JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.28.145.99

187.28.145.99 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 0%: ?

ISP	Mafro Transportes Ltda
Usage Type	Fixed Line ISP
ASN	AS4230
Domain Name	mafrotransportes.com.br
Country	🇧🇷 Brazil
City	Lucas do Rio Verde, Mato Grosso

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.28.145.99

Whois 187.28.145.99

IP Abuse Reports for 187.28.145.99:

This IP address has been reported a total of 150 times from 106 distinct sources. 187.28.145.99 was first reported on January 10th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-05 19:41:42 (1 month ago)	ICS Labs identified 187.28.145.99 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
Anonymous	2026-05-06 16:00:29 (2 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
Anonymous	2026-04-29 05:03:00 (2 months ago)	/shop?vtid=352%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29 ... show more /shop?vtid=352%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23&tid=2%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23&sru=so,1,4,0%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 show less	Brute-Force Web App Attack Hacking SQL Injection
🇳🇱 jjnxpct	2026-04-27 03:49:32 (2 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /kerkdienst/agenda-kerkdiensten (Rule ID: 930100) - Path Traversal Attack (/../) or (/.../) show less	Web App Attack Hacking
Anonymous	2026-04-27 00:10:37 (2 months ago)	sqlinjection union	SQL Injection Brute-Force Web App Attack
🇿🇦 Tokolosh Hunters	2026-04-26 16:47:41 (2 months ago)	AutoBlockWindow-Known bad useragent query-2026-04-26 16:47:40	Bad Web Bot
🇨🇭 backslash	2026-04-26 15:51:00 (2 months ago)	block ruleset SQL-Injections: typical patterns B00691C2B3660FF27FABC58C19A75B50EDEC4A5E	SQL Injection
🇦🇺 Telemetry2U.com	2026-04-26 15:30:49 (2 months ago)	SQL Injection attempt detected	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-04-26 14:54:30 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 187.28.145.99 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211190) triggered by 187.28.145.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 10:54:24.869511 2026] [security2:error] [pid 9188:tid 9188] [client 187.28.145.99:62687] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|www.ccbank.net\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?from=AppAgg.com%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ccbank.net"] [uri "/"] [unique_id "ae4nINZQgln6_2r7svnwVAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-04-26 14:31:13 (2 months ago)	AutoBlock: 💉 SQL Injection Attempt (Non Decay-Based)	Hacking Web App Attack
🇫🇮 danskefilm.dk	2026-04-26 14:30:01 (2 months ago)	SQL injection	SQL Injection
🇪🇸 el-brujo	2026-04-26 13:42:30 (2 months ago)	Cloudflare WAF: Request Path: /whois.html Request Query: ?domain=zdravoskop.rs%27%29+AND+1%3D1+UNION ... show more Cloudflare WAF: Request Path: /whois.html Request Query: ?domain=zdravoskop.rs%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%5C%22XSS%5C%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 Host: www.elhacker.net userAgent: Go-http-client/2.0 Action: block Source: firewallManaged ASN Description: CLARO S.A. Country: BR Method: GET Timestamp: 2026-04-26T13:42:30Z ruleId: 8166da327a614849bfa29317e7907480. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇧🇷 mateus.vicente	2026-03-05 17:42:53 (4 months ago)	[2026-03-05T17:42:52Z] Excessive 400/404 requests from single IP detected and blocked. (db-srv)	DDoS Attack Web Spam Port Scan Web App Attack
🇧🇷 mateus.vicente	2026-03-05 14:13:43 (4 months ago)	[2026-03-05T14:13:43Z] Excessive 400/404 requests from single IP detected and blocked. (db-srv)	DDoS Attack Web Spam Port Scan Web App Attack
🇧🇷 mateus.vicente	2026-03-04 20:37:02 (4 months ago)	[2026-03-04T20:37:02Z] Excessive 400/404 requests from single IP detected and blocked. (db-srv)	DDoS Attack Web Spam Port Scan Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.37

🇷🇴 193.32.162.9

🇺🇸 167.71.81.114

🇮🇳 165.22.215.75

🇳🇱 142.93.129.190

🇬🇧 137.220.120.12

🇺🇸 136.144.35.64

🇧🇸 108.60.237.241

🇺🇸 104.23.211.213

🇨🇦 85.217.149.62

🇨🇦 85.217.149.54

🇮🇷 62.133.46.13

🇬🇧 37.10.113.215

🇺🇸 199.195.249.11

🇹🇼 198.235.24.46

🇺🇸 162.216.149.40

🇺🇸 104.23.211.178

🇺🇸 50.126.161.28

🇬🇧 45.82.76.135

🇺🇸 43.173.120.84