139.28.218.139

Basic Info

City: Montreal

Region: Quebec

Country: Canada

Internet Service Provider: unknown

Hostname: unknown

Organization: M247 Ltd

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.28.218.34	attack	22/tcp 27017/tcp 5900/tcp... [2020-05-05/07-05]41pkt,14pt.(tcp),3pt.(udp)	2020-07-06 01:59:22
139.28.218.34	attack	" "	2020-06-07 23:09:09
139.28.218.34	attack	TCP (SYN) 139.28.218.34:57239 -> port 11211, len 44	2020-05-24 18:34:57
139.28.218.77	attack	Brute force attack against VPN service	2020-04-18 14:09:10
139.28.218.34	attack	Honeypot hit.	2020-04-17 06:58:59
139.28.218.34	attackbotsspam	Honeypot hit.	2020-02-18 23:28:51
139.28.218.34	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-13 18:29:58
139.28.218.34	attackbotsspam	" "	2020-02-04 17:02:15
139.28.218.34	attack	Portscan or hack attempt detected by psad/fwsnort	2020-01-11 08:28:43
139.28.218.34	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-15 05:38:57
139.28.218.28	attackbots	TCP Port Scanning	2019-11-18 21:04:33
139.28.218.34	attack	Scanning random ports - tries to find possible vulnerable services	2019-11-03 07:56:18
139.28.218.34	attackbotsspam	VN - 1H : (90) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : VN NAME ASN : ASN9009 IP : 139.28.218.34 CIDR : 139.28.218.0/24 PREFIX COUNT : 1708 UNIQUE IP COUNT : 749056 WYKRYTE ATAKI Z ASN9009 : 1H - 1 3H - 3 6H - 5 12H - 7 24H - 9 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-09-11 23:33:40
139.28.218.130	attackspambots	Postfix DNSBL listed. Trying to send SPAM.	2019-07-08 02:56:39
139.28.218.137	attackbotsspam	Postfix DNSBL listed. Trying to send SPAM.	2019-06-27 22:09:25

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.28.218.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48792
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.28.218.139.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019033102 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 01 13:59:36 +08 2019
;; MSG SIZE  rcvd: 118

Host info

139.218.28.139.in-addr.arpa domain name pointer develop.ductinmedi.com.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
139.218.28.139.in-addr.arpa	name = develop.ductinmedi.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.65.147.235	attackspambots	TCP port : 15400	2020-10-11 18:54:06
123.206.28.232	attackspam	Fail2Ban	2020-10-11 19:07:26
189.112.228.153	attack	Oct 11 10:54:42 melroy-server sshd[11791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.228.153 Oct 11 10:54:45 melroy-server sshd[11791]: Failed password for invalid user eillen from 189.112.228.153 port 35554 ssh2 ...	2020-10-11 19:06:26
126.54.182.92	attack	Port Scan: TCP/443	2020-10-11 18:49:30
139.59.93.93	attackbotsspam	(sshd) Failed SSH login from 139.59.93.93 (IN/India/rupal-chaudhary-ubuntu-18.04): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 05:48:49 optimus sshd[28088]: Invalid user alex from 139.59.93.93 Oct 11 05:48:49 optimus sshd[28088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 Oct 11 05:48:51 optimus sshd[28088]: Failed password for invalid user alex from 139.59.93.93 port 60706 ssh2 Oct 11 05:50:59 optimus sshd[29050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root Oct 11 05:51:01 optimus sshd[29050]: Failed password for root from 139.59.93.93 port 34850 ssh2	2020-10-11 18:59:40
92.222.74.255	attack	fail2ban -- 92.222.74.255 ...	2020-10-11 18:54:49
165.227.72.166	attackspam	Oct 11 00:29:56 web9 sshd\[23948\]: Invalid user postgres from 165.227.72.166 Oct 11 00:29:56 web9 sshd\[23948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.72.166 Oct 11 00:29:58 web9 sshd\[23948\]: Failed password for invalid user postgres from 165.227.72.166 port 52341 ssh2 Oct 11 00:34:26 web9 sshd\[24607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.72.166 user=sync Oct 11 00:34:28 web9 sshd\[24607\]: Failed password for sync from 165.227.72.166 port 55457 ssh2	2020-10-11 19:25:24
78.31.95.241	attackbots	Autoban 78.31.95.241 AUTH/CONNECT	2020-10-11 19:20:36
157.245.101.31	attackbots	(sshd) Failed SSH login from 157.245.101.31 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 06:07:32 optimus sshd[11088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.101.31 user=root Oct 11 06:07:34 optimus sshd[11088]: Failed password for root from 157.245.101.31 port 38258 ssh2 Oct 11 06:11:27 optimus sshd[12616]: Invalid user jj from 157.245.101.31 Oct 11 06:11:27 optimus sshd[12616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.101.31 Oct 11 06:11:30 optimus sshd[12616]: Failed password for invalid user jj from 157.245.101.31 port 42476 ssh2	2020-10-11 18:56:54
193.93.194.168	attackbotsspam	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-11 19:23:01
157.230.93.183	attackbotsspam	Oct 11 12:41:25 OPSO sshd\[740\]: Invalid user macintosh from 157.230.93.183 port 58292 Oct 11 12:41:25 OPSO sshd\[740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.93.183 Oct 11 12:41:27 OPSO sshd\[740\]: Failed password for invalid user macintosh from 157.230.93.183 port 58292 ssh2 Oct 11 12:45:08 OPSO sshd\[2177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.93.183 user=root Oct 11 12:45:10 OPSO sshd\[2177\]: Failed password for root from 157.230.93.183 port 36622 ssh2	2020-10-11 19:18:50
167.172.152.143	attack	Oct 11 06:45:34 ny01 sshd[14244]: Failed password for root from 167.172.152.143 port 58090 ssh2 Oct 11 06:49:10 ny01 sshd[14753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.152.143 Oct 11 06:49:12 ny01 sshd[14753]: Failed password for invalid user system2 from 167.172.152.143 port 35794 ssh2	2020-10-11 19:05:09
159.89.48.237	attackspambots	159.89.48.237 - - [11/Oct/2020:11:22:13 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.48.237 - - [11/Oct/2020:11:22:21 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.48.237 - - [11/Oct/2020:11:22:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-11 18:56:42
113.234.50.224	attack	TCP (SYN) 113.234.50.224:55283 -> port 23, len 40	2020-10-11 18:47:21
121.46.26.126	attackspam	SSH login attempts.	2020-10-11 19:04:34

Recently Reported IPs

52.172.50.194	185.211.245.170	124.248.217.210	118.25.12.59
58.48.61.29	58.10.209.45	212.92.123.182	192.99.244.105
123.206.217.59	118.24.69.234	52.168.4.130	109.5.255.7
54.38.78.44	66.70.130.151	192.81.209.129	45.125.65.89
185.234.219.60	114.234.207.114	103.125.216.130	85.33.39.221