77.28.131.107
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Makedonski Telekom AD-Skopje
- Usage Type
- Fixed Line ISP
- ASN
- AS6821
- Domain Name
- telekom.mk
- Country
- 🇲🇰 North Macedonia
- City
- Skopje, Grad Skopje
No reports in the last 60 days
77.28.131.107 has been reported 28 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
28 from
25 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
<jail> banned by fail2ban
|
Brute-Force Web App Attack | |
| 🇺🇸 thororen |
Blocked by UFW [1433/tcp]
Source port: 52951
TTL: 236
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/global-exclusion-high.
|
Hacking | |
| Anonymous |
Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Brute-Force | |
| 🇫🇷 Hiigara |
connection attempt : 77.28.131.107 on port : tcp/1433 (MSSQL)
|
Port Scan | |
| 🇩🇪 Justin F. | AS204464 |
Honeypot [nx-infrastructure]: MSSQL traffic (on 1433) with username sa and empty password
Reported by: Justin F.
|
Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 49505
TTL: 234
Packet length: 40
TOS: 0x08
This report (for 77.28.131.107) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 49505
TTL: 231
Packet length: 40
TOS: 0x08
This report (for 77.28.131.107) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Jun 16 00:12) SRC=77.28.131.107 LEN=40 TTL=242 ID=31188 TCP DPT=445 WINDOW=1024 SYN
|
Port Scan | |
| 🇺🇸 Bankbook8585 |
T-Pot honeypot | Dionaea honeypot: smbd
|
Port Scan Hacking | |
| 🇨🇦 Tanados |
Blocked by UFW [1433/tcp]
Source port: 42552
TTL: 237
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 D3RP4UL |
MSSQL traffic (on 1433) with username sa and empty password
|
Brute-Force | |
| 🇧🇾 StatsMe |
2026-06-11T01:12:22.364773+0300
ET SCAN Suspicious inbound to MSSQL port 1433
|
Port Scan | |
| Anonymous |
Honeypot multi-source hit. Sources: tpot:Dionaea,tpot:P0f,tpot:Suricata. Ports: 1433. Automated tiered (T-Pot+DShield).
|
Port Scan Hacking | |
| Anonymous |
ET SCAN Suspicious inbound to MSSQL port 1433
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown