139.28.218.134

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.28.218.34	attack	22/tcp 27017/tcp 5900/tcp... [2020-05-05/07-05]41pkt,14pt.(tcp),3pt.(udp)	2020-07-06 01:59:22
139.28.218.34	attack	" "	2020-06-07 23:09:09
139.28.218.34	attack	TCP (SYN) 139.28.218.34:57239 -> port 11211, len 44	2020-05-24 18:34:57
139.28.218.77	attack	Brute force attack against VPN service	2020-04-18 14:09:10
139.28.218.34	attack	Honeypot hit.	2020-04-17 06:58:59
139.28.218.34	attackbotsspam	Honeypot hit.	2020-02-18 23:28:51
139.28.218.34	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-13 18:29:58
139.28.218.34	attackbotsspam	" "	2020-02-04 17:02:15
139.28.218.34	attack	Portscan or hack attempt detected by psad/fwsnort	2020-01-11 08:28:43
139.28.218.34	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-15 05:38:57
139.28.218.28	attackbots	TCP Port Scanning	2019-11-18 21:04:33
139.28.218.34	attack	Scanning random ports - tries to find possible vulnerable services	2019-11-03 07:56:18
139.28.218.34	attackbotsspam	VN - 1H : (90) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : VN NAME ASN : ASN9009 IP : 139.28.218.34 CIDR : 139.28.218.0/24 PREFIX COUNT : 1708 UNIQUE IP COUNT : 749056 WYKRYTE ATAKI Z ASN9009 : 1H - 1 3H - 3 6H - 5 12H - 7 24H - 9 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-09-11 23:33:40
139.28.218.130	attackspambots	Postfix DNSBL listed. Trying to send SPAM.	2019-07-08 02:56:39
139.28.218.137	attackbotsspam	Postfix DNSBL listed. Trying to send SPAM.	2019-06-27 22:09:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.28.218.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52133
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.28.218.134.			IN	A

;; AUTHORITY SECTION:
.			385	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010801 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 09 08:56:28 CST 2022
;; MSG SIZE  rcvd: 107

Host info

134.218.28.139.in-addr.arpa domain name pointer gaping.ductinmedi.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
134.218.28.139.in-addr.arpa	name = gaping.ductinmedi.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
158.69.194.115	attack	Invalid user ts3server from 158.69.194.115 port 42462	2019-09-21 13:51:12
103.21.218.242	attackspam	Sep 21 05:55:31 srv206 sshd[4192]: Invalid user beaver from 103.21.218.242 ...	2019-09-21 13:03:12
106.13.106.46	attackbotsspam	Sep 21 05:11:04 hcbbdb sshd\[8682\]: Invalid user webmin from 106.13.106.46 Sep 21 05:11:04 hcbbdb sshd\[8682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.106.46 Sep 21 05:11:07 hcbbdb sshd\[8682\]: Failed password for invalid user webmin from 106.13.106.46 port 53324 ssh2 Sep 21 05:16:18 hcbbdb sshd\[9281\]: Invalid user up from 106.13.106.46 Sep 21 05:16:18 hcbbdb sshd\[9281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.106.46	2019-09-21 13:16:31
92.63.194.47	attackbotsspam	Invalid user admin from 92.63.194.47 port 58882	2019-09-21 13:53:10
155.4.96.83	attack	php WP PHPmyadamin ABUSE blocked for 12h	2019-09-21 13:29:33
91.151.93.119	attackbots	2019-09-20 22:50:37 H=vpsnode14.webstudio28.com (mail.ad-future.com) [91.151.93.119]:41112 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-20 22:54:07 H=vpsnode14.webstudio28.com (mail.ad-future.com) [91.151.93.119]:48105 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-20 22:54:48 H=vpsnode14.webstudio28.com (mail.ad-future.com) [91.151.93.119]:46934 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-21 13:41:59
52.187.37.188	attackbots	Sep 21 01:20:43 plusreed sshd[8071]: Invalid user informix from 52.187.37.188 ...	2019-09-21 13:27:38
210.5.158.235	attackbotsspam	Sep 19 13:04:00 localhost kernel: [2650457.947477] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=210.5.158.235 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=233 ID=34098 PROTO=TCP SPT=58403 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 19 13:04:00 localhost kernel: [2650457.947501] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=210.5.158.235 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=233 ID=34098 PROTO=TCP SPT=58403 DPT=445 SEQ=897246449 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 20 23:55:40 localhost kernel: [2775958.523235] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=210.5.158.235 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=233 ID=53545 PROTO=TCP SPT=41208 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 20 23:55:40 localhost kernel: [2775958.523247] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=210.5.158.235 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x2	2019-09-21 12:57:15
81.22.45.252	attackspam	09/20/2019-23:54:30.547732 81.22.45.252 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 85	2019-09-21 13:46:39
91.106.97.88	attackbotsspam	Sep 20 19:38:18 php1 sshd\[23787\]: Invalid user win from 91.106.97.88 Sep 20 19:38:18 php1 sshd\[23787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.106.97.88 Sep 20 19:38:20 php1 sshd\[23787\]: Failed password for invalid user win from 91.106.97.88 port 36284 ssh2 Sep 20 19:43:10 php1 sshd\[24446\]: Invalid user ik from 91.106.97.88 Sep 20 19:43:10 php1 sshd\[24446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.106.97.88	2019-09-21 13:44:07
106.51.73.204	attackbots	Sep 21 07:29:09 mail sshd\[32734\]: Invalid user namote from 106.51.73.204 port 2219 Sep 21 07:29:09 mail sshd\[32734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204 Sep 21 07:29:11 mail sshd\[32734\]: Failed password for invalid user namote from 106.51.73.204 port 2219 ssh2 Sep 21 07:33:58 mail sshd\[698\]: Invalid user administrator from 106.51.73.204 port 42084 Sep 21 07:33:58 mail sshd\[698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204	2019-09-21 13:50:39
124.122.253.32	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-21 13:22:26
177.71.1.126	attackspambots	Unauthorised access (Sep 21) SRC=177.71.1.126 LEN=52 TTL=117 ID=19076 DF TCP DPT=445 WINDOW=8192 SYN	2019-09-21 13:06:33
54.37.71.235	attack	Sep 21 06:57:25 bouncer sshd\[25886\]: Invalid user nagios from 54.37.71.235 port 46702 Sep 21 06:57:25 bouncer sshd\[25886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.71.235 Sep 21 06:57:27 bouncer sshd\[25886\]: Failed password for invalid user nagios from 54.37.71.235 port 46702 ssh2 ...	2019-09-21 13:09:03
68.183.155.33	attackbotsspam	Sep 21 05:23:08 venus sshd\[11433\]: Invalid user appuser from 68.183.155.33 port 52828 Sep 21 05:23:08 venus sshd\[11433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.155.33 Sep 21 05:23:11 venus sshd\[11433\]: Failed password for invalid user appuser from 68.183.155.33 port 52828 ssh2 ...	2019-09-21 13:23:52

Recently Reported IPs

194.84.134.14	140.104.215.236	39.103.91.231	239.75.117.2
123.50.222.218	211.215.187.57	175.209.248.107	103.6.70.46
190.96.22.116	109.133.150.195	61.243.142.42	203.110.85.162
122.59.216.198	114.218.126.26	132.214.115.129	37.211.26.175
85.139.155.40	70.183.49.1	188.72.99.35	175.199.219.130