JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.246.214.4

91.246.214.4 was found in our database!

This IP was reported 279 times. Confidence of Abuse is 97%: ?

97%

ISP	AIRNET MARIUSZ KAJDAS, TOMASZ PYREK sp.j.
Usage Type	Fixed Line ISP
ASN	AS198133
Domain Name	air-net.com.pl
Country	🇵🇱 Poland
City	Gieraltowice, Lesser Poland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.246.214.4

Whois 91.246.214.4

IP Abuse Reports for 91.246.214.4:

This IP address has been reported a total of 279 times from 90 distinct sources. 91.246.214.4 was first reported on July 14th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 vestibtech	2026-07-15 06:39:54 (13 hours ago)	2026-07-15T00:39:53.440371-06:00 Host-KLAX-C dovecot[1982391]: imap-login: Disconnected: Connection ... show more 2026-07-15T00:39:53.440371-06:00 Host-KLAX-C dovecot[1982391]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 15 secs): user=<[email protected]>, method=PLAIN, rip=91.246.214.4, lip=185.198.26.44, TLS, session=<lvpilqBWt65b9tYE> ... show less	Brute-Force
🇫🇷 EDSL	2026-07-14 07:18:47 (1 day ago)	[mail.edsl.fr] Blocked by SysWarden Firewall (Mail Service Attack)	Brute-Force Email Spam Port Scan
🇩🇪 jasperedv.de	2026-07-14 06:01:18 (1 day ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇨🇦 Julio Covolato	2026-07-14 05:10:01 (1 day ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇺🇸 AWSGIEMSAN7	2026-07-14 05:09:40 (1 day ago)	Blocked by Fail2ban (Jail: dovecot).	Brute-Force
🇪🇸 elcruzado.es	2026-07-14 03:46:45 (1 day ago)	(imapd) Failed IMAP login from 91.246.214.4 (PL/Poland/-)	Brute-Force
🇮🇳 dineshskt4all	2026-07-14 02:34:27 (1 day ago)	Jul 14 02:34:23 auth: Info: passwd-file([email protected],91.246.214.4,<3At2C4lWgNNb9tYE>): unknown ... show more Jul 14 02:34:23 auth: Info: passwd-file([email protected],91.246.214.4,<3At2C4lWgNNb9tYE>): unknown user Jul 14 02:34:25 imap-login: Info: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=91.246.214.4, lip=68.183.87.236, TLS, session=<3At2C4lWgNNb9tYE> ... show less	SSH
🇿🇦 hostsec_za	2026-07-14 00:22:00 (1 day ago)	IMAP/POP3 Auth Attack. 10 failed logins in 1 hour.	Brute-Force
🇺🇸 rsa	2026-07-13 23:09:00 (1 day ago)	brute forcing email accounts	Email Spam Brute-Force
🇬🇧 D3monite	2026-07-13 05:43:17 (2 days ago)	Attempted Brute Force (dovecot)	Brute-Force
🇮🇩 sockominfo	2026-07-10 05:00:54 (5 days ago)	Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-10 04:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-09 05:00:55 (6 days ago)	Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.2/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-09 04:00:52 (6 days ago)	Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-09 03:00:09 (6 days ago)	Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6/10 (MEDIUM). Reported by Tan ... show more Zimbra: Login failures from malicious IP: 91.246.214.4. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 279 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.216.145.2

🇫🇷 91.196.152.212

🇰🇷 220.118.173.234

🇺🇸 216.73.163.152

🇮🇳 171.61.23.199

🇸🇬 128.199.87.192

🇻🇳 103.75.183.177

🇺🇸 63.141.227.146

🇺🇸 54.189.134.195

🇳🇱 45.148.10.157

🇧🇪 35.210.61.208

🇬🇧 35.203.211.145

🇨🇳 182.43.76.120

🇮🇩 178.83.181.131

🇰🇷 125.129.179.250

🇰🇪 102.210.149.105

🇺🇸 64.202.186.161

🇫🇷 35.180.173.224

🇬🇧 5.153.251.80

🇩🇪 213.209.159.227