JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.38.150.28

185.38.150.28 was found in our database!

This IP was reported 343 times. Confidence of Abuse is 100%: ?

100%

ISP	Hydra Communications Ltd
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	28.150.38.185.baremetal.zare.com
Domain Name	hydracom.co.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.38.150.28

Whois 185.38.150.28

IP Abuse Reports for 185.38.150.28:

This IP address has been reported a total of 343 times from 196 distinct sources. 185.38.150.28 was first reported on April 28th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-11 23:37:20 (22 hours ago)	185.38.150.28 - - [12/Jun/2026:04:37:16 +0500] "GET /sqlite/main.php HTTP/1.1" 404 47 "https://85.29 ... show more 185.38.150.28 - - [12/Jun/2026:04:37:16 +0500] "GET /sqlite/main.php HTTP/1.1" 404 47 "https://85.29.152.116/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 185.38.150.28 - - [12/Jun/2026:04:37:17 +0500] "GET /sqlite/main.php HTTP/1.1" 404 47 "http://85.29.152.116/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 185.38.150.28 - - [12/Jun/2026:04:37:18 +0500] "GET /sqlitemanager/main.php HTTP/1.1" 404 47 "https://85.29.152.116/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 185.38.150.28 - - [12/Jun/2026:04:37:19 +0500] "GET /SQLiteManager/main.php HTTP/1.1" 404 47 "https://85.29.152.116/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 185.38.150.28 - - [12/Jun/2026:04:37:19 +0500] "GET /sqlitemanager/main.php HTTP/1.1" 404 47 "http://85.29.152.116/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 185.38.150.28 - - [12/Jun/2026:04:37:20 +0500] "GET /SQLite/main.php HTTP/1. ... show less	Brute-Force
🇫🇮 6kilowatti	2026-06-11 20:44:42 (1 day ago)	2026-06-11T23:44:41.686936+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-11T23:44:41.686936+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=185.38.150.28 DST=83.148.240.21 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=5086 DF PROTO=TCP SPT=62315 DPT=23 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan
🇿🇦 slartybartfast69420blazit	2026-06-11 20:20:05 (1 day ago)	Fail2ban picked up 185.38.150.28 attacking nginx	Web App Attack
🇳🇱 StopAbuse	2026-06-11 19:44:11 (1 day ago)	tcp/1701 tcp/1723 tcp/23 tcp/7443 tcp/8080 tcp/8082 tcp/8445 tcp/8448 tcp/8888	Port Scan
🇵🇱 Tankudoraiba	2026-06-11 18:32:08 (1 day ago)	Unauthorized connection attempts on ports 443\|80	Port Scan Bad Web Bot
🇬🇪 geoip13	2026-06-11 17:17:00 (1 day ago)	TCP/1723	Port Scan
🇳🇱 i-turnradio.nl	2026-06-11 16:26:42 (1 day ago)	2026-06-11 18:26:42 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇩🇪 MaxMeier	2026-06-11 15:40:29 (1 day ago)	185.38.150.28 - - [11/Jun/2026:17:39:27 +0200] "\x16\x03\x01\x00\xF1\x01\x00\x00\xED\x03\x03\x15\x01 ... show more 185.38.150.28 - - [11/Jun/2026:17:39:27 +0200] "\x16\x03\x01\x00\xF1\x01\x00\x00\xED\x03\x03\x15\x01\xFAIZ\xC5\xE8W\xB3\x8A\xB6\xF5\xEBl\xA3\xE5\xC3\x06m\x84\xCA\x06\x95\xFE\x00\x1D\xE4M]\xC4\xA9I \x98\x083\xD67a\xBD\xB9\xB4\xB2gnFc\xF1\xFD\xF3\x14\xE5t\xCC\xD2\xFB\xCA\x03\x10i\xCB\xFC\xC7\x81\x8D\x00,\x13\x02\x13\x01\xC0,\xC0+\xC00\xC0/\x00\x9F\x00\x9E\xC0$\xC0#\xC0(\xC0'\xC0" 400 150 "-" "-" 185.38.150.28 - - [11/Jun/2026:17:39:27 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0" 185.38.150.28 - - [11/Jun/2026:17:39:28 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0" 185.38.150.28 - - [11/Jun/2026:17:39:28 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0" 185.38.150.28 - - [11/Jun/2026:17:39:28 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0" 185.38.150.28 - - [11/Jun/2026:17:39:28 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0" 185.38.150.28 - - [11/Jun/2026:17:39:28 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0" 185.38.150.28 - - [11/Jun/2026:17:39:28 +0200] "GET / HTTP/1.1" 444 0 "-" " ... show less	Bad Web Bot Web App Attack
🇷🇴 abuse_IP_reporter	2026-06-11 14:45:07 (1 day ago)	Jun 11 16:56:32 server UFW BLOCK SRC=185.38.150.28 DF PROTO=TCP SPT=54596	Port Scan
🇫🇷 GoodOldTOS	2026-06-11 14:11:48 (1 day ago)	Connection to Telnet honeypot	Hacking
Anonymous	2026-06-11 13:32:11 (1 day ago)	bad ssl requests	Port Scan Hacking Web App Attack
🇨🇭 GAS	2026-06-11 11:19:12 (1 day ago)	Direct IP access. 185.38.150.28 - - [11/Jun/2026:13:19:10 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" ... show more Direct IP access. 185.38.150.28 - - [11/Jun/2026:13:19:10 +0200] "\x16\x03\x01" 400 392 "-" "-" "-" "-" 185.38.150.28 - - [11/Jun/2026:13:19:10 +0200] "GET / HTTP/1.1" 402 2772 "-" "Mozilla/5.0" "REDACTED" "" ... show less	Port Scan Web App Attack
🇨🇿 Prcek	2026-06-11 10:02:52 (1 day ago)	PortScan:HOST=185.38.150.28,DPORTS=23,80,443,8080	Port Scan
🇺🇸 rjdefrancisco	2026-06-11 07:06:51 (1 day ago)	Unwanted traffic detected by honeypot on June 10, 2026: port scans (1 port 23 scan), and brute force ... show more Unwanted traffic detected by honeypot on June 10, 2026: port scans (1 port 23 scan), and brute force and hacking attacks (1 over telnet). show less	Port Scan Brute-Force SSH
🇬🇧 ISPLtd	2026-06-11 06:59:06 (1 day ago)	Jun 11 03:59:05 185.38.150.28 TCP SPT=50074 DPT=23 SYN Jun 11 03:59:05 185.38.150.28 TCP SPT=49715 D ... show more Jun 11 03:59:05 185.38.150.28 TCP SPT=50074 DPT=23 SYN Jun 11 03:59:05 185.38.150.28 TCP SPT=49715 DPT=8080 SYN Jun 11 03:59:06 185.38.150.28 TCP SPT=65263 DPT=8443 WI ... show less	Port Scan

Showing 1 to 15 of 343 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.48

🇺🇸 44.74.220.208

🇮🇩 34.128.77.56

🇩🇪 213.209.159.242

🇹🇼 198.235.24.108

🇬🇧 185.216.145.188

🇺🇸 103.234.62.6

🇮🇳 66.116.225.113

🇩🇪 62.133.60.87

🇰🇷 59.26.132.170

🇵🇱 57.128.237.234

🇧🇷 45.186.133.189

🇧🇷 205.210.31.228

🇲🇽 189.248.130.142

🇧🇷 179.231.224.159

🇺🇸 136.144.43.92

🇨🇳 120.48.90.166

🇺🇸 104.168.4.239

🇸🇬 103.189.235.176

🇧🇩 103.163.117.83