JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.0.12.131

187.0.12.131 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 27%: ?

27%

ISP	INTERNET FIBRAEVO LTDA
Usage Type	Fixed Line ISP
ASN	AS28283
Domain Name	adyl.net.br
Country	🇧🇷 Brazil
City	Arroio do Sal, Rio Grande do Sul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.0.12.131

Whois 187.0.12.131

IP Abuse Reports for 187.0.12.131:

This IP address has been reported a total of 41 times from 22 distinct sources. 187.0.12.131 was first reported on August 16th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-10-15 08:56:43 (1 day ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇮🇩 hermawan	2026-10-12 01:15:56 (4 days ago)	[Mon Oct 12 08:15:48.660708 2026] [security2:error] [pid 1646929:tid 140629627590336] [client 187.0. ... show more [Mon Oct 12 08:15:48.660708 2026] [security2:error] [pid 1646929:tid 140629627590336] [client 187.0.12.131:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:^(?:json\\\\.\|\\\\x5c)?\|b[\\"'\\\\)\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?u[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?s[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b]) ..." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "3273"] [id "932350"] [msg "Remote Command Execution: Direct Unix Command Execution (No Arguments)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: id found within ARGS_NAMES:id: id request_line = GET /index.php/profil/arsip-artikel?catid=474&id=961:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan- ... show less	Email Spam Hacking
🇷🇺 Darth Vader	2026-10-11 21:47:20 (4 days ago)	nfdump top talker: 187.0.12.131 \| first seen 2026-10-11 21:47:20.832 \| duration 00:00:00.026 \| flows ... show more nfdump top talker: 187.0.12.131 \| first seen 2026-10-11 21:47:20.832 \| duration 00:00:00.026 \| flows=3 \| packets=51150 \| bytes=36.8 M \| pps=1921 \| bps=11.1 M \| bpp=719 \| proto=any show less	DDoS Attack Exploited Host
🇺🇸 鬼影233	2026-09-24 10:34:52 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 08:10:00 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 05:10:10 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-07 07:31:18 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-07-31 01:34:15 (2 months ago)	Scraping webshop URLs (www.ngs.nl), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-07-26 08:18:07 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 04:42:03 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-09 05:07:50 (4 months ago)	Bogus Useragent: 187.0.12.131 - - [09/Jun/2026:07:07:49 +0200] "GET /protocol?id=bb_6_81&offset=2300 ... show more Bogus Useragent: 187.0.12.131 - - [09/Jun/2026:07:07:49 +0200] "GET /protocol?id=bb_6_81&offset=2300&seq=2280 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.2; Trident/5.1)" asn=28283 org="Adylnet Telecom" country=BR ... show less	Bad Web Bot
🇨🇭 ALPHANET	2026-05-28 04:00:45 (4 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-03-25 16:02:29 (6 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 johnkarlhill	2026-03-16 13:30:15 (7 months ago)	WebKnight blocked malicious web request on johnkarlhill.com	Brute-Force SSH
🇨🇦 polycoda	2026-02-16 16:51:47 (8 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.165.25.206

🇰🇷 118.36.136.12

🇳🇱 109.160.32.146

🇨🇳 27.18.90.135

🇺🇸 3.91.77.105

🇨🇴 181.41.150.134

🇹🇹 161.0.154.165

🇵🇭 154.18.197.35

🇺🇸 103.143.11.150

🇷🇺 46.32.67.88

🇮🇱 34.165.57.145

🇨🇳 8.134.71.152

🇺🇿 213.230.64.246

🇨🇳 183.34.204.32

🇫🇷 169.58.101.177

🇻🇳 118.70.182.193

🇸🇮 102.220.161.174

🇺🇸 34.63.215.8

🇹🇼 220.130.7.191

🇷🇴 193.46.255.86