JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.0.224.89

168.0.224.89 was found in our database!

This IP was reported 175 times. Confidence of Abuse is 75%: ?

75%

ISP	JOSE APARECIDO PEREIRA DA SILVA TELNET - ME
Usage Type	Fixed Line ISP
ASN	AS265260
Hostname(s)	168-0-224-89.dynamic.telnettelecom.net.br
Domain Name	telnettelecom.net.br
Country	🇧🇷 Brazil
City	Limeira, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.0.224.89

Whois 168.0.224.89

IP Abuse Reports for 168.0.224.89:

This IP address has been reported a total of 175 times from 70 distinct sources. 168.0.224.89 was first reported on June 9th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-07-12 08:00:53 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6/10 (MEDIUM). Confidence: 40% ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 07:00:52 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.1/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 06:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.3/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 05:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.4/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 04:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.5/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-07-10 19:40:04 (6 days ago)	2026-07-10T21:40:03.660265+02:00 soli-gate cyrus/imaps[3771297]: badlogin: 168-0-224-89.dynamic.teln ... show more 2026-07-10T21:40:03.660265+02:00 soli-gate cyrus/imaps[3771297]: badlogin: 168-0-224-89.dynamic.telnettelecom.net.br [168.0.224.89] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-07-08 22:36:01 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 AWSGIEMSAN7	2026-07-08 22:10:05 (1 week ago)	Blocked by Fail2ban (Jail: dovecot).	Brute-Force
🇷🇺 DZBOT	2026-07-07 20:02:11 (1 week ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇸🇪 maxxsense	2026-07-05 22:41:46 (1 week ago)	(imapd) Failed IMAP login from 168.0.224.89 (BR/Brazil/168-0-224-89.dynamic.telnettelecom.net.br)	Brute-Force
🇬🇧 D3monite	2026-07-03 06:07:52 (1 week ago)	Attempted Brute Force (dovecot)	Brute-Force
Anonymous	2026-07-03 05:42:24 (1 week ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-07-03 04:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-03 03:22:06 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 sockominfo	2026-07-03 03:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 175 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 2402:800:6378:3799:1504:c13b:35d2:c121

🇩🇪 2003:fe:1702:fb00:29e6:fc0e:11a2:caec

🇧🇷 205.210.31.210

🇨🇳 182.87.88.22

🇺🇸 109.105.209.10

🇺🇸 109.105.209.9

🇲🇦 105.156.241.52

🇮🇩 103.164.57.37

🇺🇸 100.28.191.174

🇺🇸 34.60.148.45

🇺🇸 20.168.122.30

🇬🇧 2.57.17.151

🇨🇳 1.193.63.104

🇪🇸 196.196.150.100

🇲🇩 194.110.247.198

🇷🇴 193.32.162.213

🇨🇳 171.111.218.2

🇺🇸 162.241.33.238

🇺🇸 159.65.36.130

🇧🇬 91.148.190.150