AbuseIPDB » 120.28.167.9
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 120.28.167.9:
This IP address has been reported a total of 12 times from 11 distinct sources. 120.28.167.9 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 2 reports; Switzerland with 1 report; Cyprus with 1 report. The most common categories in these recent reports were: Bad Web Bot 3 times; Brute-Force 2 times; SSH 2 times; Port Scan 1 time; DDoS Attack 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 floreriaexpress |
|
Bad Web Bot | ||
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | ||
| 🇨🇾 debaba |
2026-08-24T16:08:55.550571+03:00 phenom sshd-session[6174]: error: kex_exch
...
|
Brute-Force SSH | ||
| 🇨🇭 backslash |
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
|
Bad Web Bot | ||
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | ||
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | ||
| 🇦🇺 oncord |
Form spam
|
Web Spam | ||
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | ||
| 🇮🇹 VHosting |
Detected attack and reported by a human
|
DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH | ||
| 🇨🇦 polycoda |
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
|
DDoS Attack | ||
| 🇺🇸 TPI-Abuse |
|
DDoS Attack SQL Injection Exploited Host | ||
| 🇩🇪 SMARTNET |
Aisuru(Mirai variant) DDoS
|
DDoS Attack |
Showing 1 to 12 of 12 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩