JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.231.121.247

91.231.121.247 was found in our database!

This IP was reported 239 times. Confidence of Abuse is 68%: ?

68%

ISP	GTnet Sp. z o.o.
Usage Type	Fixed Line ISP
ASN	AS198072
Domain Name	gtnet.pl
Country	🇵🇱 Poland
City	Zamosc, Lublin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.231.121.247

Whois 91.231.121.247

IP Abuse Reports for 91.231.121.247:

This IP address has been reported a total of 239 times from 90 distinct sources. 91.231.121.247 was first reported on July 20th 2024, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NXTwoThou	2026-07-29 13:38:57 (16 hours ago)	IMAP	Brute-Force
🇮🇩 sockominfo	2026-07-29 13:00:53 (16 hours ago)	Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-29 12:00:09 (17 hours ago)	Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇷🇴 INTEQ	2026-07-29 09:39:22 (20 hours ago)	Brute force attack from 91.231.121.247	Brute-Force
Anonymous	2026-07-27 20:23:23 (2 days ago)	fail2ban-dovecot	Email Spam Brute-Force
🇬🇧 openstrike.co.uk	2026-07-26 22:51:27 (3 days ago)	Email auth failures (3)	Brute-Force
🇩🇪 jasperedv.de	2026-07-23 17:33:22 (6 days ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
Anonymous	2026-07-23 09:15:58 (6 days ago)	2026-07-23T11:15:57.637159+02:00 soli-gate cyrus/imaps[1119298]: badlogin: [91.231.121.247] plaintex ... show more 2026-07-23T11:15:57.637159+02:00 soli-gate cyrus/imaps[1119298]: badlogin: [91.231.121.247] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force
🇷🇸 Smel	2026-07-13 10:19:50 (2 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇬🇧 D3monite	2026-07-11 20:09:39 (2 weeks ago)	Attempted Brute Force (dovecot)	Brute-Force
Anonymous	2026-07-10 16:44:14 (2 weeks ago)	2026-07-10 16:44:13 warning[6013030]: host [91.231.121.247]: unauthorized access attempted ... show more 2026-07-10 16:44:13 warning[6013030]: host [91.231.121.247]: unauthorized access attempted: / show less	Port Scan Brute-Force
Anonymous	2026-07-01 07:23:18 (4 weeks ago)	IMAP password guessing	Brute-Force
🇮🇩 sockominfo	2026-06-30 21:00:53 (4 weeks ago)	Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-30 20:00:53 (4 weeks ago)	Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-30 19:00:10 (4 weeks ago)	Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 91.231.121.247. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 239 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.114

🇺🇸 216.25.89.102

🇬🇧 195.206.182.207

🇭🇰 154.221.24.224

🇨🇦 144.217.243.186

🇨🇳 121.29.149.30

🇳🇱 89.124.83.75

🇧🇬 78.128.114.174

🇯🇵 47.74.39.46

🇳🇱 45.148.10.152

🇺🇸 45.43.58.100

🇺🇸 44.223.116.149

🇹🇭 43.128.205.61

🇷🇺 176.52.30.201

🇺🇸 147.185.132.80

🇰🇿 88.204.206.78

🇬🇧 2.217.44.77

🇺🇸 216.25.89.116

🇺🇸 174.138.92.147

🇺🇸 162.216.149.150