JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 67.205.28.195

67.205.28.195

Recent Activity

135 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

New Dream Network, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS26347

Hostname(s)

iad1-shared-b7-42.dreamhost.com

Domain Name

dreamhost.com

Country

🇺🇸 United States of America

City

Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 67.205.28.195:

This IP address has been reported a total of 135 times from 65 distinct sources. 67.205.28.195 was first reported on March 21st 2025, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: United States of America with 20 reports; Germany with 13 reports; United Kingdom of Great Britain and Northern Ireland with 8 reports. The most common categories in these recent reports were: Web App Attack 49 times; Brute-Force 29 times; Hacking 16 times; Bad Web Bot 15 times; Exploited Host 5 times; Other 8 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BlueWire Hosting	2026-09-05 10:14:12 (2 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇫🇷 solution.it	2026-09-05 08:39:05 (3 hours ago)	[Sat Sep 05 10:39:04.375082 2026] [php7:error] [pid 3910956:tid 3910956] [client 67.205.28.195:42564 ... show more [Sat Sep 05 10:39:04.375082 2026] [php7:error] [pid 3910956:tid 3910956] [client 67.205.28.195:42564] script '/var/www/html/blog.solution.it/phpinfo.php' not found or unable to stat show less	Web App Attack
🇬🇧 consul.to	2026-09-05 08:20:13 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 Apache	2026-09-05 07:26:54 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 67.205.28.195 (US/United States/iad1-shared-b7- ... show more (mod_security) mod_security (id:210492) triggered by 67.205.28.195 (US/United States/iad1-shared-b7-42.dreamhost.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-09-05 03:08:59 (9 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-09-05 02:56:39 (9 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 SCHAPPY	2026-09-05 01:51:47 (10 hours ago)	Probing for wp2shell vulnerabilities.	Hacking Web App Attack
Anonymous	2026-09-04 20:25:25 (15 hours ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TAY	2026-09-04 16:00:49 (20 hours ago)	67.205.28.195 - - [05/Sep/2026:00:00:28 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6173 "-" "Mozilla/ ... show more 67.205.28.195 - - [05/Sep/2026:00:00:28 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [05/Sep/2026:00:00:37 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [05/Sep/2026:00:00:39 +0800] "GET /wp-config.php.save HTTP/1.1" 404 86574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [05/Sep/2026:00:00:32 +0800] "GET /wp-config.php~ HTTP/1.1" 404 86574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [05/Sep/2026:00:00:47 +0800] "GET /wp-config.php.old HTTP/1.1" 301 6176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Brute-Force
🇺🇸 TAY	2026-09-04 14:43:19 (21 hours ago)	67.205.28.195 - - [04/Sep/2026:22:43:05 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Mozi ... show more 67.205.28.195 - - [04/Sep/2026:22:43:05 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:22:43:10 +0800] "GET /wp-config.php~ HTTP/1.1" 404 54881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:22:43:12 +0800] "GET /wp-config.php.save HTTP/1.1" 404 54907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:22:43:14 +0800] "GET /wp-config.php.old HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:22:43:16 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 54885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force
🇺🇸 TAY	2026-09-04 13:28:36 (22 hours ago)	67.205.28.195 - - [04/Sep/2026:21:28:25 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34906 "-" "Mozi ... show more 67.205.28.195 - - [04/Sep/2026:21:28:25 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:21:28:26 +0800] "GET /wp-config.php~ HTTP/1.1" 404 34938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:21:28:28 +0800] "GET /wp-config.php.save HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:21:28:31 +0800] "GET /wp-config.php.old HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:21:28:32 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 34938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force
🇺🇸 TAY	2026-09-04 12:27:04 (23 hours ago)	67.205.28.195 - - [04/Sep/2026:20:26:54 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6229 "-" "Mozil ... show more 67.205.28.195 - - [04/Sep/2026:20:26:54 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:20:26:58 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:20:27:00 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:20:27:01 +0800] "GET /wp-config.php~ HTTP/1.1" 404 54903 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:20:27:02 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge ... show less	Brute-Force
🇬🇧 thetomtaylor.co.uk	2026-09-04 09:08:01 (1 day ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02 ... show more Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02] show less	Hacking SQL Injection Web App Attack
🇫🇷 masterguru	2026-09-04 09:05:48 (1 day ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking
🇺🇸 TAY	2026-09-04 08:29:20 (1 day ago)	67.205.28.195 - - [04/Sep/2026:16:29:01 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 72435 "-" "Mozi ... show more 67.205.28.195 - - [04/Sep/2026:16:29:01 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 72435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:16:29:06 +0800] "GET /wp-config.php~ HTTP/1.1" 404 72435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:16:29:09 +0800] "GET /wp-config.php.save HTTP/1.1" 404 72435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:16:29:12 +0800] "GET /wp-config.php.old HTTP/1.1" 404 72435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 67.205.28.195 - - [04/Sep/2026:16:29:16 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 72435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.9.233.141

🇧🇷 187.18.8.4

🇧🇷 179.48.18.42

🇵🇰 154.208.59.3

🇲🇽 148.223.251.51

🇮🇩 103.121.20.18

🇫🇷 85.217.140.48

🇺🇸 3.218.103.254

🇨🇳 182.121.150.228

🇦🇷 181.166.15.45

🇨🇳 171.41.229.218

🇮🇩 165.154.151.176

🇨🇳 112.46.213.57

🇨🇳 110.90.224.119

🇮🇩 103.180.123.42

🇸🇬 68.178.166.175

🇲🇽 38.22.170.10

🇬🇧 35.203.210.239

🇺🇸 23.94.166.8

🇺🇸 216.73.160.205