18.61.28.167

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
9% Caution
336 reports
194 reporters · latest 1 week ago
ISP
Amazon Data Services India
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-18-61-28-167.ap-south-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇮🇳 India
City
Hyderabad, Telangana
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
336 from 194 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 1 🇵🇰 Pakistan 1
Most common categories Brute-Force 2 Bad Web Bot 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 mateus.vicente
[2026-11-04T20:26:28Z] Requests to sensitive Apache endpoints and path traversal patterns. (db-srv)
Brute-Force Bad Web Bot Web App Attack
🇵🇰 sbk97 (https://sayor.net)
SAYOR honeypot: observed attack /.git/config
Brute-Force
🇬🇧 myintarweb
18.61.28.167 - - [11/Sep/2025:01:56:43 +0100] 443 "GET /.git/config HTTP/1.1" 404 29726 "-" "l9explore/1.2.2" ...
Hacking Bad Web Bot Web App Attack
🇫🇷 GEDAL
Fail2ban webexploits @ <hostname> : 18.61.28.167 - - [11/Sep/2025:09:51:56 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "l9explore/1.2.2"
Brute-Force SSH
🇫🇷 GEDAL
Fail2ban webexploits @ <hostname> : 18.61.28.167 - - [11/Sep/2025:09:51:56 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "l9explore/1.2.2"
Brute-Force SSH
🇫🇷 GEDAL
Fail2ban webexploits @ <hostname> : 18.61.28.167 - - [11/Sep/2025:09:51:56 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "l9explore/1.2.2"
Brute-Force SSH
🇬🇧 myintarweb
18.61.28.167 - - [11/Sep/2025:01:56:43 +0100] 443 "GET /.git/config HTTP/1.1" 404 29726 "-" "l9explore/1.2.2" ...
Hacking Bad Web Bot Web App Attack
🇨🇦 ISPLtd
Vulnerability probe, web site attack.
Hacking Web App Attack
🇪🇸 Gem
Unauthorized web scan.
Web App Attack
🇧🇪 boxed-it
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇧🇪 boxed-it
GET /.git/config (Tarpitted for 1d15h8m29s, wasted 8.06MB)
Web App Attack
🇧🇪 boxed-it
GET /.git/config (Tarpitted for 1d15h8m32s, wasted 8.06MB)
Web App Attack
🇧🇪 boxed-it
GET /.git/config (Tarpitted for 1d15h8m36s, wasted 8.06MB)
Web App Attack
🇩🇪 SpaceHost-Server
Brute-Force Web App Attack
🇧🇪 boxed-it
GET /.git/config (Tarpitted for 1d15h9m12s, wasted 8.06MB)
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 111.229.99.161
🇭🇰 223.197.146.208
🇳🇱 213.177.179.109
🇬🇧 194.50.235.155
🇷🇴 193.46.255.86
🇨🇭 179.43.153.18
🇨🇴 108.174.156.122
🇮🇳 103.104.127.56
🇳🇱 93.123.109.9
🇳🇱 89.21.67.139
🇫🇷 85.217.140.44
🇫🇷 85.217.140.12
🇺🇸 76.32.235.47
🇺🇸 66.27.132.114
🇭🇰 42.200.73.3
🇳🇱 212.92.83.183
🇧🇷 205.210.31.220
🇮🇷 194.62.17.50
🇸🇬 193.37.32.222
🇪🇨 186.4.135.194
feedback