JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.28.219.68

139.28.219.68 was found in our database!

This IP was reported 1,985 times. Confidence of Abuse is 100%: ?

100%

ISP	M247 LTD Paris Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇫🇷 France
City	Saint-Denis, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.28.219.68

Whois 139.28.219.68

IP Abuse Reports for 139.28.219.68:

This IP address has been reported a total of 1,985 times from 527 distinct sources. 139.28.219.68 was first reported on December 7th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 roxyapi	2026-09-02 08:43:14 (1 hour ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /blog/wp-includes/wlwmanife ... show more Honeypot: automated vulnerability scan / web app attack. Last probe: GET /blog/wp-includes/wlwmanifest.xml show less	Web App Attack Bad Web Bot
Anonymous	2026-09-02 06:46:45 (3 hours ago)	Detected by CrowdSec: crowdsecurity/http-probing	Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-09-02 06:43:04 (3 hours ago)	Web vulnerability scanning	Brute-Force Web Spam Web App Attack
Anonymous	2026-09-02 06:19:35 (3 hours ago)	2026-09-02T06:19:34.810802+00:00 instance-20260804-1025 wordpress(acbp.org.co)[1304847]: Blocked use ... show more 2026-09-02T06:19:34.810802+00:00 instance-20260804-1025 wordpress(acbp.org.co)[1304847]: Blocked user enumeration attempt from 139.28.219.68 ... show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-09-02 06:08:01 (3 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-09-02 05:19:15 (4 hours ago)	139.28.219.68 - - [02/Sep/2026:1 ...	Brute-Force
🇺🇸 lavnet.net	2026-09-02 04:16:34 (5 hours ago)	139.28.219.68 - - [02/Sep/2026:04:16:32 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 ... show more 139.28.219.68 - - [02/Sep/2026:04:16:32 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.28.219.68 - - [02/Sep/2026:04:16:33 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 403 2086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.28.219.68 - - [02/Sep/2026:04:16:33 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.28.219.68 - - [02/Sep/2026:04:16:33 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.28.219.68 - - [02/Sep/2026:04:16:33 +0000] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "M ... show less	Brute-Force
🇺🇸 bigwavedave	2026-09-02 00:51:53 (9 hours ago)	Wordpress Attack	Web App Attack
🇫🇷 SpaceHost-Server	2026-09-01 22:16:12 (11 hours ago)		Brute-Force Web App Attack
🇨🇦 zXero	2026-09-01 13:06:58 (20 hours ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇹🇷 neron	2026-09-01 13:02:41 (20 hours ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-09-01 09:20:27 (1 day ago)	FortiWeb WAF: 40 attacks detected. Threat Score: 10600. Types: Client Management(20), Block IP List( ... show more FortiWeb WAF: 40 attacks detected. Threat Score: 10600. Types: Client Management(20), Block IP List(20). Origin: France. show less	Web App Attack
🇫🇮 ☠\|ʂɧąɖơῳ\|☠	2026-09-01 06:23:46 (1 day ago)	[2026-09-01 06:23:46 UTC] Vulnerability/exploit scanning detected from 139.28.219.68 () PATHS: unkno ... show more [2026-09-01 06:23:46 UTC] Vulnerability/exploit scanning detected from 139.28.219.68 () PATHS: unknown show less	Bad Web Bot Web App Attack
🇩🇪 TheDjRider	2026-09-01 00:01:56 (1 day ago)	CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ... show more CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-09-01T00:01:54.449051519Z. Context: http_status=404 show less	Web App Attack
🇺🇸 rdpguard.com	2026-08-31 23:58:25 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force

Showing 1 to 15 of 1985 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.187.227.145

🇦🇺 115.64.211.216

🇮🇩 103.109.154.44

🇺🇸 97.107.134.234

🇱🇻 62.60.130.242

🇳🇱 46.151.178.11

🇺🇸 43.135.186.92

🇭🇰 43.129.193.109

🇭🇰 43.128.43.41

🇺🇸 43.110.38.5

🇿🇦 41.10.216.19

🇺🇸 35.254.67.46

🇰🇷 220.85.210.200

🇩🇪 185.242.3.226

🇺🇸 178.130.47.50

🇩🇪 167.94.146.64

🇺🇸 147.185.132.180

🇺🇸 100.28.153.226

🇺🇸 98.80.4.44

🇳🇱 91.92.40.124