AbuseIPDB » 91.130.48.117

91.130.48.117 was found in our database!

This IP was reported 938 times. Confidence of Abuse is 100%: ?

100%

ISP	TELE2
Usage Type	Fixed Line ISP
ASN	AS1257
Hostname(s)	c91-130-48-117.bredband.tele2.se
Domain Name	tele2.com
Country	Sweden
City	Tumba, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 91.130.48.117

Whois 91.130.48.117

IP Abuse Reports for 91.130.48.117:

This IP address has been reported a total of 938 times from 296 distinct sources. 91.130.48.117 was first reported on March 1st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-06-12 22:43:04 (2 days ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/91.130.48.117	SSH
Paul Smith	2025-06-12 06:54:31 (2 days ago)	Email Auth Brute force attack 23/22 in last day	Brute-Force
ThreatBook.io	2025-06-11 22:40:01 (3 days ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/91.130.48.117	SSH
securemailen.nl	2025-06-11 20:48:18 (3 days ago)	SMTP Brute Force	Brute-Force
rtbh.com.tr	2025-06-11 20:07:05 (3 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Tefexia	2025-06-11 18:43:00 (3 days ago)	Brute force attempt - 3 login attempts (3 failed)	Brute-Force
killian7603	2025-06-11 16:37:58 (3 days ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
chris_yooo	2025-06-11 15:55:52 (3 days ago)	Jun 11 17:55:52 isp postfix/smtps/smtpd[1456258]: warning: c91-130-48-117.bredband.tele2.se[91.130.4 ... show moreJun 11 17:55:52 isp postfix/smtps/smtpd[1456258]: warning: c91-130-48-117.bredband.tele2.se[91.130.48.117]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=misakimie98 Jun 11 17:55:52 isp postfix/smtps/smtpd[1456258]: lost connection after AUTH from c91-130-48-117.bredband.tele2.se[91.130.48.117] ... show less	Spoofing Brute-Force
ggb_st	2025-06-11 13:34:57 (3 days ago)	2025-06-11T16:34:55.030120+03:00 gogo-server sshd-session[104679]: Invalid user default from 91.130. ... show more2025-06-11T16:34:55.030120+03:00 gogo-server sshd-session[104679]: Invalid user default from 91.130.48.117 port 56311 2025-06-11T16:34:55.037873+03:00 gogo-server sshd-session[104679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.130.48.117 2025-06-11T16:34:56.446655+03:00 gogo-server sshd-session[104679]: Failed password for invalid user default from 91.130.48.117 port 56311 ssh2 ... show less	Brute-Force SSH
Spyerfox	2025-06-11 10:33:22 (3 days ago)	Jun 11 12:33:19 <server> sshd\[29599\]: User root from c91-130-48-117.bredband.tele2.se not allowed ... show moreJun 11 12:33:19 <server> sshd\[29599\]: User root from c91-130-48-117.bredband.tele2.se not allowed because not listed in AllowUsersJun 11 12:33:21 <server> sshd\[29599\]: Failed password for invalid user root from 91.130.48.117 port 49206 ssh2 ... show less	Brute-Force SSH
bulkvm.com	2025-06-11 09:54:53 (3 days ago)	[bulkvm.com/honeypot] Unauthorized SSH access attempt. Port: 43063, Time: 2025-06-11 09:54:53 UTC	Brute-Force SSH
adlp.org	2025-06-11 09:08:24 (3 days ago)	Jun 11 09:08:17 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;91.130.48.117;[UNAVAILABL ... show moreJun 11 09:08:17 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;91.130.48.117;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Jun 11 09:08:20 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;91.130.48.117;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Jun 11 09:08:23 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;91.130.48.117;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
Spyerfox	2025-06-11 07:04:45 (3 days ago)	Jun 11 09:04:43 <server> sshd\[11661\]: User nobody from c91-130-48-117.bredband.tele2.se not allowe ... show moreJun 11 09:04:43 <server> sshd\[11661\]: User nobody from c91-130-48-117.bredband.tele2.se not allowed because not listed in AllowUsersJun 11 09:04:45 <server> sshd\[11661\]: Failed password for invalid user nobody from 91.130.48.117 port 47282 ssh2 ... show less	Brute-Force SSH
Paul Smith	2025-06-11 06:51:38 (3 days ago)	Email Auth Brute force attack 51/49 in last day	Brute-Force
Woodie	2025-06-11 02:22:03 (4 days ago)	2025-06-10T22:16:07.448138-04:00 debian sshd[2204848]: pam_unix(sshd:auth): authentication failure; ... show more2025-06-10T22:16:07.448138-04:00 debian sshd[2204848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.130.48.117 2025-06-10T22:16:09.759307-04:00 debian sshd[2204848]: Failed password for invalid user ubuntu from 91.130.48.117 port 49839 ssh2 2025-06-10T22:21:59.994357-04:00 debian sshd[2211231]: Invalid user admin from 91.130.48.117 port 45607 2025-06-10T22:21:59.997536-04:00 debian sshd[2211231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.130.48.117 2025-06-10T22:22:02.299094-04:00 debian sshd[2211231]: Failed password for invalid user admin from 91.130.48.117 port 45607 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩