JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.91.164.131

187.91.164.131 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 100%: ?

100%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS26599
Hostname(s)	ip-187-91-164-131.user.vivozap.com.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Duque de Caxias, Rio de Janeiro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.91.164.131

Whois 187.91.164.131

IP Abuse Reports for 187.91.164.131:

This IP address has been reported a total of 140 times from 60 distinct sources. 187.91.164.131 was first reported on March 30th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-20 00:46:08 (1 day ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 aaKenshin	2026-06-19 12:01:19 (1 day ago)	Suspicious activity detected from IP 187.91.164.131 based on mailserver logs. Sample logs: 2026-06-1 ... show more Suspicious activity detected from IP 187.91.164.131 based on mailserver logs. Sample logs: 2026-06-19 20:01:06,311 INFO [ImapServer-3772] [ip=172.16.0.182;cid=4408;oip=187.91.164.131;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO) 2026-06-19 20:01:06,311 INFO [ImapServer-3771] [ip=172.16.0.182;oip=187.91.164.131;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=4408;] imap - AUTHENTICATE elapsed=0 (NIO) 2026-06-19 20:01:06,390 INFO [ImapServer-3772] [ip=172.16.0.182;oip=187.91.164.131;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=4408;] imap - authentication failed for [] (LDAP error: - unable to ldap authenticate: invalid credentials) 2026-06-19 20:01:06,390 INFO [ImapServer-3772] [ip=172.16.0.182;oip=187.91.164.131;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=4408;] account - Error occurred during authentication: authentication failed for []. Reason: LDAP error: - unable t show less	Brute-Force
🇦🇹 joe-abuse	2026-06-19 00:37:36 (2 days ago)	2026-06-19T02:37:35.411865+02:00 ucs1 dovecot: auth: pam([email protected],187.91.164.13 ... show more 2026-06-19T02:37:35.411865+02:00 ucs1 dovecot: auth: pam([email protected],187.91.164.131,<Fsewf5BU6pa7W6SD>): unknown user (given password: w35QkUPwSnqN.MJ) ... show less	Brute-Force
Anonymous	2026-06-18 09:56:08 (2 days ago)	Port scan and brute force attack	Port Scan Brute-Force
🇨🇦 electronico	2026-06-18 02:41:01 (3 days ago)	2026-06-18T13:39:00.958741+11:00 mail dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-06-18T13:39:00.958741+11:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 2 attempts in 14 secs): user=<[email protected]>, method=LOGIN, rip=187.91.164.131, lip=192.99.188.204, session=<uypFE35Ub5y7W6SD> 2026-06-18T13:39:28.687323+11:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 23 secs): user=<me>, method=PLAIN, rip=187.91.164.131, lip=192.99.188.204, TLS, session=<HmBmFH5Ue5+7W6SD> 2026-06-18T13:41:01.460572+11:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<me>, method=PLAIN, rip=187.91.164.131, lip=192.99.188.204, session=<JQIrG35UC627W6SD> ... show less	Brute-Force Email Spam
🇷🇴 gtheo99	2026-06-16 08:26:40 (4 days ago)	(imapd) Failed IMAP login from 187.91.164.131 (BR/Brazil/ip-187-91-164-131.user.vivozap.com.br): 2 i ... show more (imapd) Failed IMAP login from 187.91.164.131 (BR/Brazil/ip-187-91-164-131.user.vivozap.com.br): 2 in the last 900 secs show less	Brute-Force Email Spam
🇩🇪 FeG Deutschland	2026-06-15 15:58:32 (5 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 initsol	2026-06-15 15:53:47 (5 days ago)	Jun 15 16:18:06 phoenix dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user= ... show more Jun 15 16:18:06 phoenix dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=187.91.164.131, lip=10.10.50.34, TLS, session=<cCCgfktUKLy7W6SD> Jun 15 17:53:43 phoenix dovecot: imap-login: Disconnected (auth failed, 3 attempts in 17 secs): user=<[email protected]>, method=PLAIN, rip=187.91.164.131, lip=10.10.50.34, TLS, session=<LUmx00xU1La7W6SD> Jun 15 17:53:45 phoenix dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=187.91.164.131, lip=10.10.50.34, TLS, session=<VFK01ExUGbm7W6SD> ... show less	Brute-Force
Anonymous	2026-06-15 15:52:28 (5 days ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
🇩🇪 tall1oN	2026-06-14 00:34:02 (1 week ago)	2026-06-14T02:33:43.504154+02:00 kenny dovecot: auth-worker(4028006): conn unix:auth-worker (pid=401 ... show more 2026-06-14T02:33:43.504154+02:00 kenny dovecot: auth-worker(4028006): conn unix:auth-worker (pid=4017095,uid=107): auth-worker<1>: sql([email protected],187.91.164.131,<QNia3CtUn9S7W6SD>): unknown user 2026-06-14T02:33:46.224156+02:00 kenny dovecot: auth-worker(4028006): conn unix:auth-worker (pid=4017095,uid=107): auth-worker<2>: pam([email protected],187.91.164.131,<QNia3CtUn9S7W6SD>): pam_authenticate() failed: Authentication failure (Password mismatch?) 2026-06-14T02:34:01.560126+02:00 kenny dovecot: auth-worker(4028006): conn unix:auth-worker (pid=4017095,uid=107): auth-worker<3>: sql([email protected],187.91.164.131,<QNia3CtUn9S7W6SD>): unknown user ... show less	Brute-Force Email Spam
🇩🇪 FeG Deutschland	2026-06-14 00:22:03 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
Anonymous	2026-06-13 08:58:12 (1 week ago)	Port scan and brute force attack	Port Scan Brute-Force
🇷🇴 INTEQ	2026-06-12 20:21:32 (1 week ago)	Brute force attack from 187.91.164.131	Brute-Force
Anonymous	2026-06-11 08:43:25 (1 week ago)	2026-06-11T10:43:25.183294+02:00 soli-gate cyrus/imaps[3207046]: badlogin: ip-187-91-164-131.user.vi ... show more 2026-06-11T10:43:25.183294+02:00 soli-gate cyrus/imaps[3207046]: badlogin: ip-187-91-164-131.user.vivozap.com.br [187.91.164.131] PLAIN (anerot) [SASL(-13): authentication failure: Password verification failed] ... show less	Brute-Force
🇬🇧 openstrike.co.uk	2026-06-11 08:18:57 (1 week ago)	7 packets to port 143	Brute-Force

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.253

🇳🇱 192.253.248.56

🇨🇳 182.43.28.149

🇨🇳 122.225.202.130

🇻🇳 113.160.173.164

🇻🇳 113.23.49.90

🇮🇱 109.226.27.227

🇳🇱 80.82.77.48

🇮🇳 49.47.135.67

🇧🇪 34.78.29.97

🇮🇳 27.116.20.44

🇪🇹 196.188.93.169

🇺🇸 188.213.202.4

🇺🇸 156.232.13.218

🇱🇹 141.98.11.83

🇨🇦 85.217.149.21

🇨🇦 85.217.149.10

🇺🇸 68.129.68.171

🇭🇰 118.26.39.178

🇮🇳 49.36.9.105