47.61.30.239

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
83% Critical
38 reports
33 reporters ยท latest 3 weeks ago
ISP
VODAFONE ESPANA S.A.U.
Usage Type
Fixed Line ISP
ASN
AS12430
Domain Name
vodafone.es
Country
๐Ÿ‡ช๐Ÿ‡ธ Spain
City
Dos Hermanas, Andalusia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
38 from 33 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 12 ๐Ÿ‡ต๐Ÿ‡ฑ Poland 4 ๐Ÿ‡จ๐Ÿ‡ฟ Czechia 3
Most common categories Port Scan 18 Brute-Force 15 Hacking 12 SSH 12 Web App Attack 4
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ benjensen
SSH honeypot โ€” automated credential stuffing and scanning detected by Cowrie honeypot
Brute-Force SSH
๐Ÿ‡น๐Ÿ‡ญ Sawasdee
SSH break in attempt ...
SSH
๐Ÿ‡น๐Ÿ‡ท pashait
Auto-blocked by Seczar SecureOps โ€” High-Risk Port Probe (admin-managed entries) โ€” SSH (6 events in 5min) at 2026-10-19 03:40
Hacking
๐Ÿ‡น๐Ÿ‡ท savasboluk
Auto-blocked by Seczar SecureOps โ€” High-Risk Port Probe (admin-managed entries) โ€” SSH (6 events in 5min) at 2026-10-19 00:04
Hacking
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-18 17:46:47 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ท๐Ÿ‡ธ Smel
SSH/22 MH Probe, BF, Hack -
Hacking Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท LRob
Not following 301 redirects โ€” wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
Bad Web Bot
Anonymous
MikroTik Enterprise Honeypot
Port Scan
Anonymous
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ ras07
Brute force SSH login attempts.
Brute-Force SSH
Anonymous
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, GET /wp-login.php HTTP/2.0
Hacking Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
Port Scan
๐Ÿ‡ต๐Ÿ‡ฑ PepeHost.pl
Port scan: connection attempts to closed ports (fail2ban)
Port Scan
๐Ÿ‡จ๐Ÿ‡ญ SOC [GOLINE SA]
SSH Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฉ๐Ÿ‡ช 213.209.159.230
๐Ÿ‡ฐ๐Ÿ‡ท 211.253.37.225
๐Ÿ‡บ๐Ÿ‡ธ 185.61.222.98
๐Ÿ‡บ๐Ÿ‡ธ 107.173.192.240
๐Ÿ‡ง๐Ÿ‡ฉ 103.177.220.52
๐Ÿ‡ท๐Ÿ‡บ 95.165.159.70
๐Ÿ‡ง๐Ÿ‡ท 45.180.145.73
๐Ÿ‡ฉ๐Ÿ‡ช 2.27.4.142
๐Ÿ‡ณ๐Ÿ‡ฑ 193.47.62.69
๐Ÿ‡ฐ๐Ÿ‡ท 175.213.53.114
๐Ÿ‡ฌ๐Ÿ‡ง 134.209.27.149
๐Ÿ‡ฌ๐Ÿ‡ง 81.19.219.201
๐Ÿ‡ธ๐Ÿ‡ฆ 46.153.198.185
๐Ÿ‡ฌ๐Ÿ‡ง 35.246.96.76
๐Ÿ‡ฉ๐Ÿ‡ช 5.175.249.41
๐Ÿ‡ท๐Ÿ‡บ 185.49.243.111
๐Ÿ‡จ๐Ÿ‡ด 181.49.8.57
๐Ÿ‡ท๐Ÿ‡ธ 77.105.37.219
๐Ÿ‡ฎ๐Ÿ‡ถ 65.20.150.36
๐Ÿ‡ฆ๐Ÿ‡บ 51.161.136.177
feedback