JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.63.11.123

89.63.11.123 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	WORTMANN AG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60175
Domain Name	wortmann.de
Country	🇩🇪 Germany
City	Minden, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.63.11.123

Whois 89.63.11.123

IP Abuse Reports for 89.63.11.123:

This IP address has been reported a total of 42 times from 31 distinct sources. 89.63.11.123 was first reported on November 23rd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-06-17 07:05:47 (2 days ago)	IP reached maximum auth failures	Brute-Force
Anonymous	2026-06-17 07:04:18 (2 days ago)	Jun 17 08:57:39 butterfly dovecot: auth: passwd-file([email protected],89.63.11.123): unknown u ... show more Jun 17 08:57:39 butterfly dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 17 08:57:39 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=89.63.11.123 Jun 17 08:58:42 butterfly dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 17 08:58:42 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=89.63.11.123 Jun 17 08:59:32 butterfly dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 17 08:59:32 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=89.63.11.123 Jun 17 09:00:19 butterfly dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 17 09:00:19 butterfly auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 ... show less	Hacking Brute-Force Exploited Host
🇩🇪 DEV-DNS	2026-06-17 07:04:08 (2 days ago)	(smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/Free and Hanseatic City of Hamburg/H ... show more (smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/Free and Hanseatic City of Hamburg/Hamburg/-/[redacted]) show less	Brute-Force
Anonymous	2026-06-17 04:30:13 (2 days ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 grassau.com	2026-06-17 01:21:04 (2 days ago)	(smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/Free and Hanseatic City of Hamburg/H ... show more (smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/Free and Hanseatic City of Hamburg/Hamburg/-) show less	Brute-Force
🇩🇪 R.G.	2026-06-17 00:54:33 (2 days ago)	(smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 900 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: show less	Brute-Force
🇧🇷 SvrAdmin	2026-06-17 00:54:25 (2 days ago)	[199] (smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 3600 secs; P ... show more [199] (smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-16 21:50:34 dovecot_plain authenticator failed for H=(CMS) [89.63.11.123]:63989: 535 Incorrect authentication data ([email protected]) 2026-06-16 21:51:48 dovecot_plain authenticator failed for H=(CMS) [89.63.11.123]:61200: 535 Incorrect authentication data ([email protected]) 2026-06-16 21:52:37 dovecot_plain authenticator failed for H=(CMS) [89.63.11.123]:62419: 535 Incorrect authentication data ([email protected]) 2026-06-16 21:53:33 dovecot_plain authenticator failed for H=(CMS) [89.63.11.123]:51349: 535 Incorrect authentication data ([email protected]) 2026-06-16 21:54:19 dovecot_plain authenticator failed for H=(CMS) [89.63.11.123]:50145: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2026-06-17 00:54:23 (2 days ago)	(smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-17 02:50:49 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:51:56 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:52:41 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:53:34 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:54:18 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇨🇿 tuxcloud.net	2026-06-17 00:54:21 (2 days ago)	Jun 17 02:50:41 zoidberg postfix/submission/smtpd[282149]: warning: unknown[89.63.11.123]: SASL PLAI ... show more Jun 17 02:50:41 zoidberg postfix/submission/smtpd[282149]: warning: unknown[89.63.11.123]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 17 02:51:53 zoidberg postfix/submission/smtpd[282149]: warning: unknown[89.63.11.123]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 17 02:52:41 zoidberg postfix/submission/smtpd[282149]: warning: unknown[89.63.11.123]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 17 02:53:36 zoidberg postfix/submission/smtpd[282149]: warning: unknown[89.63.11.123]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 17 02:54:21 zoidberg postfix/submission/smtpd[282149]: warning: unknown[89.63.11.123]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇳🇱 rroethof	2026-06-17 00:54:18 (2 days ago)	(smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 89.63.11.123 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2026-06-17 02:50:33 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:51:44 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:52:32 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:53:29 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) 2026-06-17 02:54:14 plain authenticator failed for H=(CMS) [89.63.11.123]: 535 Incorrect authentication data ([email protected]) show less	Spoofing Brute-Force Bad Web Bot Web App Attack SSH
🇯🇵 kawanchu	2026-06-17 00:53:11 (2 days ago)	Brute-force attack via SMTP AUTH. Repeated login failures on mail server.	Brute-Force
🇳🇱 Mangelot Hosting	2026-06-17 00:53:04 (2 days ago)	(exim_plain_fail) srv102 Exim Plain Auth Fail 89.63.11.123 (DE/Germany/-): 3 in the last 3600 secs; ... show more (exim_plain_fail) srv102 Exim Plain Auth Fail 89.63.11.123 (DE/Germany/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-06-17 00:53:03 (2 days ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
Anonymous	2026-06-16 21:10:18 (2 days ago)	Jun 16 22:56:37 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 ... show more Jun 16 22:56:37 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 22:58:03 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 22:59:05 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 22:59:59 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 23:00:50 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 23:01:39 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 23:02:27 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 23:03:09 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 23:03:48 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 23:04:30 sonne dovecot: auth: passwd-file([email protected],89.63.11.123): unknown user Jun 16 23:05:09 sonne dovecot: auth: passwd-file([email protected],89.63 ... show less	Hacking Brute-Force Exploited Host
🇩🇪 XICTRON	2026-06-16 21:05:02 (2 days ago)	SMTP brute-force attempt detected by Fail2Ban in Postfix jail	Brute-Force

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.113

🇮🇩 103.117.57.106

🇨🇳 60.205.223.197

🇨🇭 37.120.137.204

🇦🇷 190.112.99.0

🇰🇭 175.100.11.47

🇨🇳 110.82.142.104

🇺🇸 66.132.186.191

🇺🇸 65.49.1.229

🇺🇸 44.208.193.63

🇫🇷 37.65.64.208

🇻🇳 14.178.3.126

🇷🇴 193.46.255.86

🇧🇷 177.10.203.106

🇫🇷 75.119.146.252

🇩🇪 51.75.64.35

🇨🇳 47.102.107.147

🇳🇱 45.148.10.147

🇺🇸 34.206.212.24

🇨🇦 31.57.82.238