JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.89.137.132

190.89.137.132 was found in our database!

This IP was reported 165 times. Confidence of Abuse is 49%: ?

49%

ISP	T. R. TELECOMUNICACOES LTDA
Usage Type	Fixed Line ISP
ASN	AS270368
Domain Name	Unknown
Country	🇧🇷 Brazil
City	Alvares Florence, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.89.137.132

Whois 190.89.137.132

IP Abuse Reports for 190.89.137.132:

This IP address has been reported a total of 165 times from 58 distinct sources. 190.89.137.132 was first reported on November 11th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-07-28 07:00:52 (3 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6.1/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 76%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-28 06:00:53 (3 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 76%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-28 05:00:52 (3 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 76%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-27 23:00:09 (3 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 190.89.137.132. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-16 10:36:08 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 netclix.gr	2026-07-15 18:28:49 (2 weeks ago)	(imapd) Failed IMAP login from 190.89.137.132 (BR/Brazil/-)	Brute-Force
🇩🇪 jasperedv.de	2026-07-14 09:37:28 (2 weeks ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇺🇸 brianbgv	2026-07-12 23:02:17 (2 weeks ago)	Dovecot mail abuse detected by Fail2Ban	Port Scan Hacking SSH
🇬🇧 gaztronics	2026-07-09 06:10:07 (3 weeks ago)	2026-07-09T06:10:03.733035 liberator auth[3101795]: pam_unix(dovecot:auth): authentication failure; ... show more 2026-07-09T06:10:03.733035 liberator auth[3101795]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=190.89.137.132 ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-07-08 23:12:10 (3 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇷🇺 DZBOT	2026-07-05 01:46:04 (3 weeks ago)	DZBOT: [MTA] Brute-force users	Brute-Force
🇨🇦 Julio Covolato	2026-07-03 11:55:02 (4 weeks ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇩🇪 FeG Deutschland	2026-06-26 14:52:06 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 rd1742	2026-06-21 07:17:10 (1 month ago)	Jun 21 07:17:09 quad dovecot: auth-worker(3816892): sql(eki_login,190.89.137.132,<3BRdUL5Uwci+WYmE>) ... show more Jun 21 07:17:09 quad dovecot: auth-worker(3816892): sql(eki_login,190.89.137.132,<3BRdUL5Uwci+WYmE>): unknown user show less	Brute-Force Exploited Host
🇦🇺 FireGuard Server	2026-06-18 18:55:08 (1 month ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=143	Port Scan Hacking

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 138.122.35.179

🇿🇦 197.234.201.154

🇫🇷 176.158.15.205

🇨🇳 120.48.94.250

🇮🇹 87.31.203.73

🇺🇸 85.239.151.10

🇺🇸 73.183.235.5

🇺🇸 66.249.73.96

🇺🇦 45.14.31.60

🇺🇸 20.9.85.55

🇹🇼 2001:b011:9801:94e4:199c:f0d4:375a:cee1

🇨🇷 186.177.88.20

🇰🇷 175.203.23.245

🇵🇱 172.68.159.47

🇩🇪 164.92.240.151

🇨🇳 117.27.135.84

🇳🇱 213.176.26.78

🇪🇬 197.199.224.52

🇭🇰 165.154.41.47

🇺🇦 160.238.125.250