JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.132.92.93

212.132.92.93 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip212-132-92-93.pbiaas.com
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.132.92.93

Whois 212.132.92.93

IP Abuse Reports for 212.132.92.93:

This IP address has been reported a total of 56 times from 38 distinct sources. 212.132.92.93 was first reported on October 2nd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-19 20:58:45 (3 days ago)	Authentication failure	Brute-Force
🇫🇮 notelseit	2026-10-19 11:04:57 (3 days ago)	2026-10-19T13:04:41.446147+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth ... show more 2026-10-19T13:04:41.446147+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, TLS handshaking: Connection closed, session=<fPEQey9eNt3UhFxd> 2026-10-19T13:04:41.452323+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, TLS handshaking: Connection closed, session=<pwoRey9eSt3UhFxd> 2026-10-19T13:04:41.452612+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, session=<1AsRey9eNN3UhFxd> 2026-10-19T13:04:41.460293+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, session=<yCkRey9eSN3UhFxd> 2026-10-19T13:04:56.463324+02:00 mail dovecot: auth-worker(3220131): conn unix:auth-worker (pid=3199543,uid=110): auth-worker<10596>: sql(supporto@notel ... show less	Brute-Force Email Spam
🇮🇩 aaKenshin	2026-10-17 16:15:50 (5 days ago)	Suspicious activity detected from IP 212.132.92.93 based on mailserver logs. Sample logs: 2026-10-18 ... show more Suspicious activity detected from IP 212.132.92.93 based on mailserver logs. Sample logs: 2026-10-18 00:15:45,858 INFO [ImapServer-261] [ip=172.16.0.182;cid=228;oip=212.132.92.93;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO) 2026-10-18 00:15:45,951 INFO [ImapServer-261] [ip=172.16.0.182;oip=212.132.92.93;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=228;] imap - authentication failed for [] (LDAP error: - unable to ldap authenticate: invalid credentials) 2026-10-18 00:15:45,951 INFO [ImapServer-261] [ip=172.16.0.182;oip=212.132.92.93;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=228;] account - Error occurred during authentication: authentication failed for []. Reason: LDAP error: - unable to ldap authenticate: invalid credentials. 2026-10-18 00:15:45,951 INFO [ImapServer-261] [ip=172.16.0.182;oip=212.132.92.93;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=228;] imap - show less	Brute-Force
Anonymous	2026-10-17 16:08:43 (5 days ago)	Authentication failure	Brute-Force
🇩🇪 tall1oN	2026-10-17 15:38:56 (5 days ago)	2026-10-17T17:38:52.459206+02:00 kenny dovecot: auth-worker(2883193): conn unix:auth-worker (pid=264 ... show more 2026-10-17T17:38:52.459206+02:00 kenny dovecot: auth-worker(2883193): conn unix:auth-worker (pid=2640525,uid=107): auth-worker<1>: sql([email protected],212.132.92.93,<IjLwEwteP93UhFxd>): unknown user 2026-10-17T17:38:54.753124+02:00 kenny dovecot: auth-worker(2883193): conn unix:auth-worker (pid=2640525,uid=107): auth-worker<2>: pam([email protected],212.132.92.93,<IjLwEwteP93UhFxd>): pam_authenticate() failed: Authentication failure (Password mismatch?) 2026-10-17T17:38:56.261377+02:00 kenny dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=212.132.92.93, lip=195.201.95.142, TLS, TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) ... show less	Brute-Force Email Spam
🇫🇮 notelseit	2026-10-17 14:21:55 (5 days ago)	2026-10-17T16:21:39.620129+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth ... show more 2026-10-17T16:21:39.620129+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, TLS handshaking: Connection closed, session=<4TfN/wleQPnUhFxd> 2026-10-17T16:21:39.624757+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, TLS handshaking: Connection closed, session=<v0rN/wleSvnUhFxd> 2026-10-17T16:21:39.629827+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, session=<o17N/wleQvnUhFxd> 2026-10-17T16:21:39.635076+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, session=<JHPN/wleUPnUhFxd> 2026-10-17T16:21:54.779338+02:00 mail dovecot: auth-worker(2888864): conn unix:auth-worker (pid=2700926,uid=110): auth-worker<9516>: sql(vendite@notelse ... show less	Brute-Force Email Spam
🇫🇷 basing	2026-10-17 11:07:03 (5 days ago)	2026-10-17 12:07:03 idz SASL PLAIN auth failed: rhost=212.132.92.93...	Brute-Force
🇩🇪 IVski.com	2026-10-17 00:42:03 (6 days ago)	IVski WAF \| Sensitive file probe detected - looking for config, backups or credentials	Hacking Brute-Force Web App Attack
🇩🇪 Jochen Pretli	2026-10-16 17:56:40 (6 days ago)	connection to honeypot	Email Spam Port Scan
🇮🇩 sockominfo	2026-10-16 15:00:53 (6 days ago)	Email: Login failures from Bad Reputation IP: 212.132.92.93. Threat Score: 6.5/10 (HIGH). Confidence ... show more Email: Login failures from Bad Reputation IP: 212.132.92.93. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇫🇮 notelseit	2026-10-16 14:00:35 (6 days ago)	2026-10-16T16:00:19.611408+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth ... show more 2026-10-16T16:00:19.611408+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, TLS handshaking: Connection closed, session=<qXWqlfVdvN3UhFxd> 2026-10-16T16:00:19.625664+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, session=<w62qlfVdvd3UhFxd> 2026-10-16T16:00:20.637891+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, TLS handshaking: Connection closed, session=<fB+6lfVdrd7UhFxd> 2026-10-16T16:00:20.652162+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=212.132.92.93, lip=65.21.131.50, session=<C1i6lfVds97UhFxd> 2026-10-16T16:00:34.633028+02:00 mail dovecot: auth-worker(2800750): conn unix:auth-worker (pid=2700926,uid=110): auth-worker<207>: sql([email protected] ... show less	Brute-Force Email Spam
🇫🇷 basing	2026-10-16 09:27:11 (6 days ago)	2026-10-16 10:27:11 pzb SASL PLAIN auth failed: rhost=212.132.92.93...	Brute-Force
Anonymous	2026-10-13 16:30:36 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇫🇷 GabrielJST	2026-10-13 07:22:15 (1 week ago)	Port Scan detected from 212.132.92.93 (DE/Germany/ip212-132-92-93.pbiaas.com).	Port Scan
🇩🇪 jasperedv.de	2026-10-12 19:40:40 (1 week ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.217

🇺🇸 147.185.132.13

🇮🇩 43.133.131.35

🇰🇷 210.91.212.146

🇺🇸 185.180.141.88

🇺🇸 185.180.141.85

🇨🇱 179.60.88.153

🇳🇱 146.19.248.35

🇺🇸 64.205.112.119

🇬🇧 64.205.72.183

🇪🇨 38.255.23.6

🇯🇴 37.202.67.29

🇯🇵 34.84.106.238

🇳🇱 204.76.203.4

🇹🇼 198.235.24.38

🇮🇩 192.232.48.13

🇩🇪 165.22.95.179

🇯🇵 164.52.24.182

🇺🇸 162.215.223.91

🇮🇳 139.59.28.253