This IP address has been reported a total of
105
times from
59 distinct
sources.
139.28.190.239 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automatic report from SCH firewall log.
https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Report ...
show moreAutomatic report from SCH firewall log.
https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: ry7jENavqE85Pe7xHKezZP6GVfk9VlZl
show less
Zimbra: Login failures from malicious IP: 139.28.190.239. Threat Score: 6/10 (MEDIUM). Reported by T ...
show moreZimbra: Login failures from malicious IP: 139.28.190.239. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
Anonymous
2026-06-28T21:48:51+0100 [masked] imap-login: Login aborted: Connection closed (auth failed, 3 attem ...
show more2026-06-28T21:48:51+0100 [masked] imap-login: Login aborted: Connection closed (auth failed, 3 attempts in 21 secs) (auth_failed): user=<yuri>, method=PLAIN, rip=139.28.190.239, lip=192.168.1.160, TLS, session=<kJbbdlZVL7iLHL7v>
...
show less
Jun 22 05:33:12 quad dovecot: auth-worker(18593): sql(eki_login,139.28.190.239,<PrVz+tBU0ZGLHL7v>): ...
show moreJun 22 05:33:12 quad dovecot: auth-worker(18593): sql(eki_login,139.28.190.239,<PrVz+tBU0ZGLHL7v>): unknown user
show less
Brute-Force
Exploited Host
Showing 1 to
15
of 105 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩