JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.231.35.12

89.231.35.12 was found in our database!

This IP was reported 177 times. Confidence of Abuse is 58%: ?

58%

ISP	Arknet Arkadiusz Fialek
Usage Type	Fixed Line ISP
ASN	AS21021
Hostname(s)	host-89-231-35-12.dynamic.mm.pl
Domain Name	multimedia.pl
Country	🇵🇱 Poland
City	Lipiany, West Pomerania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.231.35.12

Whois 89.231.35.12

IP Abuse Reports for 89.231.35.12:

This IP address has been reported a total of 177 times from 74 distinct sources. 89.231.35.12 was first reported on March 28th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 dominioz	2026-08-21 23:40:52 (3 days ago)	89.231.35.12 [26E8] 20:40:39 Authentication [IMAP] - Result=0, [email protected], Meth ... show more 89.231.35.12 [26E8] 20:40:39 Authentication [IMAP] - Result=0, [email protected], Method=0 89.231.35.12 [26E8] 20:40:43 Authentication [IMAP] - Result=0, [email protected], Method=0 89.231.35.12 [26E8] 20:40:47 Authentication [IMAP] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇮🇩 sockominfo	2026-08-20 11:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-20 10:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 TAY	2026-08-19 13:21:44 (6 days ago)	2026-08-19 21:21:27 auth-worker(133988): Info: sql(sales,89.231.35.12,<MhjcR2ZZS5BZ5yMM>): unknown u ... show more 2026-08-19 21:21:27 auth-worker(133988): Info: sql(sales,89.231.35.12,<MhjcR2ZZS5BZ5yMM>): unknown user 2026-08-19 21:21:34 auth-worker(133988): Info: sql(sales,89.231.35.12,<MhjcR2ZZS5BZ5yMM>): unknown user 2026-08-19 21:21:40 auth-worker(133988): Info: sql(sales,89.231.35.12,<MhjcR2ZZS5BZ5yMM>): unknown user 2026-08-19 21:21:43 imap-login: Info: Disconnected (auth failed, 3 attempts in 16 secs): user=<sales>, method=PLAIN, rip=89.231.35.12, lip=162.220.160.187, TLS, session=<MhjcR2ZZS5BZ5yMM> ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-17 08:16:09 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇹🇭 thaizone.com	2026-08-11 13:57:00 (2 weeks ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
🇷🇺 DZBOT	2026-08-11 09:14:59 (2 weeks ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇮🇩 sockominfo	2026-08-09 15:00:55 (2 weeks ago)	Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-09 14:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 89.231.35.12. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇦🇹 cybertailor	2026-08-06 03:14:53 (2 weeks ago)	Aug 6 08:14:43 sysrq dovecot: auth: ldap([email protected],89.231.35.12,<vioPSlhYX8tZ5yMM>) ... show more Aug 6 08:14:43 sysrq dovecot: auth: ldap([email protected],89.231.35.12,<vioPSlhYX8tZ5yMM>): Password mismatch (for LDAP bind) Aug 6 08:14:51 sysrq dovecot: imap-login: Disconnected: Connection closed (auth failed, 2 attempts in 8 secs): user=<[email protected]>, method=PLAIN, rip=89.231.35.12, lip=192.168.1.99, TLS, session=<vioPSlhYX8tZ5yMM> ... show less	Brute-Force
🇺🇸 TAY	2026-08-03 13:31:28 (3 weeks ago)	2026-08-03 21:31:11 auth-worker(168957): Info: sql([email protected],89.231.35.12,<DBozjSRY56ZZ5yMM>): ... show more 2026-08-03 21:31:11 auth-worker(168957): Info: sql([email protected],89.231.35.12,<DBozjSRY56ZZ5yMM>): Password mismatch 2026-08-03 21:31:18 auth-worker(168957): Info: sql([email protected],89.231.35.12,<DBozjSRY56ZZ5yMM>): Password mismatch 2026-08-03 21:31:24 auth-worker(168957): Info: sql([email protected],89.231.35.12,<DBozjSRY56ZZ5yMM>): Password mismatch 2026-08-03 21:31:27 imap-login: Info: Disconnected (auth failed, 3 attempts in 16 secs): user=<[email protected]>, method=PLAIN, rip=89.231.35.12, lip=162.220.160.187, TLS, session=<DBozjSRY56ZZ5yMM> ... show less	Brute-Force
Anonymous	2026-07-31 16:14:00 (3 weeks ago)	(imapd) Failed IMAP login from 89.231.35.12 (PL/Poland/host-89-231-35-12.dynamic.mm.pl)	Brute-Force
🇺🇸 kosada.com	2026-07-30 13:17:55 (3 weeks ago)	IMAP password guessing	Brute-Force
🇺🇸 etu brutus	2026-07-30 11:06:33 (3 weeks ago)	89.231.35.12 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇩🇪 FeG Deutschland	2026-07-28 13:26:15 (4 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 1 to 15 of 177 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.14

🇺🇸 172.253.244.154

🇫🇷 172.71.134.81

🇺🇸 152.32.150.7

🇮🇳 148.113.47.190

🇺🇸 147.185.132.159

🇩🇪 130.61.116.196

🇺🇸 103.215.75.66

🇧🇫 102.23.10.171

🇹🇷 94.154.43.191

🇺🇸 71.6.238.8

🇳🇱 45.148.10.151

🇧🇷 201.32.186.224

🇵🇱 194.180.48.39

🇺🇦 193.239.234.230

🇺🇸 181.214.83.95

🇨🇳 123.145.23.135

🇨🇳 113.218.242.62

🇺🇸 104.232.79.58

🇧🇩 103.92.217.230