189.28.56.48

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
21% Elevated
34 reports
20 reporters · latest 1 month ago
ISP
IPB NET LTDA
Usage Type
Fixed Line ISP
ASN
AS274370
Domain Name
ipbnet.com.br
Country
🇧🇷 Brazil
City
Porto Belo, Santa Catarina
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇮🇳 India 1 🇳🇵 Nepal 1
Most common categories Port Scan 4 DDoS Attack 1 Web App Attack 1 Hacking 1 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇩🇪 LRob
Shop search flood (L7 DDoS) | path: /97-vtc-all-road-electrique | query: q=Taille-S/Famille-Yucatan-Sinus | src_port: 28204
DDoS Attack Web App Attack
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=20031 dstport=2391
Port Scan
🇳🇵 radheykrishna.com.np
Oct 3 10:33:22 kernel: [337016.143986] [UFW BLOCK] IN=ens160 OUT= SRC=189.28.56.48 LEN=68 TOS=0x00 PREC=0x00 TTL=55 ID=5497 DF PROTO=UDP SPT=19872 DPT=28185 LEN=48 ...
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 38651.
Port Scan Hacking
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
Anonymous
24993/udp (1 or more attempts)
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 59136.
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 44896.
Port Scan Hacking
🇺🇸 etu brutus
189.28.56.48 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
Anonymous
denied traffic to a honeypot network. destination port 33496.
Port Scan Hacking
Anonymous
unsolicited UDP packet to port 52279 (26 bytes)
Hacking
🇫🇷 Zkillu
DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS274370) sent ~134 packets (0.01 MB) during the attack window. Likely a compromised device (botnet).
DDoS Attack Exploited Host
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
Anonymous
58097/udp (1 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.141.60.79
🇬🇧 185.216.145.173
🇵🇱 172.69.155.46
🇷🇴 92.118.39.71
🇺🇸 91.230.168.93
🇳🇱 45.148.10.141
🇿🇦 196.11.179.15
🇳🇱 185.223.235.35
🇫🇷 185.177.72.75
🇰🇷 183.104.220.195
🇺🇸 74.7.175.135
🇺🇸 72.214.50.14
🇺🇸 43.153.96.233
🇳🇱 204.76.203.4
🇻🇳 203.205.37.233
🇫🇮 194.99.27.88
🇵🇸 188.0.120.158
🇸🇬 159.223.38.40
🇨🇳 118.122.147.49
🇰🇷 118.40.56.162
feedback