189.28.56.48
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- IPB NET LTDA
- Usage Type
- Fixed Line ISP
- ASN
- AS274370
- Domain Name
- ipbnet.com.br
- Country
- 🇧🇷 Brazil
- City
- Porto Belo, Santa Catarina
Abuse Reports
Total reports
34 from
20 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇩🇪 LRob |
Shop search flood (L7 DDoS) | path: /97-vtc-all-road-electrique | query: q=Taille-S/Famille-Yucatan-Sinus | src_port: 28204
|
DDoS Attack Web App Attack | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=20031 dstport=2391
|
Port Scan | |
| 🇳🇵 radheykrishna.com.np |
Oct 3 10:33:22 kernel: [337016.143986] [UFW BLOCK] IN=ens160 OUT= SRC=189.28.56.48 LEN=68 TOS=0x00 PREC=0x00 TTL=55 ID=5497 DF PROTO=UDP SPT=19872 DPT=28185 LEN=48
...
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 38651.
|
Port Scan Hacking | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
|
Bad Web Bot | |
| Anonymous |
24993/udp (1 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 59136.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 44896.
|
Port Scan Hacking | |
| 🇺🇸 etu brutus |
189.28.56.48 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | |
| Anonymous |
denied traffic to a honeypot network. destination port 33496.
|
Port Scan Hacking | |
| Anonymous |
unsolicited UDP packet to port 52279 (26 bytes)
|
Hacking | |
| 🇫🇷 Zkillu |
DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS274370) sent ~134 packets (0.01 MB) during the attack window. Likely a compromised device (botnet).
|
DDoS Attack Exploited Host | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| Anonymous |
58097/udp (1 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown