JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.131.12.28

27.131.12.28 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	Dhaka Fiber Net Ltd.
Usage Type	Fixed Line ISP
ASN	AS55492
Domain Name	dfnbd.net
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.131.12.28

Whois 27.131.12.28

IP Abuse Reports for 27.131.12.28:

This IP address has been reported a total of 34 times from 25 distinct sources. 27.131.12.28 was first reported on July 18th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-05-23 04:35:45 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇭 Origon	2026-04-20 14:58:44 (2 months ago)	NOQUEUE - IP: 27.131.12.28 - Apr 20 16:58:44 plesk postfix/smtpd[2740833]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 27.131.12.28 - Apr 20 16:58:44 plesk postfix/smtpd[2740833]: NOQUEUE: reject: RCPT from unknown[27.131.12.28]: 554 5.7.1 Service unavailable; Client host [27.131.12.28] blocked using dnsbl-1.uceprotect.net; IP 27.131.12.28 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=27.131.12.28; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<27.131.12.28> show less	Email Spam
Anonymous	2026-04-10 19:30:23 (2 months ago)	2026-04-10 14:30:22.665 [23418] H=(27.131.12.28) [27.131.12.28]:59190 I=[192.168.1.220]:25 Ci=23418 ... show more 2026-04-10 14:30:22.665 [23418] H=(27.131.12.28) [27.131.12.28]:59190 I=[192.168.1.220]:25 Ci=23418 F=<[email protected]> rejected RCPT <[email protected]>: Unknown user ... show less	Brute-Force Exploited Host
🇯🇵 Kinsei Engineering Inc.	2026-04-01 09:50:12 (3 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Brute-Force Email Spam
🇳🇱 Cloud86 B.V.	2026-03-27 09:13:31 (3 months ago)	categories: Email Spam	Email Spam
🇨🇿 interconnect.cz	2026-03-22 14:42:20 (3 months ago)	[22/Mar/2026 15:42:19] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <a ... show more [22/Mar/2026 15:42:19] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [22/Mar/2026 15:42:19] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [22/Mar/2026 15:42:19] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 27.131.12.28 ... show less	Brute-Force Email Spam
🇨🇿 interconnect.cz	2026-03-21 22:48:01 (3 months ago)	[21/Mar/2026 23:48:01] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <e ... show more [21/Mar/2026 23:48:01] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> ... show less	Brute-Force Email Spam
🇨🇿 interconnect.cz	2026-03-21 18:00:58 (3 months ago)	[21/Mar/2026 19:00:57] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <h ... show more [21/Mar/2026 19:00:57] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [21/Mar/2026 19:00:57] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> ... show less	Brute-Force Email Spam
🇨🇿 interconnect.cz	2026-03-20 22:05:25 (3 months ago)	[20/Mar/2026 23:05:24] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <u ... show more [20/Mar/2026 23:05:24] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [20/Mar/2026 23:05:24] IP address 27.131.12.28 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [20/Mar/2026 23:05:24] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 27.131.12.28 ... show less	Brute-Force Email Spam
🇵🇹 rnl	2026-03-11 16:32:39 (3 months ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇪🇸 www.pk25.com	2026-03-06 20:06:33 (3 months ago)	2026-03-06 20:08:18 H=(27.131.12.28) [27.131.12.28] sender verify fail for <d854c8057f@adycoaduanas. ... show more 2026-03-06 20:08:18 H=(27.131.12.28) [27.131.12.28] sender verify fail for <[email protected]>: Unrouteable address 2026-03-06 20:08:18 H=(27.131.12.28) [27.131.12.28] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-03-06 21:06:32 H=(27.131.12.28) [27.131.12.28] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
🇨🇭 Origon	2026-03-01 15:24:24 (4 months ago)	NOQUEUE - IP: 27.131.12.28 - Mar 1 16:24:23 plesk postfix/smtpd[1246225]: NOQUEUE: reject: RCPT fro ... show more NOQUEUE - IP: 27.131.12.28 - Mar 1 16:24:23 plesk postfix/smtpd[1246225]: NOQUEUE: reject: RCPT from unknown[27.131.12.28]: 554 5.7.1 Service unavailable; Client host [27.131.12.28] blocked using dnsbl-2.uceprotect.net; Net 27.131.12.0/22 is UCEPROTECT-Level2 listed because 10 impacts are seen from DFN-BD Dhaka Fiber Net Limited, BD/AS55492 there. See: http://www.uceprotect.net/rblcheck.php?ipr=27.131.12.28; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<27.131.12.28> show less	Email Spam
🇮🇹 VHosting	2026-02-26 01:09:24 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 AWSGIEMSAN7	2026-02-25 12:07:06 (4 months ago)	Feb 25 06:07:03 mail postfix/smtpd[27764]: warning: unknown[27.131.12.28]: SASL LOGIN authentication ... show more Feb 25 06:07:03 mail postfix/smtpd[27764]: warning: unknown[27.131.12.28]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 TPI-Abuse	2025-10-08 17:56:46 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 27.131.12.28 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 27.131.12.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 13:56:41.239669 2025] [security2:error] [pid 25987:tid 25987] [client 27.131.12.28:33970] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOal2UtVApMULYLC7knGtgAAAAs"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.55

🇩🇪 164.90.236.107

🇳🇱 91.92.40.172

🇲🇾 49.124.147.96

🇹🇼 221.120.74.68

🇳🇱 193.176.31.222

🇧🇷 191.209.31.253

🇫🇮 147.185.133.120

🇧🇷 138.186.41.230

🇮🇳 122.162.147.27

🇸🇬 103.187.147.214

🇩🇪 88.198.188.142

🇳🇱 85.11.167.46

🇺🇸 50.116.30.137

🇿🇦 197.95.51.96

🇳🇱 193.176.31.205

🇮🇳 152.52.15.213

🇬🇧 134.122.102.174

🇺🇸 129.80.200.33

🇫🇷 91.231.89.237