JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.132.104.201

212.132.104.201 was found in our database!

This IP was reported 202 times. Confidence of Abuse is 0%: ?

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip212-132-104-201.pbiaas.com
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.132.104.201

Whois 212.132.104.201

IP Abuse Reports for 212.132.104.201:

This IP address has been reported a total of 202 times from 131 distinct sources. 212.132.104.201 was first reported on September 22nd 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 igerman	2025-10-18 16:36:21 (10 months ago)	Sep 24 09:32:24 chungus sshd[2668703]: Invalid user deployer from 212.132.104.201 port 38824 Sep 24 ... show more Sep 24 09:32:24 chungus sshd[2668703]: Invalid user deployer from 212.132.104.201 port 38824 Sep 24 09:32:27 chungus sshd[2668835]: Invalid user a from 212.132.104.201 port 38890 Sep 24 09:32:30 chungus sshd[2668914]: Invalid user ftptest from 212.132.104.201 port 37718 show less	Brute-Force SSH
🇮🇳 Parth Maniar	2025-09-26 15:38:44 (11 months ago)	This IP address carried out 6 port scanning attempts on 25-09-2025. For more information or to repor ... show more This IP address carried out 6 port scanning attempts on 25-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2025-09-26 12:33:00 (11 months ago)	This IP address carried out 2 SSH credential attack (attempts) on 25-09-2025. For more information o ... show more This IP address carried out 2 SSH credential attack (attempts) on 25-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-26 00:14:07 (11 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/212.132.104.201	Brute-Force
🇦🇹 urnilxfgbez	2025-09-25 22:45:00 (11 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 rtbh.com.tr	2025-09-25 20:09:00 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-25 11:47:24 (11 months ago)	This IP address carried out 4 port scanning attempts on 24-09-2025. For more information or to repor ... show more This IP address carried out 4 port scanning attempts on 24-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2025-09-25 08:33:56 (11 months ago)	This IP address carried out 2 SSH credential attack (attempts) on 24-09-2025. For more information o ... show more This IP address carried out 2 SSH credential attack (attempts) on 24-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇳🇱 JCB	2025-09-25 06:57:00 (11 months ago)	212.132.104.201 - - [25/Sep/2025:05:40:11 +0300] "POST /cgi-bin/../../../../../../../../../../bin/sh ... show more 212.132.104.201 - - [25/Sep/2025:05:40:11 +0300] "POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" 212.132.104.201 - - [25/Sep/2025:05:40:11 +0300] "POST /cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" ... show less	Hacking Web App Attack
🇺🇸 MPL	2025-09-25 05:17:32 (11 months ago)	tcp/2222 (2 or more attempts)	Port Scan
🇺🇸 bigscoots.com	2025-09-25 05:05:14 (11 months ago)	212.132.104.201 (DE/Germany/ip212-132-104-201.pbiaas.com), 5 distributed sshd attacks on account [ro ... show more 212.132.104.201 (DE/Germany/ip212-132-104-201.pbiaas.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 25 00:05:01 21255 sshd[26604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.255.91.50 user=root Sep 25 00:03:47 21255 sshd[26431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.49.238.104 user=root Sep 25 00:03:48 21255 sshd[26431]: Failed password for root from 103.49.238.104 port 54990 ssh2 Sep 25 00:03:52 21255 sshd[26433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.132.104.201 user=root Sep 25 00:03:54 21255 sshd[26433]: Failed password for root from 212.132.104.201 port 35244 ssh2 IP Addresses Blocked: 185.255.91.50 (IR/Iran/static.50.91.255.185.clients.irandns.com) 103.49.238.104 (ID/Indonesia/ip103-49-238-104.cloudhost.web.id) show less	Brute-Force SSH
🇫🇮 kumiko	2025-09-25 04:59:42 (11 months ago)	[2025-09-25 07:59:42] Probing for dotfiles "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/. ... show more [2025-09-25 07:59:42] Probing for dotfiles "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 403 show less	Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2025-09-25 04:48:30 (11 months ago)	212.132.104.201 (DE/Germany/ip212-132-104-201.pbiaas.com), 5 distributed sshd attacks on account [ro ... show more 212.132.104.201 (DE/Germany/ip212-132-104-201.pbiaas.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 24 23:48:11 16726 sshd[16972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.59.50.202 user=root Sep 24 23:29:19 16726 sshd[15598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.132.104.201 user=root Sep 24 23:29:21 16726 sshd[15598]: Failed password for root from 212.132.104.201 port 53722 ssh2 Sep 24 23:29:22 16726 sshd[15600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.132.104.201 user=root Sep 24 23:29:24 16726 sshd[15600]: Failed password for root from 212.132.104.201 port 51026 ssh2 IP Addresses Blocked: 123.59.50.202 (CN/China/-) show less	Brute-Force SSH
🇫🇮 PrivateGER	2025-09-25 04:12:13 (11 months ago)	2025-09-25T06:12:09.933938+02:00 coffeelake sshd[2820452]: Invalid user prueba from 212.132.104.201 ... show more 2025-09-25T06:12:09.933938+02:00 coffeelake sshd[2820452]: Invalid user prueba from 212.132.104.201 port 53432 2025-09-25T06:12:11.010583+02:00 coffeelake sshd[2820524]: Invalid user orangepi from 212.132.104.201 port 36196 2025-09-25T06:12:12.406962+02:00 coffeelake sshd[2820652]: Invalid user oracle from 212.132.104.201 port 36202 2025-09-25T06:12:12.772151+02:00 coffeelake sshd[2820686]: Invalid user ollama from 212.132.104.201 port 36212 2025-09-25T06:12:13.194628+02:00 coffeelake sshd[2820697]: Invalid user nick from 212.132.104.201 port 36216 ... show less	Brute-Force SSH
🇺🇸 R-bear	2025-09-25 04:07:35 (11 months ago)	Sep 25 04:06:42 synth sshd[293993]: Invalid user torrent from 212.132.104.201 port 60546 Sep 25 04:0 ... show more Sep 25 04:06:42 synth sshd[293993]: Invalid user torrent from 212.132.104.201 port 60546 Sep 25 04:06:47 synth sshd[294017]: Invalid user teste from 212.132.104.201 port 60580 Sep 25 04:06:50 synth sshd[294025]: Invalid user sysadmin from 212.132.104.201 port 60612 Sep 25 04:06:55 synth sshd[294052]: Invalid user servidor from 212.132.104.201 port 55428 Sep 25 04:07:04 synth sshd[294089]: Invalid user postgres from 212.132.104.201 port 51404 Sep 25 04:07:08 synth sshd[294099]: Invalid user oracle from 212.132.104.201 port 51432 Sep 25 04:07:19 synth sshd[294150]: Invalid user matt from 212.132.104.201 port 51068 Sep 25 04:07:24 synth sshd[294177]: Invalid user ke from 212.132.104.201 port 41834 Sep 25 04:07:30 synth sshd[294185]: Invalid user install from 212.132.104.201 port 41890 Sep 25 04:07:34 synth sshd[294213]: Invalid user hadoop from 212.132.104.201 port 44214 ... show less	Brute-Force SSH

Showing 1 to 15 of 202 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.101.212.176

🇺🇸 103.118.6.18

🇺🇸 91.124.253.188

🇲🇽 187.161.117.102

🇺🇸 184.105.139.67

🇮🇩 180.241.53.18

🇻🇳 171.248.163.168

🇺🇸 158.94.211.198

🇬🇧 136.0.202.181

🇵🇰 124.29.230.47

🇨🇳 116.179.37.248

🇺🇸 98.190.40.102

🇭🇰 46.247.61.14

🇩🇪 45.135.193.193

🇨🇳 14.155.241.147

🇭🇰 8.218.64.188

🇹🇭 1.20.150.54

🇧🇷 201.32.225.152

🇦🇷 168.196.35.55

🇨🇳 124.31.105.124