117.91.133.139

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
117.91.133.219	attack	Oct 20 07:55:29 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219] Oct 20 07:55:30 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219] Oct 20 07:55:32 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219] Oct 20 07:55:33 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219] Oct 20 07:55:34 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.91.133.219	2019-10-20 23:01:45

Type

Details

Datetime

117.91.133.219

attack

Oct 20 07:55:29 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:30 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:32 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:33 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]
Oct 20 07:55:34 esmtp postfix/smtpd[24423]: lost connection after AUTH from unknown[117.91.133.219]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.91.133.219

2019-10-20 23:01:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.91.133.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39910
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.91.133.139.			IN	A

;; AUTHORITY SECTION:
.			554	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 23:03:58 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 139.133.91.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.133.91.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.183.27.207	attackspambots	Unauthorized connection attempt from IP address 180.183.27.207 on Port 445(SMB)	2020-09-19 05:52:35
96.82.91.33	attackbots	Port scan on 1 port(s): 22	2020-09-19 06:01:46
88.202.190.144	attackspam	Automatic report - Port Scan Attack	2020-09-19 05:45:44
122.5.42.165	attackbots	Unauthorized connection attempt from IP address 122.5.42.165 on Port 445(SMB)	2020-09-19 06:05:24
222.186.42.155	attack	detected by Fail2Ban	2020-09-19 05:53:51
54.169.202.194	attackspambots	54.169.202.194 - - [18/Sep/2020:18:01:47 +0100] "POST /wp-login.php HTTP/1.1" 200 2339 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.169.202.194 - - [18/Sep/2020:18:01:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.169.202.194 - - [18/Sep/2020:18:01:49 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-19 05:47:36
58.186.118.79	attackbotsspam	Unauthorized connection attempt from IP address 58.186.118.79 on Port 445(SMB)	2020-09-19 06:12:23
27.6.185.193	attackbots	Port probing on unauthorized port 23	2020-09-19 06:12:39
62.152.31.248	attack	Sep 18 17:01:07 ssh2 sshd[28628]: Failed password for invalid user support from 62.152.31.248 port 48114 ssh2 Sep 18 17:00:49 ssh2 sshd[28624]: Connection from 62.152.31.248 port 48066 on 192.240.101.3 port 22 Sep 18 17:01:07 ssh2 sshd[28624]: User root from cpe-645877.ip.primehome.com not allowed because not listed in AllowUsers ...	2020-09-19 06:02:04
167.172.144.31	attack	xmlrpc attack	2020-09-19 05:50:32
51.15.214.21	attack	Tried sshing with brute force.	2020-09-19 05:59:36
106.111.118.39	attack	Sep 18 19:01:49 icecube postfix/smtpd[66796]: NOQUEUE: reject: RCPT from unknown[106.111.118.39]: 554 5.7.1 Service unavailable; Client host [106.111.118.39] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/106.111.118.39 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-09-19 05:46:47
119.252.171.122	attack	Unauthorized connection attempt from IP address 119.252.171.122 on Port 445(SMB)	2020-09-19 05:36:30
31.173.103.188	attack	[portscan] Port scan	2020-09-19 06:04:29
190.171.133.10	attackspambots	Sep 18 16:58:03 vlre-nyc-1 sshd\[13161\]: Invalid user miterio from 190.171.133.10 Sep 18 16:58:03 vlre-nyc-1 sshd\[13161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.171.133.10 Sep 18 16:58:05 vlre-nyc-1 sshd\[13161\]: Failed password for invalid user miterio from 190.171.133.10 port 42030 ssh2 Sep 18 17:01:46 vlre-nyc-1 sshd\[13238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.171.133.10 user=root Sep 18 17:01:48 vlre-nyc-1 sshd\[13238\]: Failed password for root from 190.171.133.10 port 37706 ssh2 ...	2020-09-19 05:46:26

Recently Reported IPs

117.91.133.12	117.91.133.115	117.91.133.151	117.91.133.142
117.91.133.157	114.233.8.42	117.91.133.158	117.91.133.17
117.91.133.146	117.91.133.163	117.91.133.166	117.91.133.171
117.91.133.183	117.91.133.186	117.91.133.169	117.91.133.172
117.91.133.189	117.91.133.197	114.233.8.44	117.91.133.201