JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.89.104.11

152.89.104.11 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 42%: ?

42%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202606364269466440.ultrasrv.de
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.89.104.11

Whois 152.89.104.11

IP Abuse Reports for 152.89.104.11:

This IP address has been reported a total of 18 times from 12 distinct sources. 152.89.104.11 was first reported on July 23rd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 EGP Abuse Dept	2026-08-29 06:27:05 (3 days ago)	Port connection indicating compromised host	Port Scan Hacking Exploited Host
🇷🇺 russian-kurort.ru	2026-08-24 12:00:43 (1 week ago)	DDOS	DDoS Attack Hacking
🇸🇬 naveeddaros	2026-08-23 19:26:22 (1 week ago)	HTTP Flood DDoS attack detected	Brute-Force Bad Web Bot
🇷🇸 Smel	2026-08-15 00:04:12 (2 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇮🇩 sockominfo	2026-08-14 03:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-14 02:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-14 01:00:09 (2 weeks ago)	Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-04 00:00:52 (4 weeks ago)	Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-03 23:00:09 (4 weeks ago)	Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 5.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 152.89.104.11. Threat Score: 5.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇮 BungeeHost	2026-08-03 14:09:07 (4 weeks ago)	Minecraft botnet join-flood attack 2026-08-03 16:58-17:13 MSK: rotating random nicknames (6sbl0urmo5 ... show more Minecraft botnet join-flood attack 2026-08-03 16:58-17:13 MSK: rotating random nicknames (6sbl0urmo5u), automated account registration, captcha-solving bot client. Part of coordinated ~520-connection bot attack on game server (join flood / mass account creation). show less	DDoS Attack Hacking Brute-Force Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-08-01 21:59:18 (4 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-31. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-07-31 21:59:14 (1 month ago)	Auto-ban: >3000 req/min op 2026-07-31	Web App Attack SSH Hacking
🇸🇪 KIDOS	2026-07-29 00:22:49 (1 month ago)	malicious activity	Web App Attack
Anonymous	2026-07-28 05:00:20 (1 month ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇺🇸 nowyouknow	2026-07-28 03:16:00 (1 month ago)	(From [email protected]) Hi there, I'm Amanda with Trusted Virtual Team. I’m reach ... show more (From [email protected]) Hi there, I'm Amanda with Trusted Virtual Team. I’m reaching out because we offer MAVIS (My Advanced Virtual Intelligent System), that easily replaces a 20-man team. We overtake and handle all of your marketing, administrative tasks, graphic design, video animations, accounting, and even all your prospecting with our system. This isn't a software you have to learn, and all you have to do is delegate to our Real Human MAVIS Specialist to get everything done! Reply YES to schedule a Zoom meeting or STOP to unsubscribe. show less	Phishing Web Spam

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.68

🇳🇱 213.177.179.165

🇸🇻 190.99.62.11

🇫🇷 185.194.219.248

🇲🇾 165.154.147.69

🇫🇮 147.185.133.101

🇩🇪 69.5.169.191

🇺🇸 66.132.195.111

🇭🇰 43.161.234.148

🇮🇩 36.94.9.51

🇺🇸 34.67.93.218

🇨🇦 20.104.49.130

🇨🇦 4.206.147.156

🇺🇸 2607:f8b0:4002:c11::128

🇨🇳 221.195.114.14

🇮🇳 206.1.53.38

🇫🇮 193.32.204.199

🇵🇾 186.17.217.163

🇨🇳 171.104.143.176

🇺🇸 162.216.149.163