191.53.9.78
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- MASTER S/A
- Usage Type
- Fixed Line ISP
- ASN
- AS28202
- Hostname(s)
- 191-53-9-78.lna-wr.soumaster.com.br
- Domain Name
- mastercabo.com.br
- Country
- 🇧🇷 Brazil
- City
- Lorena, Sao Paulo
No reports in the last 60 days
191.53.9.78 has been reported 82 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
82 from
48 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
3 Login Attempts
|
Port Scan Brute-Force | |
| 🇬🇧 D3monite |
Attempted Brute Force (dovecot)
|
Brute-Force | |
| 🇸🇪 maxxsense |
(imapd) Failed IMAP login from 191.53.9.78 (BR/Brazil/191-53-9-78.lna-wr.soumaster.com.br)
|
Brute-Force | |
| 🇺🇸 TTWebhosting |
(imapd) Failed IMAP login from 191.53.9.78 (BR/Brazil/São Paulo/Lorena/191-53-9-78.lna-wr.soumaster.com.br/[AS28202 MASTER S/A]): 2 in the last 3600 secs
|
Brute-Force Port Scan Hacking | |
| 🇩🇪 itak |
IMAP SASL Brute-Force Attack
|
Port Scan Hacking Brute-Force | |
| Anonymous |
IMAP password guessing
|
Brute-Force | |
| 🇯🇵 HeliJP |
Unauthorized connection attempt from IP address 191.53.9.78 on port 110
|
Port Scan Brute-Force | |
| 🇫🇷 basing |
2026-06-18 11:31:07 pzb SASL PLAIN auth failed: rhost=191.53.9.78...
|
Brute-Force | |
| 🇷🇺 DZBOT |
DZBOT: [MTA] Brute-force users
|
Brute-Force | |
| Anonymous |
3 Login Attempts
|
Port Scan Brute-Force | |
| 🇷🇴 INTEQ |
Brute force attack from 191.53.9.78
|
Brute-Force | |
| 🇧🇷 ICS Labs |
ICS Labs identified 191.53.9.78 as a malicious indicator from threat intelligence.
|
DDoS Attack Hacking Brute-Force Exploited Host | |
| 🇩🇪 ksol-hostmaster |
Jun 10 10:32:39 ksol dovecot[32046]: auth-worker(44346): conn unix:auth-worker (uid=143): auth-worker<5>: sql(anonymized@email,191.53.9.78,<DuwaFuJTwOq/NQlO>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD)
...
|
Brute-Force | |
| 🇬🇧 gaztronics |
2026-06-09T23:39:00.663890 liberator auth[1514842]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=191.53.9.78
...
|
Brute-Force | |
| 🇺🇸 kosada.com |
IMAP password guessing
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown