Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.162.28.163 attackspambots 
Scanning random ports - tries to find possible vulnerable services
 2019-09-01 16:37:18
139.162.28.163 attack 
" "
 2019-09-01 00:03:57
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.162.28.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56352
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.162.28.34.			IN	A

;; AUTHORITY SECTION:
.			292	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:01:21 CST 2022
;; MSG SIZE  rcvd: 106
Host info
34.28.162.139.in-addr.arpa domain name pointer toys.ptvgi.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.28.162.139.in-addr.arpa	name = toys.ptvgi.com.

Authoritative answers can be found from:
Related IP info:
139.162.28.151
139.162.28.64
139.162.28.10
139.162.28.171
139.162.28.221
139.162.28.251
139.162.28.126
139.162.28.195
139.162.28.72
139.162.28.166
139.162.28.21
139.162.28.15
139.162.28.156
139.162.28.158
139.162.28.237
139.162.28.44
139.162.28.206
139.162.28.182
139.162.28.238
139.162.28.210
139.162.28.59
139.162.28.197
139.162.28.16
139.162.28.225
139.162.28.125
139.162.28.175
139.162.28.133
139.162.28.83
139.162.28.194
139.162.28.29
139.162.28.235
139.162.28.147
139.162.28.114
139.162.28.78
139.162.28.134
139.162.28.169
139.162.28.37
139.162.28.136
139.162.28.20
139.162.28.63
139.162.28.17
139.162.28.191
139.162.28.189
139.162.28.243
139.162.28.120
139.162.28.3
139.162.28.112
139.162.28.24
139.162.28.104
139.162.28.42
139.162.28.253
139.162.28.215
139.162.28.74
139.162.28.233
139.162.28.142
139.162.28.62
139.162.28.46
139.162.28.128
139.162.28.97
139.162.28.113
139.162.28.170
139.162.28.213
139.162.28.227
139.162.28.23
139.162.28.73
139.162.28.241
139.162.28.56
139.162.28.79
139.162.28.180
139.162.28.220
139.162.28.27
139.162.28.1
139.162.28.223
139.162.28.196
139.162.28.152
139.162.28.178
139.162.28.187
139.162.28.103
139.162.28.11
139.162.28.92
139.162.28.131
139.162.28.106
139.162.28.157
139.162.28.43
139.162.28.12
139.162.28.137
139.162.28.217
139.162.28.94
139.162.28.228
139.162.28.248
139.162.28.32
139.162.28.193
139.162.28.122
139.162.28.149
139.162.28.105
139.162.28.111
139.162.28.199
139.162.28.209
139.162.28.52
139.162.28.77
139.162.28.36
139.162.28.127
139.162.28.109
139.162.28.207
139.162.28.55
139.162.28.54
139.162.28.124
139.162.28.135
139.162.28.69
139.162.28.236
139.162.28.26
139.162.28.164
139.162.28.245
139.162.28.2
139.162.28.13
139.162.28.68
139.162.28.249
139.162.28.138
139.162.28.58
139.162.28.155
139.162.28.184
139.162.28.87
139.162.28.61
139.162.28.146
139.162.28.70
139.162.28.80
139.162.28.4
139.162.28.33
139.162.28.176
139.162.28.192
139.162.28.38
139.162.28.200
139.162.28.93
139.162.28.66
139.162.28.8
139.162.28.150
139.162.28.214
139.162.28.88
139.162.28.205
139.162.28.76
139.162.28.100
139.162.28.181
139.162.28.107
139.162.28.129
139.162.28.41
139.162.28.99
139.162.28.86
139.162.28.49
139.162.28.159
139.162.28.230
139.162.28.226
139.162.28.167
139.162.28.240
139.162.28.252
139.162.28.65
139.162.28.89
139.162.28.85
139.162.28.154
139.162.28.140
139.162.28.31
139.162.28.57
139.162.28.102
139.162.28.7
139.162.28.165
139.162.28.25
139.162.28.117
139.162.28.95
139.162.28.45
139.162.28.242
139.162.28.101
139.162.28.28
139.162.28.143
139.162.28.84
139.162.28.173
139.162.28.185
139.162.28.224
139.162.28.123
139.162.28.96
139.162.28.108
139.162.28.162
139.162.28.247
139.162.28.141
139.162.28.81
139.162.28.183
139.162.28.47
139.162.28.75
139.162.28.160
139.162.28.163
139.162.28.188
139.162.28.53
139.162.28.50
139.162.28.234
139.162.28.60
139.162.28.67
139.162.28.48
139.162.28.91
139.162.28.239
139.162.28.179
139.162.28.254
139.162.28.39
139.162.28.132
139.162.28.222
139.162.28.204
139.162.28.130
139.162.28.118
139.162.28.212
139.162.28.51
139.162.28.34
139.162.28.18
139.162.28.229
139.162.28.35
139.162.28.119
139.162.28.110
139.162.28.144
139.162.28.211
139.162.28.148
139.162.28.216
139.162.28.116
139.162.28.203
139.162.28.5
139.162.28.22
139.162.28.40
139.162.28.218
139.162.28.71
139.162.28.139
139.162.28.19
139.162.28.231
139.162.28.201
139.162.28.174
139.162.28.6
139.162.28.14
139.162.28.208
139.162.28.82
139.162.28.9
139.162.28.161
139.162.28.98
139.162.28.145
139.162.28.198
139.162.28.186
139.162.28.190
139.162.28.121
139.162.28.115
139.162.28.202
139.162.28.250
139.162.28.30
139.162.28.232
139.162.28.153
139.162.28.244
139.162.28.219
139.162.28.90
139.162.28.172
139.162.28.177
139.162.28.168
139.162.28.246
Related comments:
IP Type Details Datetime
51.91.212.79 attack 
Portscan or hack attempt detected by psad/fwsnort
 2019-11-27 22:00:55
220.92.16.70 attackbotsspam 
2019-11-27T11:20:35.573984abusebot-5.cloudsearch.cf sshd\[12443\]: Invalid user bjorn from 220.92.16.70 port 34416
 2019-11-27 22:02:39
185.43.108.222 attackspam 
[WedNov2707:20:58.7397922019][:error][pid15215:tid47775414765312][client185.43.108.222:54034][client185.43.108.222]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"www.ilgiornaledelticino.ch"][uri"/3.sql"][unique_id"Xd4Vym2D5EWU274cjcnUMQAAAE8"][WedNov2707:20:59.3836182019][:error][pid15270:tid47775416866560][client185.43.108.222:54054][client185.43.108.222]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][seve
 2019-11-27 21:25:53
129.204.202.89 attackspambots 
Invalid user administrator from 129.204.202.89 port 36619
 2019-11-27 21:32:03
168.181.196.28 attackspam 
2019-11-27 03:01:06 H=(cliente.windx.168.181.196.28.windx.com.br) [168.181.196.28]:39809 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/168.181.196.28)
2019-11-27 03:01:07 H=(cliente.windx.168.181.196.28.windx.com.br) [168.181.196.28]:39809 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-11-27 03:01:08 H=(cliente.windx.168.181.196.28.windx.com.br) [168.181.196.28]:39809 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
 2019-11-27 22:03:55
188.240.208.26 attack 
$f2bV_matches
 2019-11-27 21:27:21
59.63.169.50 attackspambots 
Nov 26 23:40:23 hpm sshd\[26892\]: Invalid user manoukian from 59.63.169.50
Nov 26 23:40:23 hpm sshd\[26892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.63.169.50
Nov 26 23:40:24 hpm sshd\[26892\]: Failed password for invalid user manoukian from 59.63.169.50 port 50122 ssh2
Nov 26 23:45:10 hpm sshd\[27306\]: Invalid user tomihisa from 59.63.169.50
Nov 26 23:45:10 hpm sshd\[27306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.63.169.50
 2019-11-27 21:28:11
95.243.136.198 attack 
Nov 27 14:32:21 legacy sshd[21513]: Failed password for root from 95.243.136.198 port 57649 ssh2
Nov 27 14:36:21 legacy sshd[21717]: Failed password for root from 95.243.136.198 port 62640 ssh2
Nov 27 14:40:02 legacy sshd[21837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.243.136.198
...
 2019-11-27 22:03:11
106.52.6.248 attackbots 
2019-11-27T13:24:05.739282hub.schaetter.us sshd\[6808\]: Invalid user huang from 106.52.6.248 port 38132
2019-11-27T13:24:05.756687hub.schaetter.us sshd\[6808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.248
2019-11-27T13:24:07.065929hub.schaetter.us sshd\[6808\]: Failed password for invalid user huang from 106.52.6.248 port 38132 ssh2
2019-11-27T13:32:34.890868hub.schaetter.us sshd\[6871\]: Invalid user ormiston from 106.52.6.248 port 45312
2019-11-27T13:32:34.897621hub.schaetter.us sshd\[6871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.248
...
 2019-11-27 21:39:45
138.68.94.173 attack 
Invalid user admin from 138.68.94.173 port 47424
 2019-11-27 21:48:27
2604:a880:800:a1::16fa:6001 attackbots 
xmlrpc attack
 2019-11-27 22:06:15
201.156.38.245 attackspam 
Automatic report - Port Scan Attack
 2019-11-27 21:39:00
177.139.177.94 attack 
2019-11-27T06:20:33.020021abusebot-6.cloudsearch.cf sshd\[1217\]: Invalid user lw from 177.139.177.94 port 56719
 2019-11-27 21:44:23
195.9.185.62 attack 
Honeypot attack, port: 445, PTR: PTR record not found
 2019-11-27 21:24:39
62.210.151.21 attackspambots 
\[2019-11-27 08:17:07\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-27T08:17:07.950-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="5910441204918031",SessionID="0x7f26c471eed8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/51857",ACLName="no_extension_match"
\[2019-11-27 08:17:13\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-27T08:17:13.947-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="4413441204918031",SessionID="0x7f26c4bb3d98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/61153",ACLName="no_extension_match"
\[2019-11-27 08:17:19\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-27T08:17:19.800-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="1183441204918031",SessionID="0x7f26c4a90648",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.151.21/53624",ACLName="no_
 2019-11-27 21:23:33

Recently Reported IPs

139.162.28.116 139.162.28.150 139.162.255.151 139.162.29.31
139.162.28.75 139.162.27.247 139.162.29.82 139.162.29.44
139.162.30.170 139.162.3.159 139.162.30.188 139.162.31.26
139.162.35.6 139.162.36.182 139.162.3.148 139.162.33.236
139.162.37.11 139.162.38.118 139.162.38.216 139.162.38.21