JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.53.107.252

191.53.107.252 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 81%: ?

81%

ISP	MASTER S/A
Usage Type	Fixed Line ISP
ASN	AS28202
Hostname(s)	191-53-107-252.vga-wr.mastercabo.com.br
Domain Name	mastercabo.com.br
Country	🇧🇷 Brazil
City	Pocos de Caldas, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.53.107.252

Whois 191.53.107.252

IP Abuse Reports for 191.53.107.252:

This IP address has been reported a total of 90 times from 49 distinct sources. 191.53.107.252 was first reported on July 20th 2024, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 brianbgv	2026-07-14 11:09:45 (12 hours ago)	Dovecot mail abuse detected by Fail2Ban	Port Scan Hacking SSH
Anonymous	2026-07-13 22:14:51 (1 day ago)	2026-07-14T00:14:51.102887+02:00 soli-gate cyrus/imaps[989807]: badlogin: 191-53-107-252.vga-wr.mast ... show more 2026-07-14T00:14:51.102887+02:00 soli-gate cyrus/imaps[989807]: badlogin: 191-53-107-252.vga-wr.mastercabo.com.br [191.53.107.252] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force
🇩🇪 rd1742	2026-07-13 07:52:52 (1 day ago)	Jul 13 07:52:51 quad dovecot: auth-worker(4151983): sql(iamtheweasel,191.53.107.252,<7Z+MYHlWT9a/NWv ... show more Jul 13 07:52:51 quad dovecot: auth-worker(4151983): sql(iamtheweasel,191.53.107.252,<7Z+MYHlWT9a/NWv8>): unknown user show less	Brute-Force Exploited Host
🇩🇪 FeG Deutschland	2026-07-09 21:22:08 (5 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇨🇦 Julio Covolato	2026-07-09 02:00:17 (5 days ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇯🇵 kawanchu	2026-07-09 00:51:06 (5 days ago)	Brute-force attack via SMTP AUTH. Repeated login failures on mail server.	Brute-Force
🇮🇩 sockominfo	2026-07-08 20:00:52 (6 days ago)	Zimbra: Login failures from malicious IP: 191.53.107.252. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 191.53.107.252. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-08 06:03:28 (6 days ago)	IMAP password guessing	Brute-Force
🇬🇧 D3monite	2026-07-07 13:41:02 (1 week ago)	Attempted Brute Force (dovecot)	Brute-Force
🇩🇪 FeG Deutschland	2026-07-05 18:46:03 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 FeG Deutschland	2026-07-04 08:56:11 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇧🇷 dominioz	2026-07-03 02:03:03 (1 week ago)	191.53.107.252 [27E4] 23:02:51 Authentication [IMAP] - Result=0, [email protected], Method=0 ... show more 191.53.107.252 [27E4] 23:02:51 Authentication [IMAP] - Result=0, [email protected], Method=0 191.53.107.252 [27E4] 23:02:55 Authentication [IMAP] - Result=0, [email protected], Method=0 191.53.107.252 [27E4] 23:02:59 Authentication [IMAP] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇮🇩 sockominfo	2026-07-01 06:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 191.53.107.252. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 191.53.107.252. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-01 05:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 191.53.107.252. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 191.53.107.252. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-06-26 17:44:03 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.153.110.190

🇰🇷 211.46.177.174

🇳🇱 91.148.244.131

🇳🇱 81.171.72.135

🇰🇷 218.149.159.138

🇩🇪 213.209.159.11

🇷🇺 178.216.165.187

🇵🇱 176.53.159.198

🇸🇬 166.108.194.249

🇺🇸 165.22.34.189

🇩🇪 144.31.125.234

🇨🇳 115.190.181.18

🇺🇸 54.80.31.255

🇨🇳 36.33.167.165

🇺🇸 162.216.149.240

🇺🇸 147.182.177.180

🇺🇸 143.110.129.62

🇰🇷 125.139.87.30

🇰🇷 123.212.9.122

🇰🇷 121.178.185.141