JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.193.85.193

37.193.85.193 was found in our database!

This IP was reported 564 times. Confidence of Abuse is 42%: ?

42%

ISP	Novotelecom Ltd
Usage Type	Fixed Line ISP
ASN	AS31200
Hostname(s)	l37-193-85-193.novotelecom.ru
Domain Name	novotelecom.ru
Country	🇷🇺 Russian Federation
City	Novosibirsk, Novosibirsk Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.193.85.193

Whois 37.193.85.193

IP Abuse Reports for 37.193.85.193:

This IP address has been reported a total of 564 times from 162 distinct sources. 37.193.85.193 was first reported on September 8th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 pipeline.es	2026-06-18 07:52:05 (13 hours ago)	IMAP/POP user enumeration \| Evidence: Jun 18 09:50:58 [host] dovecot: auth-worker(3209153): sql([ema ... show more IMAP/POP user enumeration \| Evidence: Jun 18 09:50:58 [host] dovecot: auth-worker(3209153): sql([email],37.193.85.193,<4T0vb4JUCcwlwVXB>): unknown user \| ASN: Novotelecom Ltd \| Country: RU show less	Port Scan Web App Attack
🇳🇱 Grad	2026-06-17 18:39:20 (1 day ago)	Jun 17 20:39:20 server dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts ... show more Jun 17 20:39:20 server dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 20 secs): user=<[email protected]>, method=PLAIN, rip=37.193.85.193, lip=188.212.112.185, TLS, session=<FjmEX3dUEt4lwVXB> ... show less	Email Spam Brute-Force
🇮🇩 sockominfo	2026-06-17 00:00:57 (1 day ago)	Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6.5/10 (HIGH). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇬🇧 Aetherweb Ark	2026-06-16 15:12:48 (2 days ago)	Port Scan detected from 37.193.85.193 (RU/Russia/l37-193-85-193.novotelecom.ru). N in the last X s ... show more Port Scan detected from 37.193.85.193 (RU/Russia/l37-193-85-193.novotelecom.ru). N in the last X seconds show less	Port Scan
🇷🇴 gtheo99	2026-06-16 01:37:38 (2 days ago)	(imapd) Failed IMAP login from 37.193.85.193 (RU/Russia/l37-193-85-193.novotelecom.ru): 3 in the las ... show more (imapd) Failed IMAP login from 37.193.85.193 (RU/Russia/l37-193-85-193.novotelecom.ru): 3 in the last 900 secs show less	Brute-Force Email Spam
Anonymous	2026-06-14 14:59:01 (4 days ago)	...	Brute-Force
🇬🇧 Shepley	2026-06-12 21:50:32 (5 days ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
Anonymous	2026-06-10 15:15:02 (1 week ago)	...	Brute-Force
🇮🇩 sockominfo	2026-04-29 02:00:19 (1 month ago)	Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 5.3/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-29 01:00:17 (1 month ago)	Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 5.4/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-27 04:00:43 (1 month ago)	Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-27 03:00:47 (1 month ago)	Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-27 02:00:29 (1 month ago)	Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 37.193.85.193. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇷🇺 DZBOT	2026-04-25 05:11:22 (1 month ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇮🇹 www.tana.it	2026-04-18 07:49:07 (2 months ago)	dictionary attack	Brute-Force

Showing 1 to 15 of 564 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 158.94.210.190

🇺🇸 216.73.160.163

🇩🇪 213.209.159.227

🇺🇸 195.184.76.218

🇬🇭 179.64.71.248

🇰🇪 129.222.147.135

🇨🇳 101.65.170.215

🇰🇷 1.227.228.131

🇰🇷 211.223.107.86

🇫🇷 92.103.134.183

🇹🇷 88.238.59.40

🇳🇱 85.11.167.185

🇳🇱 45.148.10.141

🇬🇧 35.203.211.60

🇺🇸 206.221.176.60

🇧🇪 198.235.24.200

🇬🇧 159.26.106.90

🇳🇱 103.219.153.248

🇺🇸 66.60.125.142

🇺🇸 54.83.23.103