00:00 wp20241125 sshd[1615471]: Invalid user ghostcms from 202.145.0.61 port 45930
2026-04-11T16:31:13.446228+00:00 wp20241125 sshd[1615490]: Invalid user demo from 202.145.0.61 port 48230
2026-04-11T16:32:50.918446+00:00 wp20241125 sshd[1615505]: Invalid user zhang from 202.145.0.61 port 50522
2026-04-11T16:34:32.070107+00:00 wp20241125 sshd[1615529]: Invalid user teamspeak from 202.145.0.61 port 52822
2026-04-11T16:37:54.696236+00:00 wp20241125 sshd[1615603]: Invalid user ftpuser from 202.145.0.61 port 57414
...
show less
This source IP initiated an unauthorized connection to a controlled SSH honeypot environment deploye ...
show moreThis source IP initiated an unauthorized connection to a controlled SSH honeypot environment deployed for threat detection. The service is a non-production deceptive endpoint used solely to identify malicious reconnaissance, automated scanning, credential probing, and other pre-compromise activity. Any interaction with this service is considered highly suspicious because it is not advertised for legitimate use.
show less
Port Scan
SSH
Anonymous
SSH brute force attempt. User: steam, Pass: [REDACTED]
2026-04-11T16:35:19.022415+01:00 ptero-wings-dev sshd[2922054]: Invalid user mika from 202.145.0.61 ...
show more2026-04-11T16:35:19.022415+01:00 ptero-wings-dev sshd[2922054]: Invalid user mika from 202.145.0.61 port 35934
2026-04-11T16:35:19.023759+01:00 ptero-wings-dev sshd[2922054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.145.0.61
2026-04-11T16:35:21.062990+01:00 ptero-wings-dev sshd[2922054]: Failed password for invalid user mika from 202.145.0.61 port 35934 ssh2
...
show less
Brute-Force
SSH
Showing 3856 to
3870
of 4035 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ