JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.89.137.197

190.89.137.197 was found in our database!

This IP was reported 198 times. Confidence of Abuse is 66%: ?

66%

ISP	T. R. TELECOMUNICACOES LTDA
Usage Type	Fixed Line ISP
ASN	AS270368
Domain Name	Unknown
Country	🇧🇷 Brazil
City	Alvares Florence, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.89.137.197

Whois 190.89.137.197

IP Abuse Reports for 190.89.137.197:

This IP address has been reported a total of 198 times from 74 distinct sources. 190.89.137.197 was first reported on November 11th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jasperedv.de	2026-07-13 10:25:39 (2 days ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇮🇩 sockominfo	2026-07-11 14:00:52 (4 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-11 13:00:53 (4 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-11 12:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 4.8/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 4.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 TTWebhosting	2026-07-11 02:21:26 (4 days ago)	(imapd) Failed IMAP login from 190.89.137.197 (BR/Brazil/São Paulo/Votuporanga/-/[AS270368 T. R. TEL ... show more (imapd) Failed IMAP login from 190.89.137.197 (BR/Brazil/São Paulo/Votuporanga/-/[AS270368 T. R. TELECOMUNICACOES LTDA]): 2 in the last 3600 secs show less	Brute-Force Port Scan Hacking
🇮🇩 sockominfo	2026-07-10 06:00:54 (5 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-10 05:00:54 (5 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-10 04:00:09 (5 days ago)	Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 190.89.137.197. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇧🇷 ICS Labs	2026-07-09 16:56:41 (5 days ago)	ICS Labs identified 190.89.137.197 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇩🇪 FeG Deutschland	2026-07-05 08:12:08 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 FeG Deutschland	2026-07-02 14:28:10 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇨🇦 Julio Covolato	2026-07-01 04:50:03 (2 weeks ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇩🇪 FeG Deutschland	2026-06-24 23:14:04 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 netclix.gr	2026-06-24 21:06:17 (2 weeks ago)	(imapd) Failed IMAP login from 190.89.137.197 (BR/Brazil/-)	Brute-Force
🇧🇷 dominioz	2026-06-24 12:28:30 (3 weeks ago)	190.89.137.197 [45CC] 09:28:17 Authentication [IMAP] - Result=0, [email protected], M ... show more 190.89.137.197 [45CC] 09:28:17 Authentication [IMAP] - Result=0, [email protected], Method=0 190.89.137.197 [45CC] 09:28:24 Authentication [IMAP] - Result=0, [email protected], Method=0 190.89.137.197 [45CC] 09:28:27 Authentication [IMAP] - Result=0, [email protected], Method=0 ... show less	Brute-Force

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400e:c07::12b

🇨🇷 179.48.248.245

🇵🇱 176.53.159.198

🇺🇸 172.236.228.197

🇺🇸 162.144.66.221

🇰🇷 122.35.192.33

🇸🇬 101.47.156.170

🇺🇸 98.159.37.127

🇨🇦 85.217.149.59

🇩🇪 69.5.169.13

🇺🇸 52.191.142.40

🇺🇸 44.106.138.173

🇺🇸 2602:80d:1007::c7

🇱🇻 2400:cb00:151:1000:f5b1:b3f0:c6c7:71d3

🇨🇭 209.99.186.149

🇺🇸 198.44.136.252

🇧🇬 193.24.211.76

🇧🇷 179.106.3.42

🇲🇴 125.31.4.70

🇨🇳 114.250.48.29