This IP address has been reported a total of
47
times from
24 distinct
sources.
202.61.130.107 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ...
show moreHoneypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: CRITICAL. Aaran.cloud
show less
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ...
show moreHoneypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ...
show moreHoneypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ...
show moreHoneypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ...
show moreHoneypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
show less
May 15 04:16:44 202.61.130.107 TCP SPT=50580 DPT=3000 SYN
May 15 04:16:45 202.61.130.107 TCP SPT=505 ...
show moreMay 15 04:16:44 202.61.130.107 TCP SPT=50580 DPT=3000 SYN
May 15 04:16:45 202.61.130.107 TCP SPT=50580 DPT=3000 SYN
May 15 04:16:47 202.61.130.107 TCP SPT=50580 DPT=3000
...
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=202.61.130.107; proto=TCP; source_port=48318; target_port=3000; flags=SYN
show less
Port Scan
Anonymous
202.61.130.107 (SG/Singapore/-), 5 distributed cpanel attacks on account [root] in the last 600 secs ...
show more202.61.130.107 (SG/Singapore/-), 5 distributed cpanel attacks on account [root] in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-05-13 02:18:17 -0600] info [whostmgrd] 202.61.130.107 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect
[2026-05-13 02:18:19 -0600] info [whostmgrd] 202.61.130.107 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect
[2026-05-13 02:18:20 -0600] info [whostmgrd] 202.61.130.107 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect
[2026-05-13 02:18:21 -0600] info [whostmgrd] 202.61.130.107 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect
[2026-05-13 02:10:52 -0600] info [cpaneld] 205.185.113.241 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN cpaneld: root login is not permitted to cpaneld
IP Addresses Blocked:
show less
Port Scan
Anonymous
202.61.130.107 (JP/Japan/-)
Brute-Force
Showing 1 to
15
of 47 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩