JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.57.83.168

89.57.83.168 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 32%: ?

32%

ISP	SWN Stadtwerke Neumuenster GmbH
Usage Type	Fixed Line ISP
ASN	AS207790
Domain Name	swn.net
Country	🇩🇪 Germany
City	Neumunster, Schleswig-Holstein

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.57.83.168

Whois 89.57.83.168

IP Abuse Reports for 89.57.83.168:

This IP address has been reported a total of 10 times from 9 distinct sources. 89.57.83.168 was first reported on June 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-08-31 15:56:19 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇮🇩 sockominfo	2026-08-21 23:01:03 (1 week ago)	Zimbra: Login failures from malicious IP: 89.57.83.168. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 89.57.83.168. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-21 22:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 89.57.83.168. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 89.57.83.168. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-08-08 05:03:40 (3 weeks ago)	Automated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled produc ... show more Automated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled product pages without loading any page assets (CSS/JS/images) - consistent with headless scripted access rather than a real browser session. show less	Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-08-06 09:15:10 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-07-31 20:39:35 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 SX Communications	2026-07-22 05:58:26 (1 month ago)	HTTP application-layer DoS / botnet traffic from 89.57.83.168: repeated high-cost dynamic page and f ... show more HTTP application-layer DoS / botnet traffic from 89.57.83.168: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 ksol-hostmaster	2026-07-09 21:17:06 (1 month ago)	Jul 9 23:17:05 ksol dovecot[78357]: auth-worker(94905): conn unix:auth-worker (uid=143): auth-worke ... show more Jul 9 23:17:05 ksol dovecot[78357]: auth-worker(94905): conn unix:auth-worker (uid=143): auth-worker<11>: sql(anonymized@email,89.57.83.168,<6jrcJDRW7exZOVOo>): Password mismatch (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇬🇧 Oakley	2026-07-03 07:21:06 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇰🇷 zlhIcd	2026-06-16 00:28:42 (2 months ago)	89.57.83.168 - - [15/Jun/2026:19:36:27 +0900] "GET /pcwiki/index.php?days=30&from=20251211194323&hid ... show more 89.57.83.168 - - [15/Jun/2026:19:36:27 +0900] "GET /pcwiki/index.php?days=30&from=20251211194323&hideminor=1&hidemyself=1&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_4_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.126 Safari/537.36" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 91.230.168.220

🇰🇷 222.232.176.7

🇦🇷 186.57.128.55

🇽🇰 185.173.204.61

🇯🇵 153.205.49.80

🇧🇩 138.252.238.9

🇦🇷 138.204.156.229

🇻🇳 103.176.20.115

🇪🇪 94.183.170.120

🇮🇹 87.20.199.141

🇱🇹 62.60.130.227

🇩🇪 196.251.121.150

🇦🇷 186.22.253.149

🇸🇪 185.142.82.183

🇸🇬 161.118.255.220

🇵🇱 146.59.16.244

🇯🇵 124.45.31.57

🇨🇳 101.206.211.72

🇷🇴 92.118.39.77

🇰🇷 218.156.93.206