JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.207.41.252

109.207.41.252 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 67%: ?

67%

ISP	TRUF d.o.o.
Usage Type	Fixed Line ISP
ASN	AS52026
Domain Name	kbcnet.rs
Country	🇷🇸 Serbia
City	Pancevo, Vojvodina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.207.41.252

Whois 109.207.41.252

IP Abuse Reports for 109.207.41.252:

This IP address has been reported a total of 79 times from 47 distinct sources. 109.207.41.252 was first reported on May 3rd 2021, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 SpamStopper	2026-08-01 12:10:15 (2 hours ago)	Fail2Ban - DOVECOT IMAP server attack	Brute-Force Bad Web Bot
🇷🇴 INTEQ	2026-07-31 16:36:13 (21 hours ago)	Brute force attack from 109.207.41.252	Brute-Force
🇩🇪 filstal.org	2026-07-31 04:47:48 (1 day ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇩🇪 FeG Deutschland	2026-07-31 01:38:03 (1 day ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇫🇮 danskefilm.dk	2026-07-31 00:35:02 (1 day ago)	IMAP password guessing	Brute-Force
🇮🇩 sockominfo	2026-07-29 12:00:53 (3 days ago)	Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-29 11:00:09 (3 days ago)	Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇸🇪 maxxsense	2026-07-27 06:18:11 (5 days ago)	(imapd) Failed IMAP login from 109.207.41.252 (RS/Serbia/-)	Brute-Force
🇩🇪 netclix.gr	2026-07-25 17:01:40 (6 days ago)	(imapd) Failed IMAP login from 109.207.41.252 (RS/Serbia/-)	Brute-Force
🇮🇩 sockominfo	2026-07-24 13:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.1/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-24 12:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-24 11:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 109.207.41.252. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇸🇰 Schomburg	2026-07-19 12:59:49 (1 week ago)	RdpGuard detected brute-force attempt on POP3	Brute-Force
🇷🇺 DZBOT	2026-07-17 15:35:29 (2 weeks ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
Anonymous	2026-07-17 02:05:57 (2 weeks ago)	Authentication failure	Brute-Force

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.137

🇸🇬 128.116.46.3

🇷🇺 128.0.166.158

🇮🇳 117.211.15.93

🇫🇷 91.196.152.108

🇧🇷 34.39.168.71

🇨🇳 27.17.193.54

🇻🇳 1.53.84.222

🇨🇳 182.88.166.127

🇧🇷 179.96.185.35

🇮🇶 169.224.66.95

🇻🇳 112.137.143.2

🇩🇪 69.5.169.127

🇪🇸 46.27.103.109

🇮🇳 43.250.252.193

🇨🇳 43.248.140.45

🇳🇱 213.176.26.133

🇧🇷 201.42.218.78

🇷🇺 185.39.118.137

🇫🇮 147.185.133.220