JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.240.36.92

191.240.36.92 was found in our database!

This IP was reported 277 times. Confidence of Abuse is 77%: ?

77%

ISP	MASTER S/A
Usage Type	Fixed Line ISP
ASN	AS28202
Hostname(s)	191-240-36-92.mal-wr.mastercabo.com
Domain Name	mastercabo.com.br
Country	🇧🇷 Brazil
City	Chavantes, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.240.36.92

Whois 191.240.36.92

IP Abuse Reports for 191.240.36.92:

This IP address has been reported a total of 277 times from 95 distinct sources. 191.240.36.92 was first reported on June 6th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 wlt-blocker	2026-08-30 10:01:29 (3 days ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇸🇮 basing	2026-08-29 06:51:06 (4 days ago)	2026-08-29 07:51:06 bs SASL PLAIN auth failed: rhost=191.240.36.92...	Brute-Force
🇮🇹 www.tana.it	2026-08-26 05:19:06 (1 week ago)	dictionary attack	Brute-Force
🇨🇦 Julio Covolato	2026-08-20 18:00:12 (1 week ago)	Imap or Submission login brute-force attacks.	Brute-Force
Anonymous	2026-08-20 09:49:38 (1 week ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-08-19 15:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 191.240.36.92. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 191.240.36.92. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-19 14:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 191.240.36.92. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 191.240.36.92. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-19 13:00:11 (2 weeks ago)	Zimbra: Login failures from malicious IP: 191.240.36.92. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 191.240.36.92. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇮 danskefilm.dk	2026-08-18 16:55:01 (2 weeks ago)	IMAP password guessing	Brute-Force
Anonymous	2026-08-18 15:05:53 (2 weeks ago)	191.240.36.92 detected on srv01	Brute-Force
🇩🇪 FeG Deutschland	2026-08-18 12:02:11 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 ksol-hostmaster	2026-08-17 22:09:32 (2 weeks ago)	Aug 18 00:09:31 ksol dovecot[99639]: auth-worker(24215): conn unix:auth-worker (uid=143): auth-worke ... show more Aug 18 00:09:31 ksol dovecot[99639]: auth-worker(24215): conn unix:auth-worker (uid=143): auth-worker<10>: sql(anonymized@email,191.240.36.92,<qBeibEVZ3uG/8CRc>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-14 14:38:12 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 kosada.com	2026-08-14 00:26:44 (2 weeks ago)	IMAP password guessing	Brute-Force
🇷🇺 DZBOT	2026-08-11 08:20:17 (3 weeks ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force

Showing 1 to 15 of 277 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.22.238.239

🇫🇮 147.185.133.170

🇨🇳 111.225.214.141

🇺🇸 65.49.20.107

🇸🇬 47.84.138.233

🇫🇮 45.154.244.193

🇺🇸 13.222.171.239

🇺🇸 3.87.196.69

🇮🇹 2a00:1450:4025:1801::123

🇧🇷 172.217.37.26

🇺🇸 136.107.227.66

🇻🇳 103.60.242.169

🇳🇱 91.92.47.252

🇻🇪 38.52.168.118

🇨🇱 34.176.114.7

🇬🇧 5.252.83.169

🇷🇴 2.57.122.168

🇬🇧 198.244.200.163

🇺🇸 172.96.172.207

🇹🇼 111.70.23.231