JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.53.9.12

191.53.9.12 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 84%: ?

84%

ISP	MASTER S/A
Usage Type	Fixed Line ISP
ASN	AS28202
Hostname(s)	191-53-9-12.lna-wr.soumaster.com.br
Domain Name	mastercabo.com.br
Country	🇧🇷 Brazil
City	Montes Claros, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.53.9.12

Whois 191.53.9.12

IP Abuse Reports for 191.53.9.12:

This IP address has been reported a total of 83 times from 41 distinct sources. 191.53.9.12 was first reported on March 18th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 iroco.co	2026-07-10 16:17:35 (1 day ago)	Jul 10 18:17:34 iroco cyrus/imap[2028106]: badlogin: 191-53-9-12.lna-wr.soumaster.com.br [191.53.9.1 ... show more Jul 10 18:17:34 iroco cyrus/imap[2028106]: badlogin: 191-53-9-12.lna-wr.soumaster.com.br [191.53.9.12] LOGIN ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Email Spam
🇺🇸 kosada.com	2026-07-10 02:02:36 (1 day ago)	IMAP password guessing	Brute-Force
🇨🇦 Julio Covolato	2026-07-09 08:25:02 (2 days ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇦🇺 FireGuard Server	2026-07-09 02:20:13 (2 days ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=143	Port Scan Hacking
🇮🇩 sockominfo	2026-07-08 15:00:53 (3 days ago)	Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6.2/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-08 14:00:53 (3 days ago)	Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-08 13:00:09 (3 days ago)	Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6/10 (MEDIUM). Reported by Tang ... show more Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇪🇸 www.pk25.com	2026-07-06 06:08:38 (5 days ago)	2026-07-06T08:08:19.859225+02:00 servidor1 auth[601251]: pam_unix(dovecot:auth): authentication fail ... show more 2026-07-06T08:08:19.859225+02:00 servidor1 auth[601251]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=191.53.9.12 2026-07-06T08:08:29.226633+02:00 servidor1 auth[601251]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=191.53.9.12 2026-07-06T08:08:37.696187+02:00 servidor1 auth[601251]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=191.53.9.12 ... show less	Brute-Force
🇨🇦 zXero	2026-07-03 19:58:23 (1 week ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
Anonymous	2026-07-02 19:28:59 (1 week ago)	(imapd) Failed IMAP login from 191.53.9.12 (BR/Brazil/191-53-9-12.lna-wr.soumaster.com.br)	Brute-Force
🇷🇺 DZBOT	2026-07-02 16:58:41 (1 week ago)	DZBOT: [MTA] Brute-force users	Brute-Force
🇨🇦 zXero	2026-07-01 14:38:40 (1 week ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
🇦🇹 AustrianSimon	2026-07-01 12:13:21 (1 week ago)	01 Jul 2026 12:13:21UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 01 Jul 2026 12:13:21UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 191.53.9.12 show less	Brute-Force
🇮🇩 sockominfo	2026-06-30 05:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 191.53.9.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇷🇴 gtheo99	2026-06-29 13:30:54 (1 week ago)	(imapd) Failed IMAP login from 191.53.9.12 (BR/Brazil/191-53-9-12.lna-wr.soumaster.com.br): 3 in the ... show more (imapd) Failed IMAP login from 191.53.9.12 (BR/Brazil/191-53-9-12.lna-wr.soumaster.com.br): 3 in the last 900 secs show less	Brute-Force Email Spam

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.198.240.97

🇹🇷 151.250.222.53

🇫🇮 144.31.143.114

🇺🇸 107.167.34.125

🇺🇸 147.185.132.28

🇱🇹 141.98.11.134

🇭🇰 112.120.171.95

🇸🇪 104.23.223.61

🇩🇪 69.5.169.59

🇫🇷 44.151.47.178

🇺🇸 44.47.59.77

🇨🇳 175.19.74.181

🇺🇸 174.134.45.64

🇸🇬 172.217.44.209

🇩🇪 164.92.140.160

🇨🇳 111.52.88.101

🇸🇪 104.23.221.37

🇺🇸 34.229.16.77

🇧🇷 186.216.60.65

🇳🇱 172.94.9.55