JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.120.63

91.92.120.63 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 51%: ?

51%

ISP	Amaze Internet Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS44901
Domain Name	amazeinternet.com
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.120.63

Whois 91.92.120.63

IP Abuse Reports for 91.92.120.63:

This IP address has been reported a total of 49 times from 20 distinct sources. 91.92.120.63 was first reported on February 9th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-06-14 18:57:51 (6 days ago)	(smtpauth) Failed SMTP AUTH login from 91.92.120.63 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 91.92.120.63 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-14 14:56:53 dovecot_login authenticator failed for H=(YPiboPp) [91.92.120.63]:59980: 535 Incorrect authentication data ([email protected]) 2026-06-14 14:57:00 dovecot_login authenticator failed for H=(KLz6i9r5Qp) [91.92.120.63]:60129: 535 Incorrect authentication data ([email protected]) 2026-06-14 14:57:11 dovecot_login authenticator failed for H=(3qrzHgEIEi) [91.92.120.63]:60467: 535 Incorrect authentication data ([email protected]) 2026-06-14 14:57:30 dovecot_login authenticator failed for H=(6BLMcGY) [91.92.120.63]:60967: 535 Incorrect authentication data ([email protected]) 2026-06-14 14:57:48 dovecot_login authenticator failed for H=(BzlkfBHH) [91.92.120.63]:61678: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇫🇷 debaba	2026-06-14 14:37:06 (6 days ago)	Jun 14 14:37:04 ichbinaktiv postfix/smtpd[316695]: warning: unknown[91.92.120.63]: SASL LOGIN authen ... show more Jun 14 14:37:04 ichbinaktiv postfix/smtpd[316695]: warning: unknown[91.92.120.63]: SASL LOGIN authentication failed: authentication failure, sasl_user ... show less	Spoofing Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2026-06-14 08:04:01 (6 days ago)	(smtpauth) Failed SMTP AUTH login from 91.92.120.63 (BG/Bulgaria/-): 15 in the last 200 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 91.92.120.63 (BG/Bulgaria/-): 15 in the last 200 secs; Ports: *; Direction: 0; Trigger: LF_SMTPAUTH - acc show less	Brute-Force SSH
🇹🇭 thaizone.com	2026-06-13 13:07:42 (1 week ago)	Excessive number of invalid login attempts	Email Spam Hacking Brute-Force Exploited Host
Anonymous	2026-06-13 04:04:02 (1 week ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2026-06-13 01:41:46 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 91.92.120.63 (BG/Bulgaria/-): 15 in the last 200 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 91.92.120.63 (BG/Bulgaria/-): 15 in the last 200 secs; Ports: *; Direction: 0; Trigger: LF_SMTPAUTH - server02 show less	Brute-Force SSH
🇩🇪 it-ngo.com	2026-06-12 14:42:15 (1 week ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇮🇹 VHosting	2026-06-12 12:30:02 (1 week ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 grassau.com	2026-06-12 11:28:03 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 91.92.120.63 (BG/Bulgaria/-/-/-)	Brute-Force
🇩🇪 EGP Abuse Dept	2026-05-15 03:53:00 (1 month ago)	Forged HELO: smtp1.espresso-gridpoint.net	Email Spam
🇺🇸 xmission.com	2026-03-09 17:04:51 (3 months ago)	Blocked 13 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ... show more Blocked 13 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam
🇺🇸 xmission.com	2026-03-09 13:00:00 (3 months ago)	Blocked 18 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ... show more Blocked 18 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam
🇬🇧 transcom	2026-03-09 11:29:23 (3 months ago)	Spam #11 to centralmail.co.uk (trap_type=efa_production, from=fdsukltd.com)	Web Spam
🇨🇭 Origon	2026-03-09 10:36:48 (3 months ago)	NOQUEUE - IP: 91.92.120.63 - Mar 9 11:36:47 plesk postfix/smtpd[2389715]: NOQUEUE: reject: RCPT fro ... show more NOQUEUE - IP: 91.92.120.63 - Mar 9 11:36:47 plesk postfix/smtpd[2389715]: NOQUEUE: reject: RCPT from unknown[91.92.120.63]: 554 5.7.1 Service unavailable; Client host [91.92.120.63] blocked using dnsbl-1.uceprotect.net; IP 91.92.120.63 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=91.92.120.63; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<aurumgroup.ch> show less	Email Spam
🇸🇰 Eurofluid	2026-03-09 03:03:11 (3 months ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.4

🇺🇸 18.232.52.91

🇺🇸 2603:3:6101:9ef0::

🇭🇰 172.253.5.19

🇨🇳 120.242.178.236

🇷🇺 95.167.225.76

🇵🇹 94.46.164.66

🇳🇱 81.19.216.117

🇩🇪 69.5.169.159

🇩🇪 69.5.169.156

🇺🇸 54.86.184.118

🇭🇰 45.142.154.87

🇺🇸 44.195.67.183

🇺🇸 34.239.169.105

🇺🇸 13.217.220.53

🇺🇸 3.95.157.138

🇳🇱 213.176.113.24

🇨🇳 211.91.222.38

🇬🇧 188.240.59.56

🇳🇱 176.65.132.129