AbuseIPDB » 139.28.190.127
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example previewReport Categories (Last 60 Days)
Example previewIP Abuse Reports for 139.28.190.127:
This IP address has been reported a total of 32 times from 19 distinct sources. 139.28.190.127 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 2 reports; Brazil with 1 report; France with 1 report. The most common categories in these recent reports were: Brute-Force 7 times; Hacking 2 times; Exploited Host 1 time; Port Scan 1 time; DDoS Attack 1 time; Other 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇧🇷 ICS Labs |
ICS Labs identified 139.28.190.127 as a malicious indicator from threat intelligence.
|
DDoS Attack Hacking Exploited Host | ||
| 🇫🇷 solution.it |
|
Brute-Force | ||
| 🇩🇪 FeG Deutschland |
Mail: - login with unknown user - bruteforce
|
Brute-Force | ||
| 🇷🇸 Smel |
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
|
Email Spam Hacking Brute-Force | ||
| 🇩🇪 initsol |
|
Brute-Force | ||
| 🇿🇦 hostsec_za |
IMAP/POP3 Auth Attack. 10 failed logins in 6 hours.
|
Brute-Force | ||
| 🇷🇺 DZBOT |
DZBOT: [MTA] NO LOGIN / auth failed
|
Port Scan Brute-Force | ||
| Anonymous |
Authentication failure
|
Brute-Force | ||
| 🇧🇷 ICS Labs |
ICS Labs identified 139.28.190.127 as a malicious indicator from threat intelligence.
|
DDoS Attack Hacking Exploited Host | ||
| 🇸🇮 basing |
2026-05-07 02:02:24 bs SASL PLAIN auth failed: rhost=139.28.190.127...
|
Brute-Force | ||
| Anonymous |
Authentication failure
|
Brute-Force | ||
| 🇷🇴 gtheo99 |
(imapd) Failed IMAP login from 139.28.190.127 (ES/Spain/-): 3 in the last 900 secs
|
Brute-Force Email Spam | ||
| 🇿🇦 maximonline.co.za |
Brute Force IMAP AUTH Attack
|
Brute-Force | ||
| 🇦🇹 AustrianSimon |
|
Brute-Force | ||
| 🇩🇪 FeG Deutschland |
Mail: - login with unknown user - bruteforce
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩