130.61.73.28

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
406 reports
318 reporters · latest 10 hours ago
ISP
Oracle Public Cloud
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31898
Domain Name
oracleemaildelivery.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
406 from 318 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 88 🇩🇪 Germany 87 🇫🇷 France 36
Most common categories Web App Attack 333 Bad Web Bot 121 Hacking 99 Brute-Force 81 Port Scan 23
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇧🇷 Peregrine
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 130.61.73.28 172.70.243.197 - - [08/Nov/2026:13:52:25 -0300] "GET /.git/config HTTP/1.1" 404 18193
Bad Web Bot
🇩🇪 Holger
Bruteforce WebAttack
Brute-Force Web App Attack
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇭🇺 miszterx.hu
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇬🇧 openstrike.co.uk
5 attacks on VC URLs: GET /.git/config HTTP/1.1
Hacking
🇧🇷 Peregrine
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 130.61.73.28 172.70.243.197 - - [08/Nov/2026:13:52:25 -0300] "GET /.git/config HTTP/1.1" 404 18193
Bad Web Bot
🇩🇪 kwnshkn
Web exploit probe (/.git/config)
Bad Web Bot Web App Attack
🇺🇸 Tom USA
Thousands of attacks: IM360 WAF: Direct access to sensitive file or dotfile||MV:/.git/config||RSV:8.98||T:APACHE|| What a bunch of retarded pieces of shit - could somebody please just kill them?
Brute-Force Hacking
🇭🇺 kranem
Bad Web Bot
🇩🇪 onlyops.app
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-modsecurity jail) | onlyops.app
Exploited Host
🇬🇧 AvonleaConsulting
Brute force attack stopped by firewall
Web Spam Brute-Force Web App Attack
🇩🇪 Roper123
Web exploits
Web App Attack
🇺🇸 swalluw
Web vulnerability scanning: request for /.git/config (HTTP 404, GET) at 2026-11-09T23:21:23+00:00 - exploit probe, no legitimate use
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.41
🇹🇼 198.235.24.41
🇷🇺 194.28.29.5
🇬🇧 193.163.125.54
🇧🇷 179.48.18.42
🇨🇳 113.117.240.81
🇷🇴 92.118.39.71
🇨🇦 85.217.149.6
🇺🇸 74.235.203.117
🇺🇸 74.235.96.223
🇳🇱 64.205.72.70
🇩🇪 51.89.124.33
🇺🇸 216.25.90.46
🇨🇭 209.99.190.186
🇧🇷 205.210.31.253
🇺🇸 205.210.31.40
🇧🇷 186.213.66.193
🇨🇳 180.153.236.13
🇸🇬 168.144.110.168
🇭🇰 165.154.6.112
feedback