16.28.56.185

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
48 reports
41 reporters · latest 2 months ago
ISP
Amazon Data Services South Africa
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-16-28-56-185.af-south-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇿🇦 South Africa
City
Cape Town, Western Cape
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

16.28.56.185 has been reported 48 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
48 from 41 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇧🇬 alnaasd
WAF block action triggered by rule set "Version Control - Information Disclosure" (28 occurrences observed).
Web App Attack
🇺🇸 Starburst SysOp Team
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-mnz6-1)
Hacking Web App Attack
🇳🇱 Site.eu
Excessive multi-domain requests
Brute-Force
🇫🇷 mrcrassi
Bad Web Bot
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii
20 attempts against mh-misbehave-ban on lunar
Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇦🇺 2000cn.com.au
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack Hacking
🇸🇬 Cloudkul Cloudkul
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
Brute-Force Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl
Many_bad_calls
Web App Attack
Anonymous
DDoS Attack
🇧🇪 taivas.nl
Bad_requests
Bad Web Bot
🇮🇹 alessio loto
WAF Detection: Empty_UserAgent (High Risk IP). AI Confirmed Attack Payload.
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 23.234.101.178
🇺🇸 23.234.93.72
🇺🇸 23.234.74.181
🇰🇷 115.178.75.242
🇸🇬 104.28.160.166
🇫🇷 85.204.70.92
🇧🇬 79.124.40.158
🇳🇱 77.67.26.216
🇺🇸 23.234.112.204
🇺🇸 23.234.110.23
🇺🇸 23.234.102.104
🇺🇸 23.234.95.37
🇺🇸 23.165.56.147
🇺🇸 23.160.24.166
🇨🇳 223.83.183.254
🇬🇧 217.146.80.115
feedback