[JENKINS-66356] Org Scan with Bad Credentials cause IP blacklisting

If you set up an organization folder and specify credentials that are invalid (-> "401 Unauthorized: Bad Credentials"), Jenkins will keep trying to scan the organization with the credentials. To protect against brute forcing, GitHub will blacklist the IP of Jenkins master, preventing other users with valid credentials to pull anything from GitHub.

---
Originally reported by meiswjn, imported from: Org Scan with Bad Credentials cause IP blacklisting

• status: Open
  
• priority: Major
  
• component(s): github-branch-source-plugin
  
• label(s): configuration, exception
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-02
  

Raw content of original issue

If you set up an organization folder and specify credentials that are invalid (-> "401 Unauthorized: Bad Credentials"), Jenkins will keep trying to scan the organization with the credentials. To protect against brute forcing, GitHub will blacklist the IP of Jenkins master, preventing other users with valid credentials to pull anything from GitHub.

• environment: Jenkins 2.277.2