AbuseIPDB » 201.28.130.42

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.250.105, microsoft.com, or 5.188.10.0/24

201.28.130.42 was found in our database!

This IP was reported 236 times. Confidence of Abuse is 100%: ?

100%

ISP	Vivo S.A.
Usage Type	Unknown
Hostname(s)	201-28-130-42.customer.tdatabrasil.net.br
Domain Name	vivo.com.br
Country	Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 201.28.130.42

Whois 201.28.130.42

IP Abuse Reports for 201.28.130.42:

This IP address has been reported a total of 236 times from 59 distinct sources. 201.28.130.42 was first reported on December 2nd 2020, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
xyz.rip	3 hours ago	Magento Bruteforce Attempt...	Brute-Force Web App Attack
Hirte	23 hours ago	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
FireGuard Server	15 Apr 2021	IP: 201.28.130.42 Ports affected IMAP over TLS protocol (993) Abuse Confid ... show moreIP: 201.28.130.42 Ports affected IMAP over TLS protocol (993) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS10429 TELEFONICA BRASIL S.A Brazil (BR) CIDR 201.28.0.0/16 Unauthorized connection attempt Log Date: 15/04/2021 9:23:53 AM UTC show less	Email Spam Hacking
Hirte	13 Apr 2021	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
ipcop.net	07 Apr 2021	Apr 7 21:06:41 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],2 ... show moreApr 7 21:06:41 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<Eq2KoWa/xr/JHIIq>): unknown user Apr 7 21:06:49 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<Eq2KoWa/xr/JHIIq>): unknown user Apr 7 21:07:01 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<Eq2KoWa/xr/JHIIq>): unknown user Apr 7 21:07:20 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<Eq2KoWa/xr/JHIIq>): unknown user Apr 7 21:07:22 mail.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 4 attempts in 41 secs): user=<[email protected]>, method=PLAIN, rip=201.28.130.42, lip=185.118.197.126, TLS: Connection closed, session=<Eq2KoWa/xr/JHIIq> show less	Fraud VoIP Brute-Force
Hirte	07 Apr 2021	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
ipcop.net	07 Apr 2021	Apr 7 14:24:27 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],2 ... show moreApr 7 14:24:27 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<sY4UA2G/e6DJHIIq>): unknown user Apr 7 14:24:36 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<sY4UA2G/e6DJHIIq>): unknown user Apr 7 14:24:48 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<sY4UA2G/e6DJHIIq>): unknown user Apr 7 14:25:07 mail.srvfarm.net dovecot: auth-worker(2653117): sql([email protected],201.28.130.42,<sY4UA2G/e6DJHIIq>): unknown user Apr 7 14:25:09 mail.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 4 attempts in 42 secs): user=<[email protected]>, method=PLAIN, rip=201.28.130.42, lip=185.118.197.126, TLS: Connection closed, session=<sY4UA2G/e6DJHIIq> show less	Fraud VoIP Brute-Force
Anonymous	06 Apr 2021	201.28.130.42 (BR/Brazil/201-28-130-42.customer.tdatabrasil.net.br), 5 distributed pop3d attacks on ... show more201.28.130.42 (BR/Brazil/201-28-130-42.customer.tdatabrasil.net.br), 5 distributed pop3d attacks on account [[email protected]] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK show less	Brute-Force
samelarmain.com	06 Apr 2021	Apr 6 08:42:27 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\ ... show moreApr 6 08:42:27 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=201.28.130.42, lip=10.64.89.208, TLS, session=\<lsD8HUi/xcvJHIIq\> ... show less	Hacking Brute-Force
Hirte	05 Apr 2021	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
Hirte	05 Apr 2021	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
samelarmain.com	05 Apr 2021	Apr 5 23:10:08 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\ ... show moreApr 5 23:10:08 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=201.28.130.42, lip=10.64.89.208, TLS, session=\<Upk2H0C/9ePJHIIq\> ... show less	Hacking Brute-Force
nowyouknow	04 Apr 2021	(From [email protected]) byRWwnxmpsLJoQgv	Phishing Web Spam
basing	04 Apr 2021	2021-04-04 09:45:54 idz SASL PLAIN auth failed: rhost=201.28.130.42...	Brute-Force
Anonymous	04 Apr 2021	Credential Stuffing, ABUSE Blocked for 24h	Brute-Force Web App Attack