JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.7.159.134

61.7.159.134 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 40%: ?

40%

ISP	National Telecom Public Company Limited 7 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
Usage Type	Fixed Line ISP
ASN	AS131090
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.7.159.134

Whois 61.7.159.134

IP Abuse Reports for 61.7.159.134:

This IP address has been reported a total of 39 times from 21 distinct sources. 61.7.159.134 was first reported on December 19th 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Viveronese	2026-06-11 23:38:34 (5 days ago)	SASL LOGIN authentication failed	Brute-Force
Anonymous	2026-06-11 20:15:37 (5 days ago)	Web App Attack	Web App Attack
🇨🇦 1gz	2026-06-10 05:55:04 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from TH. Action taken: CHALLENGE Protocol: HTTP/1.1 (POST ... show more Triggered Cloudflare WAF (firewallCustom) from TH. Action taken: CHALLENGE Protocol: HTTP/1.1 (POST method) Endpoint: /xmlrpc.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 MusicLibrary	2026-06-08 23:23:31 (1 week ago)	Attempted access to non existent wordpress urls	Bad Web Bot
Anonymous	2026-06-07 23:30:58 (1 week ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
Anonymous	2026-05-28 01:35:36 (2 weeks ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇩🇪 london2038.com	2026-05-27 09:55:17 (2 weeks ago)	Malformed or malicious web request 61.7.159.134 - - [27/May/2026:11:55:05 +0200] "POST /xmlrpc.php H ... show more Malformed or malicious web request 61.7.159.134 - - [27/May/2026:11:55:05 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇬🇧 catalink.com	2026-05-16 14:26:35 (1 month ago)	Brute forcing Wordpress login	Exploited Host Web App Attack
🇲🇹 Malta	2026-05-09 12:59:42 (1 month ago)	61.7.159.134 - - [09/May/2026:14:59:42 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 1 ... show more 61.7.159.134 - - [09/May/2026:14:59:42 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇨🇭 Origon	2026-04-27 21:09:17 (1 month ago)	NOQUEUE - IP: 61.7.159.134 - Apr 27 23:09:17 plesk postfix/smtpd[3208684]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 61.7.159.134 - Apr 27 23:09:17 plesk postfix/smtpd[3208684]: NOQUEUE: reject: RCPT from unknown[61.7.159.134]: 554 5.7.1 Service unavailable; Client host [61.7.159.134] blocked using dnsbl-1.uceprotect.net; IP 61.7.159.134 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=61.7.159.134; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<tajgallery.online> show less	Email Spam
Anonymous	2026-04-26 08:40:37 (1 month ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇬🇧 catalink.com	2026-04-24 15:49:27 (1 month ago)	Brute forcing Wordpress login	Exploited Host Web App Attack
🇨🇭 Origon	2026-04-20 12:36:43 (1 month ago)	NOQUEUE - IP: 61.7.159.134 - Apr 20 14:36:43 plesk postfix/smtpd[2562343]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 61.7.159.134 - Apr 20 14:36:43 plesk postfix/smtpd[2562343]: NOQUEUE: reject: RCPT from unknown[61.7.159.134]: 554 5.7.1 Service unavailable; Client host [61.7.159.134] blocked using dnsbl-3.uceprotect.net; Your ISP CAT-IDC-4BYTENET-AS-AP CAT TELECOM Public Company Ltd,CAT, TH/AS131090 is UCEPROTECT-Level3 listed because of a spamscore of 145.4. See: http://www.uceprotect.net/rblcheck.php?ipr=61.7.159.134; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<helsinginpeltityo.com> show less	Email Spam
Anonymous	2026-03-28 15:02:14 (2 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇨🇭 Origon	2026-02-27 07:55:27 (3 months ago)	NOQUEUE - IP: 61.7.159.134 - Feb 27 08:55:27 plesk postfix/smtpd[1798825]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 61.7.159.134 - Feb 27 08:55:27 plesk postfix/smtpd[1798825]: NOQUEUE: reject: RCPT from unknown[61.7.159.134]: 554 5.7.1 Service unavailable; Client host [61.7.159.134] blocked using dnsbl-3.uceprotect.net; Your ISP CAT-IDC-4BYTENET-AS-AP CAT TELECOM Public Company Ltd,CAT, TH/AS131090 is UCEPROTECT-Level3 listed because of a spamscore of 84.2. See: http://www.uceprotect.net/rblcheck.php?ipr=61.7.159.134; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<rfp.com> show less	Email Spam

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.253.156.173

🇳🇱 176.65.148.215

🇺🇸 172.233.219.44

🇺🇸 165.154.36.113

🇸🇬 139.59.253.180

🇸🇬 107.150.112.48

🇯🇵 103.232.213.51

🇱🇻 91.239.23.237

🇳🇱 91.92.40.10

🇩🇪 69.5.169.43

🇺🇸 64.62.197.125

🇮🇳 49.207.244.154

🇨🇳 14.103.109.71

🇫🇷 2a02:c207:2258:3583::1

🇺🇸 216.25.89.144

🇭🇰 203.12.200.211

🇪🇨 177.234.228.172

🇺🇸 157.245.135.141

🇯🇵 118.193.61.14

🇳🇱 93.123.109.167