JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.227.104.216

212.227.104.216 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 93%: ?

93%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip212-227-104-216.pbiaas.com
Domain Name	ionos.com
Country	🇪🇸 Spain
City	Logrono, La Rioja

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.227.104.216

Whois 212.227.104.216

IP Abuse Reports for 212.227.104.216:

This IP address has been reported a total of 30 times from 26 distinct sources. 212.227.104.216 was first reported on July 21st 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 xveil	2026-08-20 04:18:35 (6 days ago)	2026-08-20T11:18:33.309632 mail-honeypot postfix/submission/smtpd[8636]: warning: ip212-227-104-216. ... show more 2026-08-20T11:18:33.309632 mail-honeypot postfix/submission/smtpd[8636]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 xveil	2026-08-20 00:24:20 (1 week ago)	2026-08-20T07:24:17.354903 mail-honeypot postfix/submission/smtpd[11671]: warning: ip212-227-104-216 ... show more 2026-08-20T07:24:17.354903 mail-honeypot postfix/submission/smtpd[11671]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 xveil	2026-08-19 22:26:28 (1 week ago)	2026-08-20T05:26:26.705119 mail-honeypot postfix/submission/smtpd[10225]: warning: ip212-227-104-216 ... show more 2026-08-20T05:26:26.705119 mail-honeypot postfix/submission/smtpd[10225]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇭🇺 kranem	2026-08-19 15:00:15 (1 week ago)	Triggered Cloudflare WAF from ES. Action taken: BLOCK ASN: 8560 (IONOS SE) Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF from ES. Action taken: BLOCK ASN: 8560 (IONOS SE) Protocol: HTTP/1.1 (GET method) Endpoint: /login Timestamp: 2026-08-19T13:25:34Z User-Agent: python-requests/2.32.4 show less	Bad Web Bot
🇩🇪 John Chrys.	2026-08-18 21:26:10 (1 week ago)	Aug 19 00:26:02 diego postfix/smtpd[915939]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: ... show more Aug 19 00:26:02 diego postfix/smtpd[915939]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL PLAIN authentication failed: authentication failure Aug 19 00:26:04 diego postfix/smtpd[915939]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL LOGIN authentication failed: authentication failure Aug 19 00:26:10 diego postfix/smtps/smtpd[916000]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇩🇪 london2038.com	2026-08-16 20:36:34 (1 week ago)	Connection atttempts against closed TCP ports Aug 16 22:36:30 BLOCK SRC=212.227.104.216 LEN=52 TOS=0 ... show more Connection atttempts against closed TCP ports Aug 16 22:36:30 BLOCK SRC=212.227.104.216 LEN=52 TOS=0x02 PREC=0x00 TTL=118 ID=31035 DF PROTO=TCP SPT=58512 DPT=2087 WINDOW=64240 RES=0x00 CWR ECE SYN Aug 16 22:36:31 BLOCK SRC=212.227.104.216 LEN=52 TOS=0x02 PREC=0x00 TTL=118 ID=31036 DF PROTO=TCP SPT=58512 DPT=2087 WINDOW=64240 RES=0x00 CWR ECE SYN Aug 16 22:36:33 BLOCK SRC=212.227.104.216 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=31037 DF PROTO=TCP SPT=58512 DPT=2087 WINDOW=64240 RES=0x00 SYN show less	Port Scan
🇮🇹 Progetto1	2026-08-16 05:26:02 (1 week ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
Anonymous	2026-08-16 02:58:21 (1 week ago)	Authentication failure	Brute-Force
🇿🇦 maximonline.co.za	2026-08-15 17:21:43 (1 week ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇵🇾 SecOpsSL	2026-08-15 15:55:30 (1 week ago)	Aug 15 12:55:23 mail postfix/submission/smtpd\[10283\]: warning: ip212-227-104-216.pbiaas.com\[212.2 ... show more Aug 15 12:55:23 mail postfix/submission/smtpd\[10283\]: warning: ip212-227-104-216.pbiaas.com\[212.227.104.216\]: SASL PLAIN authentication failed: authentication failure Aug 15 12:55:24 mail postfix/submission/smtpd\[10283\]: warning: ip212-227-104-216.pbiaas.com\[212.227.104.216\]: SASL LOGIN authentication failed: authentication failure Aug 15 12:55:29 mail postfix/smtps/smtpd\[1307\]: warning: ip212-227-104-216.pbiaas.com\[212.227.104.216\]: SASL PLAIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇳🇱 celltek	2026-08-14 11:30:02 (1 week ago)	SMTP brute-force detected	Email Spam Brute-Force
🇩🇪 NewGastroline	2026-08-14 10:53:05 (1 week ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇮🇱 Dolphi	2026-08-14 10:34:40 (1 week ago)	Mail server brute force	Email Spam Brute-Force
Anonymous	2026-08-14 05:00:25 (1 week ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇫🇮 notelseit	2026-08-12 20:42:51 (2 weeks ago)	2026-08-12T22:42:37.481487+02:00 mail postfix/submission/smtpd[3698865]: warning: ip212-227-104-216. ... show more 2026-08-12T22:42:37.481487+02:00 mail postfix/submission/smtpd[3698865]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-08-12T22:42:43.123820+02:00 mail postfix/submission/smtpd[3698865]: warning: ip212-227-104-216.pbiaas.com[212.227.104.216]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-08-12T22:42:50.557169+02:00 mail postfix/submission/smtpd[3698865]: disconnect from ip212-227-104-216.pbiaas.com[212.227.104.216] ehlo=2 starttls=1 auth=0/2 commands=3/5 ... show less	Brute-Force Email Spam

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 216.155.93.75

🇺🇸 205.210.31.41

🇫🇮 147.185.133.83

🇺🇿 95.214.211.242

🇺🇸 64.23.153.146

🇮🇩 34.128.83.78

🇵🇾 181.78.27.232

🇨🇳 180.212.92.50

🇫🇷 172.68.151.11

🇪🇸 154.14.139.82

🇫🇮 147.185.133.206

🇫🇷 141.101.97.25

🇳🇱 91.92.42.168

🇷🇴 90.84.231.142

🇷🇺 80.95.43.191

🇩🇪 69.5.169.214

🇳🇱 45.198.224.26

🇺🇸 20.40.250.19

🇨🇴 8.243.71.78

🇺🇸 2400:cb00:119:1000:8403:60c5:2cf3:4018