JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.58.12.180

89.58.12.180 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	netcupr.baseit.de
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.58.12.180

Whois 89.58.12.180

IP Abuse Reports for 89.58.12.180:

This IP address has been reported a total of 34 times from 26 distinct sources. 89.58.12.180 was first reported on June 18th 2026, and the most recent report was 25 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-06-18 23:09:14 (25 minutes ago)	Rule : POP 06/19/26 00:06:46 POPS 1144 89.58.12.180 USER USER [email protected] OK 5 29 06/ ... show more Rule : POP 06/19/26 00:06:46 POPS 1144 89.58.12.180 USER USER [email protected] OK 5 29 06/19/26 00:06:46 POPS 1144 89.58.12.180 PASS PASS * -ERR Unable to log on 23 21 show less	Port Scan Spoofing
Anonymous	2026-06-18 21:15:27 (2 hours ago)	WEBCONDE WEBEXPLOIT 89.58.12.180 (netcupr.baseit.de)	Web App Attack
🇩🇪 Trueforce Threat Report	2026-06-18 21:09:57 (2 hours ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇳🇱 Godert Jan van Manen	2026-06-18 20:59:03 (2 hours ago)	Jun 18 22:52:41 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<in ... show more Jun 18 22:52:41 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<LOdMW41UmKZZOgy0> Jun 18 22:55:51 odin dovecot: auth-worker(13141): sql([email protected],89.58.12.180,<3O2/Zo1UtM1ZOgy0>): unknown user Jun 18 22:55:53 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<3O2/Zo1UtM1ZOgy0> Jun 18 22:59:01 odin dovecot: auth-worker(13141): sql([email protected],89.58.12.180,<xuQXco1U5LpZOgy0>): unknown user Jun 18 22:59:03 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<xuQXco1U5LpZOgy0> show less	Brute-Force
🇩🇪 strxmpp	2026-06-18 20:56:16 (2 hours ago)	89.58.12.180 - - [18/Jun/2026:22:56:15 +0200] "GET /administrator/components/com_jce/jce.xml HTTP/1. ... show more 89.58.12.180 - - [18/Jun/2026:22:56:15 +0200] "GET /administrator/components/com_jce/jce.xml HTTP/1.1" 404 4873 "-" "SecurityAudit/1.0" ... show less	Bad Web Bot
🇫🇷 [email protected]	2026-06-18 19:46:41 (3 hours ago)	Jun 18 21:36:27 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<i ... show more Jun 18 21:36:27 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=141.94.194.45, session=<6zivSoxUXIpZOgy0> Jun 18 21:39:57 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=141.94.194.45, session=<oNI0V4xU8IZZOgy0> Jun 18 21:40:08 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=141.94.194.45, session=<+4SaV4xU0oFZOgy0> Jun 18 21:44:45 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=141.94.194.45, session=<BGhcaIxU+M5ZOgy0> Jun 18 21:46:41 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=141.94.194.45, session=<JotQb4xUiJlZ ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 19:00:55 (4 hours ago)	Jun 18 20:54:06 odin dovecot: auth-worker(13141): sql([email protected],89.58.12.180,<vkBZs4tURNFZO ... show more Jun 18 20:54:06 odin dovecot: auth-worker(13141): sql([email protected],89.58.12.180,<vkBZs4tURNFZOgy0>): unknown user Jun 18 20:54:08 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<vkBZs4tURNFZOgy0> Jun 18 20:54:20 odin dovecot: auth-worker(13141): sql([email protected],89.58.12.180,<K7T1s4tUVKZZOgy0>): unknown user Jun 18 20:54:22 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<K7T1s4tUVKZZOgy0> Jun 18 21:00:55 odin dovecot: auth-worker(13141): sql([email protected],89.58.12.180,<LEC6y4tUZJNZOgy0>): unknown user show less	Brute-Force
🇩🇪 gadix	2026-06-18 18:22:40 (5 hours ago)	2026-06-18 12:21:56,245 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 89.58.12.180 202 ... show more 2026-06-18 12:21:56,245 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 89.58.12.180 2026-06-18 16:37:00,195 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 89.58.12.180 2026-06-18 20:22:38,351 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 89.58.12.180 ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 16:29:11 (7 hours ago)	Jun 18 18:27:04 odin dovecot: auth-worker(3431): sql([email protected],89.58.12.180,<UzCDpYlUGqBZO ... show more Jun 18 18:27:04 odin dovecot: auth-worker(3431): sql([email protected],89.58.12.180,<UzCDpYlUGqBZOgy0>): unknown user Jun 18 18:27:06 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<UzCDpYlUGqBZOgy0> Jun 18 18:28:03 odin dovecot: auth-worker(3431): sql([email protected],89.58.12.180,<Z10LqYlUZLRZOgy0>): unknown user Jun 18 18:28:05 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<Z10LqYlUZLRZOgy0> Jun 18 18:29:10 odin dovecot: auth-worker(3431): sql([email protected],89.58.12.180,</5AErYlUOqtZOgy0>): unknown user show less	Brute-Force
🇩🇪 Vegascosmetics	2026-06-18 16:00:21 (7 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇧🇾 hbars.by	2026-06-18 15:37:33 (7 hours ago)	2026-06-18T18:37:32.396878+03:00 radionet dovecot: auth: passwd-file([email protected],89.58.12.180,<z7N ... show more 2026-06-18T18:37:32.396878+03:00 radionet dovecot: auth: passwd-file([email protected],89.58.12.180,<z7Ne9IhUuu1ZOgy0>): unknown user show less	Brute-Force
Anonymous	2026-06-18 14:35:57 (8 hours ago)	(PERMBLOCK) 89.58.12.180 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Port ... show more (PERMBLOCK) 89.58.12.180 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force
Anonymous	2026-06-18 14:22:36 (9 hours ago)	Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attem ... show more Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 6 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 13:28:31 (10 hours ago)	Jun 18 15:18:33 odin dovecot: auth-worker(20585): sql([email protected],89.58.12.180,<dIlTA4dUUt5ZOgy0 ... show more Jun 18 15:18:33 odin dovecot: auth-worker(20585): sql([email protected],89.58.12.180,<dIlTA4dUUt5ZOgy0>): unknown user Jun 18 15:18:35 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<dIlTA4dUUt5ZOgy0> Jun 18 15:21:24 odin dovecot: auth-worker(20585): sql([email protected],89.58.12.180,<5jiFDYdUFM9ZOgy0>): unknown user Jun 18 15:21:26 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=89.58.12.180, lip=178.162.131.122, session=<5jiFDYdUFM9ZOgy0> Jun 18 15:28:31 odin dovecot: auth-worker(20585): sql([email protected],89.58.12.180,<T3P2JodUeNFZOgy0>): unknown user show less	Brute-Force
🇫🇷 Batz	2026-06-18 13:22:19 (10 hours ago)	[89.58.12.180] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 160.187.174.22

🇫🇷 90.84.168.147

🇵🇱 87.251.64.157

🇩🇪 78.43.116.146

🇺🇸 45.55.42.206

🇬🇧 35.203.211.108

🇨🇳 221.198.81.206

🇩🇪 69.5.169.109

🇺🇸 24.102.123.176

🇮🇷 217.219.70.92

🇳🇱 185.242.226.8

🇨🇳 182.138.158.68

🇨🇳 175.30.48.154

🇺🇸 162.216.150.179

🇨🇳 139.212.69.103

🇮🇩 103.112.245.85

🇻🇳 103.9.205.204

🇺🇸 216.180.246.54

🇺🇸 216.73.160.121

🇧🇷 137.131.208.99