JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.226.115.63

91.226.115.63 was found in our database!

This IP was reported 254 times. Confidence of Abuse is 100%: ?

100%

ISP	Wisper s.r.o.
Usage Type	Fixed Line ISP
ASN	AS57248
Domain Name	wisper.sk
Country	🇸🇰 Slovakia
City	Nove Zamky, Nitra Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.226.115.63

Whois 91.226.115.63

IP Abuse Reports for 91.226.115.63:

This IP address has been reported a total of 254 times from 88 distinct sources. 91.226.115.63 was first reported on June 13th 2025, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-30 07:37:00 (28 minutes ago)	IMAP password guessing	Brute-Force
🇮🇩 sockominfo	2026-07-30 05:00:53 (3 hours ago)	Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-30 04:00:53 (4 hours ago)	Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-30 03:00:09 (5 hours ago)	Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 5.3/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-07-30 02:52:49 (5 hours ago)	2026-07-30T04:52:47.920239+02:00 soli-gate cyrus/imaps[4075253]: badlogin: [91.226.115.63] PLAIN (th ... show more 2026-07-30T04:52:47.920239+02:00 soli-gate cyrus/imaps[4075253]: badlogin: [91.226.115.63] PLAIN ([email protected]) [SASL(-13): authentication failure: Password verification failed] ... show less	Brute-Force
🇷🇺 DZBOT	2026-07-29 02:40:47 (1 day ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇳🇱 Peter Touw	2026-07-27 08:01:24 (3 days ago)	dovecot1 - mail dovecot: imap-login: Disconnected: Connection closed (auth failed: 2 attempts in 9 s ... show more dovecot1 - mail dovecot: imap-login: Disconnected: Connection closed (auth failed: 2 attempts in 9 secs) show less	Brute-Force
🇺🇸 entangled_mongoose	2026-07-25 17:15:58 (4 days ago)	Failed SMTP authentication with username 'user_sha_4b10b@domain_sha_70fc2'.	Brute-Force Email Spam
🇩🇪 FeG Deutschland	2026-07-23 19:56:19 (6 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 sockominfo	2026-07-20 21:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-20 20:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-20 19:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 91.226.115.63. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇸🇰 Schomburg	2026-07-19 02:49:24 (1 week ago)	Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Report ... show more Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: F7rY2ciLiIq0kOesdN5Gx4p3VNcmYuHe show less	Port Scan Hacking Brute-Force
🇺🇸 TTWebhosting	2026-07-17 17:38:56 (1 week ago)	(imapd) Failed IMAP login from 91.226.115.63 (SK/Slovakia/Nitra Region/Šaľa/-/[AS57248 Wisper s.r.o. ... show more (imapd) Failed IMAP login from 91.226.115.63 (SK/Slovakia/Nitra Region/Šaľa/-/[AS57248 Wisper s.r.o.]): 2 in the last 3600 secs show less	Brute-Force Port Scan Hacking
🇺🇸 interbiznw.com	2026-07-17 09:21:13 (1 week ago)	dovecot-bruteforce	Port Scan Hacking Spoofing Brute-Force Exploited Host

Showing 1 to 15 of 254 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.186

🇺🇸 216.25.89.127

🇳🇱 213.176.26.165

🇮🇳 202.62.88.25

🇧🇷 177.192.133.227

🇺🇸 162.216.149.224

🇺🇸 162.216.149.22

🇮🇩 160.236.2.59

🇫🇷 91.196.152.241

🇫🇷 91.196.152.207

🇫🇷 91.196.152.104

🇬🇧 78.150.12.38

🇫🇷 51.210.2.116

🇬🇧 5.252.83.250

🇺🇸 3.229.95.193

🇺🇸 3.210.223.61

🇺🇸 2604:a880:400:d1:0:4:6c73:4001

🇧🇷 201.89.228.43

🇹🇼 198.235.24.58

🇲🇽 189.161.43.93