65.0.180.185

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
71 reports
35 reporters · latest 1 year ago
ISP
Amazon Data Services India
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Domain Name
amazon.com
Country
🇮🇳 India
City
Mumbai, Maharashtra
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

65.0.180.185 has been reported 71 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
71 from 35 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷 GEDAL
Fail2ban webexploits @ <hostname> : 65.0.180.185 - - [02/Sep/2025:20:36:42 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "l9explore/1.2.2"
Brute-Force SSH
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Info more details on http://threatbook.io/ip/65.0.180.185 2025-09-03 01:28:00 /.git/config 2025-09-03 01:27:55 / 2025-09-03 01:46:07 / 2025-09-03 01:46:06 /
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪 SpaceHost-Server
Brute-Force Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇨🇭 Peter-Johann Sarbach
Hacking website
Hacking
🇩🇪 SpaceHost-Server
Brute-Force Web App Attack
Anonymous
Reported from Nginx log analysis 17. Log: 65.0.180.185 - - [02/Sep/2025:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "-" "-" "IN India Mumbai" "AS16509" "AMAZON-02"
Port Scan Brute-Force SSH
🇫🇷 GEDAL
Fail2ban nginx-git @ <hostname> : 65.0.180.185 - - [02/Sep/2025:20:36:42 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "l9explore/1.2.2"
Brute-Force SSH
Anonymous
(mod_security) mod_security (id:920350) triggered by 65.0.180.185 (IN/India/ec2-65-0-180-185.ap-south-1.compute.amazonaws.com): 1 in the last 3600 secs
Brute-Force
🇱🇹 Evag Touf
(mod_security) mod_security triggered on hostname [redacted] 65.0.180.185 (IN/India/-)
SQL Injection
Anonymous
Generic port scan: GET / HTTP/1.1; Generic port scan: GET / HTTP/1.1; Probing for sensitive files or CMS vulnerabilities (e.g., .env, .git, WordPress): GET /.git/config HTTP/1.1
Port Scan Web App Attack
🇫🇷 Rat_Crusher
Searching for: GET /.git/config
Bad Web Bot
🇺🇸 Bruce5051
65.0.180.185 - - [02/Sep/2025:11:43:11 -0700] "GET /.git/config HTTP/1.1" 403 118 "-" "l9explore/1.2.2" ...
Hacking Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 206.74.48.27
🇬🇧 198.244.226.116
🇧🇴 190.129.102.14
🇨🇴 190.61.61.108
🇳🇱 172.94.9.161
🇩🇪 172.70.240.167
🇩🇪 172.70.240.80
🇱🇹 141.98.9.26
🇨🇳 116.179.37.113
🇷🇺 85.26.230.158
🇮🇹 82.53.61.221
🇧🇬 78.128.114.166
🇳🇱 195.178.110.135
🇺🇸 140.174.90.5
🇺🇸 139.144.239.185
🇨🇳 106.75.176.152
feedback