JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.120.72.148

187.120.72.148 was found in our database!

This IP was reported 227 times. Confidence of Abuse is 100%: ?

100%

ISP	MASTER S/A
Usage Type	Fixed Line ISP
ASN	AS28202
Hostname(s)	187-120-72-148.pso-fb.mastercabo.com.br
Domain Name	mastercabo.com.br
Country	🇧🇷 Brazil
City	Passos, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.120.72.148

Whois 187.120.72.148

IP Abuse Reports for 187.120.72.148:

This IP address has been reported a total of 227 times from 83 distinct sources. 187.120.72.148 was first reported on June 24th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-07-15 15:00:08 (2 hours ago)	Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 5.3/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-07-14 22:51:29 (18 hours ago)	Email auth failures (3)	Brute-Force
🇺🇸 vestibtech	2026-07-14 07:17:15 (1 day ago)	2026-07-14T01:17:14.635066-06:00 Host-KLAX-C dovecot[1982391]: imap-login: Disconnected: Connection ... show more 2026-07-14T01:17:14.635066-06:00 Host-KLAX-C dovecot[1982391]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 16 secs): user=<[email protected]>, method=PLAIN, rip=187.120.72.148, lip=185.198.26.44, TLS, session=<9Ugb/oxWVdO7eEiU> ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-07-14 04:56:05 (1 day ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇧🇷 KingHost	2026-07-14 03:36:05 (1 day ago)		Brute-Force
🇺🇸 kosada.com	2026-07-14 03:14:04 (1 day ago)	IMAP password guessing	Brute-Force
Anonymous	2026-07-14 02:44:48 (1 day ago)	Authentication failure	Brute-Force
🇬🇧 D3monite	2026-07-14 01:33:20 (1 day ago)	Attempted Brute Force (dovecot)	Brute-Force
🇺🇸 TAY	2026-07-14 00:29:46 (1 day ago)	2026-07-14 08:29:41 auth-worker(24754): Info: sql(hslee.info,187.120.72.148,<WPaNTYdW1Kq7eEiU>): unk ... show more 2026-07-14 08:29:41 auth-worker(24754): Info: sql(hslee.info,187.120.72.148,<WPaNTYdW1Kq7eEiU>): unknown user 2026-07-14 08:29:45 imap-login: Info: Disconnected (auth failed, 1 attempts in 4 secs): user=<hslee.info>, method=PLAIN, rip=187.120.72.148, lip=162.220.160.187, TLS, session=<WPaNTYdW1Kq7eEiU> ... show less	Brute-Force
🇮🇩 sockominfo	2026-07-11 12:00:52 (4 days ago)	Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-11 11:00:53 (4 days ago)	Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-11 10:00:53 (4 days ago)	Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-10 10:46:01 (5 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇳🇱 nikki101	2026-07-08 11:51:49 (1 week ago)	pop/imap unauthorized access attempt, inappropriate conduct	Email Spam Brute-Force
🇮🇩 sockominfo	2026-07-07 09:00:54 (1 week ago)	Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 187.120.72.148. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 227 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.212.129.205

🇦🇷 181.104.43.225

🇳🇱 195.178.110.26

🇺🇸 151.240.46.138

🇮🇹 151.59.156.3

🇹🇭 150.95.24.146

🇫🇮 147.185.133.250

🇺🇸 34.181.194.17

🇩🇪 2a05:d014:fb0:c801:ad7e:4615:5545:1aac

🇩🇪 216.144.249.150

🇰🇷 211.223.107.86

🇩🇪 185.242.3.195

🇮🇹 185.197.9.56

🇨🇳 47.108.214.29

🇺🇸 209.87.169.106

🇳🇱 195.178.110.30

🇫🇷 176.31.21.38

🇰🇷 114.202.80.152

🇫🇷 91.231.89.239

🇱🇹 62.60.130.219