JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.0.224.89

168.0.224.89 was found in our database!

This IP was reported 175 times. Confidence of Abuse is 75%: ?

75%

ISP	JOSE APARECIDO PEREIRA DA SILVA TELNET - ME
Usage Type	Fixed Line ISP
ASN	AS265260
Hostname(s)	168-0-224-89.dynamic.telnettelecom.net.br
Domain Name	telnettelecom.net.br
Country	🇧🇷 Brazil
City	Limeira, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.0.224.89

Whois 168.0.224.89

IP Abuse Reports for 168.0.224.89:

This IP address has been reported a total of 175 times from 70 distinct sources. 168.0.224.89 was first reported on June 9th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-07-12 08:00:53 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6/10 (MEDIUM). Confidence: 40% ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 07:00:52 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.1/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 06:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.3/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 05:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.4/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 04:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.5/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-07-10 19:40:04 (5 days ago)	2026-07-10T21:40:03.660265+02:00 soli-gate cyrus/imaps[3771297]: badlogin: 168-0-224-89.dynamic.teln ... show more 2026-07-10T21:40:03.660265+02:00 soli-gate cyrus/imaps[3771297]: badlogin: 168-0-224-89.dynamic.telnettelecom.net.br [168.0.224.89] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-07-08 22:36:01 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 AWSGIEMSAN7	2026-07-08 22:10:05 (1 week ago)	Blocked by Fail2ban (Jail: dovecot).	Brute-Force
🇷🇺 DZBOT	2026-07-07 20:02:11 (1 week ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇸🇪 maxxsense	2026-07-05 22:41:46 (1 week ago)	(imapd) Failed IMAP login from 168.0.224.89 (BR/Brazil/168-0-224-89.dynamic.telnettelecom.net.br)	Brute-Force
🇬🇧 D3monite	2026-07-03 06:07:52 (1 week ago)	Attempted Brute Force (dovecot)	Brute-Force
Anonymous	2026-07-03 05:42:24 (1 week ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-07-03 04:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-03 03:22:06 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 sockominfo	2026-07-03 03:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 168.0.224.89. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 175 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.188.187.59

🇺🇿 95.214.210.30

🇺🇦 83.171.252.135

🇺🇸 2600:3c00::2000:49ff:fe97:2659

🇩🇪 195.201.228.157

🇳🇱 195.178.110.137

🇫🇷 195.154.106.98

🇧🇬 193.24.211.76

🇵🇦 191.98.196.14

🇧🇷 186.239.41.74

🇺🇿 185.191.141.115

🇺🇦 178.34.159.52

🇵🇱 176.53.159.196

🇺🇸 164.92.96.91

🇧🇩 103.198.132.144

🇳🇱 91.92.42.52

🇺🇸 64.225.17.153

🇺🇸 20.14.80.89

🇺🇸 13.57.33.165

🇺🇸 3.238.148.143