JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.35.125.91

113.35.125.91 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 18%: ?

18%

ISP	kousakusha
Usage Type	Fixed Line ISP
ASN	AS17506
Hostname(s)	91.88/29.125.35.113.in-addr.arpa www.kousakusha.com
Domain Name	kousakusha.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.35.125.91

Whois 113.35.125.91

IP Abuse Reports for 113.35.125.91:

This IP address has been reported a total of 7 times from 6 distinct sources. 113.35.125.91 was first reported on March 9th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-07-06 23:16:34 (4 hours ago)	113.35.125.91 - - [07/Jul/2026:01:16:32 +0200] "GET /mio-account/plugin-install.php HTTP/1.1" 404 13 ... show more 113.35.125.91 - - [07/Jul/2026:01:16:32 +0200] "GET /mio-account/plugin-install.php HTTP/1.1" 404 136388 "https://www.primobio.it/mio-account/plugin-install.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Jason Howell	2026-07-06 05:35:23 (21 hours ago)	113.35.125.91 - - [06/Jul/2026:00:33:13 -0500] "GET /wp-login.php HTTP/1.1" 200 5515 "-" "Mozilla/5. ... show more 113.35.125.91 - - [06/Jul/2026:00:33:13 -0500] "GET /wp-login.php HTTP/1.1" 200 5515 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; EIE10;ENCAWOL; rv:11.0) like Gecko" 113.35.125.91 - - [06/Jul/2026:00:33:16 -0500] "POST /wp-login.php HTTP/1.1" 200 5900 "https://bigdogqc.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; EIE10;ENCAWOL; rv:11.0) like Gecko" 113.35.125.91 - - [06/Jul/2026:00:34:18 -0500] "GET /wp-login.php HTTP/1.1" 200 5515 "https://bigdogqc.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; EIE10;ENCAWOL; rv:11.0) like Gecko" 113.35.125.91 - - [06/Jul/2026:00:34:20 -0500] "POST /wp-login.php HTTP/1.1" 200 2336 "https://bigdogqc.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; EIE10;ENCAWOL; rv:11.0) like Gecko" 113.35.125.91 - - [06/Jul/2026:00:35:22 -0500] "GET /wp-login.php HTTP/1.1" 200 5516 "https://bigdogqc.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; EIE10;ENCAWOL; rv:11.0) like Ge ... show less	Web App Attack
🇺🇸 Jason Howell	2026-07-05 19:25:56 (1 day ago)	113.35.125.91 - - [05/Jul/2026:14:24:46 -0500] "GET /wp-login.php HTTP/1.1" 200 6001 "-" "Mozilla/4. ... show more 113.35.125.91 - - [05/Jul/2026:14:24:46 -0500] "GET /wp-login.php HTTP/1.1" 200 6001 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" 113.35.125.91 - - [05/Jul/2026:14:24:47 -0500] "POST /wp-login.php HTTP/1.1" 200 2413 "https://totalsepticserviceiowa.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" 113.35.125.91 - - [05/Jul/2026:14:25:23 -0500] "GET /wp-login.php HTTP/1.1" 200 6000 "https://totalsepticserviceiowa.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" 113.35.125.91 - - [05/Jul/2026:14:25:24 -0500] "POST /wp-login.php HTTP/1.1" 200 2 ... show less	Web App Attack
🇺🇸 TurboTechieSystems	2026-05-20 14:01:19 (1 month ago)	2026-05-20T09:00:56.371728-05:00 postfix/smtps/smtpd: www.kousakusha: SASL PLAIN authentication fa ... show more 2026-05-20T09:00:56.371728-05:00 postfix/smtps/smtpd: www.kousakusha: SASL PLAIN authentication failed:, sasl_username=Redacted 2026-05-20T09:01:05.235856-05:00 postfix/smtps/smtpd: www.kousakusha: SASL PLAIN authentication failed:, sasl_username=Redacted 2026-05-20T09:01:19.076534-05:00 postfix/submission/smtpd: www.kousakusha: SASL PLAIN authentication failed:, sasl_username=Redacted show less	Email Spam Brute-Force
Anonymous	2026-04-10 07:04:47 (2 months ago)	2026-04-10T08:04:44.526848+01:00 Mail auth[1624959]: pam_unix(dovecot:auth): authentication failure; ... show more 2026-04-10T08:04:44.526848+01:00 Mail auth[1624959]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=redacted rhost=113.35.125.91 user=redacted ... show less	Hacking Brute-Force
🇳🇱 maxxsense	2026-04-02 15:17:14 (3 months ago)	113.35.125.91 (JP/Japan/91.88/29.125.35.113.in-addr.arpa), 12 distributed imapd attacks on account [ ... show more 113.35.125.91 (JP/Japan/91.88/29.125.35.113.in-addr.arpa), 12 distributed imapd attacks on account [redacted] show less	Brute-Force
🇦🇹 AustrianSimon	2026-03-09 08:20:00 (3 months ago)	09 Mar 2026 08:20:00UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 09 Mar 2026 08:20:00UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 113.35.125.91 show less	Brute-Force

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:4e40:e000:0:598:f661:6378:b5ab

🇨🇳 220.171.34.197

🇺🇸 212.56.54.238

🇧🇷 186.204.57.229

🇺🇦 176.103.2.67

🇺🇸 172.245.43.228

🇬🇧 91.204.209.29

🇺🇸 74.125.186.152

🇸🇳 41.214.49.73

🇬🇧 35.203.211.215

🇨🇦 4.239.243.30

🇧🇪 198.235.24.135

🇲🇦 196.75.221.10

🇸🇬 172.217.43.149

🇺🇸 144.225.124.188

🇺🇸 104.234.53.29

🇬🇧 35.203.211.46

🇬🇧 35.203.211.6

🇧🇪 34.79.11.204

🇨🇳 27.16.168.51