139.28.170.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '139.28.170.0 - 139.28.170.255'

% Abuse contact for '139.28.170.0 - 139.28.170.255' is 'abuse@beafortconnect.com'

inetnum:        139.28.170.0 - 139.28.170.255
country:        HK
netname:        BEAFORT_NET
mnt-by:         IPSMAIN
org:            ORG-BL643-RIPE
admin-c:        MD30013-RIPE
tech-c:         MD30013-RIPE
mnt-routes:     lir-hk-beafort-1-MNT
mnt-domains:    lir-hk-beafort-1-MNT
created:        2026-07-31T15:26:20Z
last-modified:  2026-07-31T15:26:20Z
source:         RIPE
status:         ASSIGNED PA

organisation:   ORG-BL643-RIPE
org-name:       BEAFORT LIMITED
country:        HK
reg-nr:         79659933
org-type:       LIR
address:        Unit C, 704, 7/F, Block 3, Nan Fung Industrial City, 18 Tin Hau Road, Tuen Mun, N.T.
address:        0000
address:        Hong Kong
address:        Hong Kong
phone:          +16506066380
admin-c:        MD30013-RIPE
tech-c:         MD30013-RIPE
abuse-c:        AR80139-RIPE
mnt-ref:        lir-hk-beafort-1-MNT
mnt-ref:        IPSMAIN
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         lir-hk-beafort-1-MNT
created:        2026-06-01T22:40:44Z
last-modified:  2026-07-30T21:34:43Z
source:         RIPE # Filtered

role:           Monitoring Department
address:        HONG KONG
address:        HONG KONG
address:        0000
address:        Unit C, 704, 7/F, Block 3, Nan Fung Industrial City,
                18 Tin Hau Road, Tuen Mun, N.T.
phone:          +16506066380
nic-hdl:        MD30013-RIPE
mnt-by:         lir-hk-beafort-1-MNT
created:        2026-06-01T22:40:44Z
last-modified:  2026-06-01T22:40:44Z
source:         RIPE # Filtered

% Information related to '139.28.168.0/22AS135330'

route:          139.28.168.0/22
origin:         AS135330
mnt-by:         IPSMAIN
created:        2026-07-31T15:36:07Z
last-modified:  2026-07-31T15:36:07Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.124.1 (ABERDEEN)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.28.170.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18613
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.28.170.20.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026092900 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 01:30:32 CST 2026
;; MSG SIZE  rcvd: 106

Host info

Host 20.170.28.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.170.28.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.207	attack	2019-11-28T20:05:11.168780abusebot-7.cloudsearch.cf sshd\[2056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207 user=root	2019-11-29 04:29:57
87.224.138.249	attackspam	SSHScan	2019-11-29 04:16:41
139.30.102.226	attack	Nov 28 15:10:22 vbuntu sshd[4223]: refused connect from 139.30.102.226 (139.30.102.226) Nov 28 15:10:22 vbuntu sshd[4224]: refused connect from 139.30.102.226 (139.30.102.226) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.30.102.226	2019-11-29 04:24:09
218.92.0.137	attackspam	Nov 28 15:30:18 TORMINT sshd\[377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.137 user=root Nov 28 15:30:20 TORMINT sshd\[377\]: Failed password for root from 218.92.0.137 port 50372 ssh2 Nov 28 15:30:23 TORMINT sshd\[377\]: Failed password for root from 218.92.0.137 port 50372 ssh2 ...	2019-11-29 04:31:58
45.136.110.16	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 3388 proto: TCP cat: Misc Attack	2019-11-29 04:52:18
168.232.130.87	attack	2019-11-28T15:28:43.028770host3.slimhost.com.ua sshd[3983998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.130.87 user=root 2019-11-28T15:28:44.797769host3.slimhost.com.ua sshd[3983998]: Failed password for root from 168.232.130.87 port 41850 ssh2 2019-11-28T15:28:47.368756host3.slimhost.com.ua sshd[3983998]: Failed password for root from 168.232.130.87 port 41850 ssh2 2019-11-28T15:28:43.028770host3.slimhost.com.ua sshd[3983998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.130.87 user=root 2019-11-28T15:28:44.797769host3.slimhost.com.ua sshd[3983998]: Failed password for root from 168.232.130.87 port 41850 ssh2 2019-11-28T15:28:47.368756host3.slimhost.com.ua sshd[3983998]: Failed password for root from 168.232.130.87 port 41850 ssh2 2019-11-28T15:28:43.028770host3.slimhost.com.ua sshd[3983998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ...	2019-11-29 04:44:35
78.139.200.51	attackbots	2019-11-28 H=user-78-139-200-51.tomtelnet.ru \[78.139.200.51\] F=\ rejected RCPT \: Mail not accepted. 78.139.200.51 is listed at a DNSBL. 2019-11-28 H=user-78-139-200-51.tomtelnet.ru \[78.139.200.51\] F=\ rejected RCPT \: Mail not accepted. 78.139.200.51 is listed at a DNSBL. 2019-11-28 H=user-78-139-200-51.tomtelnet.ru \[78.139.200.51\] F=\ rejected RCPT \<REMOVED@REMOVED.de\>: Mail not accepted. 78.139.200.51 is listed at a DNSBL.	2019-11-29 04:19:34
77.68.24.251	attackspam	77.68.24.251 - - \[28/Nov/2019:15:48:25 +0100\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 77.68.24.251 - - \[28/Nov/2019:15:48:26 +0100\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 77.68.24.251 - - \[28/Nov/2019:15:48:26 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-11-29 04:48:16
198.108.67.48	attackspam	Connection by 198.108.67.48 on port: 92 got caught by honeypot at 11/28/2019 5:45:53 PM	2019-11-29 04:42:56
177.54.144.70	attack	Chat Spam	2019-11-29 04:32:52
124.253.188.60	attackbotsspam	Nov 28 14:28:32 ms-srv sshd[14484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.253.188.60 Nov 28 14:28:34 ms-srv sshd[14484]: Failed password for invalid user admin from 124.253.188.60 port 39194 ssh2	2019-11-29 04:51:17
203.205.253.240	attack	Exploit Attempt	2019-11-29 04:26:50
122.114.206.25	attackspambots	Nov 28 08:26:08 eddieflores sshd\[16122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.206.25 user=root Nov 28 08:26:10 eddieflores sshd\[16122\]: Failed password for root from 122.114.206.25 port 57944 ssh2 Nov 28 08:30:46 eddieflores sshd\[16469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.206.25 user=root Nov 28 08:30:48 eddieflores sshd\[16469\]: Failed password for root from 122.114.206.25 port 60258 ssh2 Nov 28 08:35:41 eddieflores sshd\[16839\]: Invalid user litz from 122.114.206.25 Nov 28 08:35:41 eddieflores sshd\[16839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.206.25	2019-11-29 04:19:15
45.114.241.102	attackspam	Nov 28 15:13:34 mxgate1 postfix/postscreen[9658]: CONNECT from [45.114.241.102]:55078 to [176.31.12.44]:25 Nov 28 15:13:34 mxgate1 postfix/dnsblog[9661]: addr 45.114.241.102 listed by domain zen.spamhaus.org as 127.0.0.2 Nov 28 15:13:34 mxgate1 postfix/dnsblog[9661]: addr 45.114.241.102 listed by domain zen.spamhaus.org as 127.0.0.9 Nov 28 15:13:34 mxgate1 postfix/dnsblog[9662]: addr 45.114.241.102 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 28 15:13:40 mxgate1 postfix/postscreen[9658]: DNSBL rank 3 for [45.114.241.102]:55078 Nov x@x Nov 28 15:13:41 mxgate1 postfix/postscreen[9658]: DISCONNECT [45.114.241.102]:55078 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.114.241.102	2019-11-29 04:29:25
192.144.204.101	attack	Nov 28 21:34:11 ks10 sshd[22405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.204.101 Nov 28 21:34:13 ks10 sshd[22405]: Failed password for invalid user vandermeer from 192.144.204.101 port 33950 ssh2 ...	2019-11-29 04:44:52

Recently Reported IPs

20.51.218.16	39.149.92.165	39.146.40.21	24.199.122.159
223.73.27.170	211.92.223.216	183.199.166.78	120.231.40.134
120.216.104.79	120.213.67.48	101.26.28.174	39.149.6.150
120.239.28.180	112.37.0.73	85.105.214.198	4.227.178.182
171.22.217.67	103.196.9.228	171.22.217.90	173.46.91.36