JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.53.9.130

191.53.9.130 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 73%: ?

73%

ISP	MASTER S/A
Usage Type	Fixed Line ISP
ASN	AS28202
Hostname(s)	191-53-9-130.lna-wr.soumaster.com.br
Domain Name	mastercabo.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.53.9.130

Whois 191.53.9.130

IP Abuse Reports for 191.53.9.130:

This IP address has been reported a total of 99 times from 55 distinct sources. 191.53.9.130 was first reported on March 18th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-08-16 06:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 6.1/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-16 05:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 6.2/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-16 04:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-16 03:00:09 (5 days ago)	Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 5.9/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 191.53.9.130. Threat Score: 5.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇸🇮 basing	2026-08-15 21:16:48 (6 days ago)	2026-08-15 22:16:48 bs SASL PLAIN auth failed: rhost=191.53.9.130...	Brute-Force
Anonymous	2026-08-12 20:59:21 (1 week ago)	bruteforce	Brute-Force
🇩🇪 FeG Deutschland	2026-08-11 14:08:08 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 FeG Deutschland	2026-08-10 05:06:08 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 kosada.com	2026-08-09 10:00:33 (1 week ago)	IMAP password guessing	Brute-Force
🇺🇸 interbiznw.com	2026-08-09 01:24:33 (1 week ago)	dovecot-bruteforce	Port Scan Hacking Spoofing Brute-Force Exploited Host
🇩🇪 FeG Deutschland	2026-08-08 20:46:06 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇸🇰 Schomburg	2026-08-06 18:10:25 (2 weeks ago)	Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Report ... show more Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: VBq3v1gZG8ifYGCmzgwOIu5BhcUOEI42 show less	Port Scan Hacking Brute-Force
🇺🇸 interbiznw.com	2026-08-06 17:18:41 (2 weeks ago)	dovecot-bruteforce	Port Scan Hacking Spoofing Brute-Force Exploited Host
🇿🇦 hostsec_za	2026-08-02 15:00:05 (2 weeks ago)	IMAP/POP3 Auth Attack. 10 failed logins in 6 hours.	Brute-Force
🇵🇾 SecOpsSL	2026-08-01 22:27:12 (2 weeks ago)	2026-08-01 18:41:19,486 WARN [ImapSSLServer-3] [ip=192.168.0.25;oip=191.53.9.130;via=192.168.0.25(n ... show more 2026-08-01 18:41:19,486 WARN [ImapSSLServer-3] [ip=192.168.0.25;oip=191.53.9.130;via=192.168.0.25(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=28;] security - cmd=Auth; [email protected]; protocol=imap; error=authentication failed for [[email protected]], invalid password; show less	Email Spam Brute-Force

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 193.164.7.247

🇹🇼 59.125.252.50

🇩🇿 41.109.22.71

🇺🇸 205.210.31.65

🇵🇹 158.173.244.78

🇵🇭 124.83.39.40

🇨🇳 120.48.52.177

🇨🇳 115.190.149.134

🇻🇳 103.200.20.41

🇺🇦 94.154.239.69

🇳🇱 91.92.47.120

🇳🇱 91.92.40.28

🇹🇷 87.76.207.196

🇫🇷 85.217.140.36

🇸🇬 47.129.221.110

🇸🇬 47.79.207.206

🇹🇷 31.57.77.131

🇺🇸 3.129.187.38

🇬🇧 2a06:4880:8000::a2

🇲🇽 187.251.110.72