JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.228.89.74

185.228.89.74 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 22%: ?

22%

ISP	Servercore UZ Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43647
Domain Name	servercore.com
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.228.89.74

Whois 185.228.89.74

IP Abuse Reports for 185.228.89.74:

This IP address has been reported a total of 17 times from 7 distinct sources. 185.228.89.74 was first reported on April 22nd 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NewGastroline	2026-08-28 17:46:40 (6 days ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-19 05:50:05 (2 weeks ago)	Detected mail brute force attack from different servers	Brute-Force
🇮🇩 sockominfo	2026-08-02 07:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.8/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.8/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-02 05:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.9/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.9/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-02 04:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 6/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-02 03:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-02 02:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.3/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-02 01:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.4/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 185.228.89.74. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 NewGastroline	2026-07-25 20:49:51 (1 month ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇩🇪 NewGastroline	2026-07-23 22:13:05 (1 month ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-07-17 10:37:15 (1 month ago)	07/17/2026-12:32:11.049544 185.228.89.74 Protocol: 6 ET SCAN Behavioral Unusually fast Terminal Serv ... show more 07/17/2026-12:32:11.049544 185.228.89.74 Protocol: 6 ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound) show less	Hacking
🇳🇱 wlt-blocker	2026-07-16 17:23:09 (1 month ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇮🇹 VHosting	2026-07-15 02:40:13 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2024-04-26 13:04:11 (2 years ago)	SPFBL check banned	Email Spam
🇺🇸 SvrAdmin	2024-04-22 17:15:17 (2 years ago)	Date: Mon, 22 Apr 2024 14:07:44 -0300 Subject: DOCUMENTO CONCLUÍDO COM SUCESSO. 6736744173634755 - ... show more Date: Mon, 22 Apr 2024 14:07:44 -0300 Subject: DOCUMENTO CONCLUÍDO COM SUCESSO. 6736744173634755 - Documento para [email protected] 22/04/2024 14:07:44 Received: from notificacao07z.paisesindeoenesia.sa.com ([185.228.89.74]:35352) show less	Fraud Orders Phishing Email Spam Spoofing

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.46.214.6

🇺🇸 98.92.2.137

🇳🇱 91.92.42.87

🇫🇷 90.60.35.67

🇺🇸 45.131.195.180

🇧🇷 205.210.31.199

🇵🇰 202.63.202.79

🇧🇪 198.235.24.242

🇺🇸 185.180.141.49

🇺🇸 159.223.193.255

🇧🇪 144.86.173.83

🇮🇹 101.56.179.218

🇳🇱 45.148.10.157

🇧🇷 16.5.0.244

🇧🇷 205.210.31.242

🇫🇷 185.177.72.13

🇦🇷 149.107.251.16

🇨🇳 112.46.214.61

🇷🇴 92.118.39.77

🇫🇷 85.217.140.16