This IP address has been reported a total of
25
times from
25 distinct
sources.
3.133.99.140 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot [nx-infrastructure]: HTTP/1.1 request on 3000
GET /
User-Agent: visionheight.com/scan Mozi ...
show moreHoneypot [nx-infrastructure]: HTTP/1.1 request on 3000
GET /
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 3000 [4], 24002 [3] TCP
Reported by: Justin F.
show less
Honeypot [uk-production01]: HTTP/1.1 request on 1521
GET /
User-Agent: visionheight.com/scan Mozill ...
show moreHoneypot [uk-production01]: HTTP/1.1 request on 1521
GET /
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 1521 [3], 51005 [3], 3377 [2] TCP
show less
Unsolicited TCP connection from 3.133.99.140 to port 0 at 2026-06-12T04:43:15Z. Source IP completed ...
show moreUnsolicited TCP connection from 3.133.99.140 to port 0 at 2026-06-12T04:43:15Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
Jun 12 07:31:08 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=3. ...
show moreJun 12 07:31:08 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=3.133.99.140, lip=192.168.1.80, session=<i6MY8gZUXpEDhWOM>
Jun 12 07:31:13 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=3.133.99.140, lip=192.168.1.80, session=<tNNn8gZUqlsDhWOM>
Jun 12 07:32:31 mail dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=<>, rip=3.133.99.140, lip=192.168.1.80, session=<OJwD9wZUdo0DhWOM>
show less