JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.209.159.81

213.209.159.81 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 82%: ?

82%

ISP	Feo Prest SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208137
Domain Name	feoprest.life
Country	🇩🇪 Germany
City	Aachen, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.209.159.81

Whois 213.209.159.81

IP Abuse Reports for 213.209.159.81:

This IP address has been reported a total of 34 times from 19 distinct sources. 213.209.159.81 was first reported on May 15th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-26 13:23:34 (2 hours ago)	IP triggered Postscreen SMTP Filter	Email Spam
🇬🇧 iss-security-operations	2026-06-26 12:02:46 (3 hours ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
🇳🇿 TazzNZ	2026-06-26 09:41:38 (6 hours ago)	2026-06-26T21:39:41.470504+12:00 eragon sm-mta[2343156]: 65Q9da1F2343156: ruleset=check_rcpt, arg1=< ... show more 2026-06-26T21:39:41.470504+12:00 eragon sm-mta[2343156]: 65Q9da1F2343156: ruleset=check_rcpt, arg1=<[email protected]>, relay=[213.209.159.81], reject=550 5.7.1 <[email protected]>... Relaying denied. IP name lookup failed [213.209.159.81] 2026-06-26T21:39:49.119846+12:00 eragon sm-mta[2343189]: 65Q9dgTw2343189: [213.209.159.81] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA 2026-06-26T21:39:56.847307+12:00 eragon sm-mta[2343200]: 65Q9dnsK2343200: [213.209.159.81] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA ... show less	Brute-Force SSH
🇨🇭 Origon	2026-06-26 06:59:34 (9 hours ago)	recidive - IP: 213.209.159.81 - 2026-06-25 16:53:33,059 fail2ban.actions [1068196]: NOTICE [plesk-p ... show more recidive - IP: 213.209.159.81 - 2026-06-25 16:53:33,059 fail2ban.actions [1068196]: NOTICE [plesk-postfix] Ban 213.209.159.81 2026-06-25 23:15:48,553 fail2ban.actions [1068196]: NOTICE [plesk-postfix] Ban 213.209.159.81 2026-06-26 08:59:34,396 fail2ban.actions [1068196]: NOTICE [plesk-postfix] Ban 213.209.159.81 show less	Web App Attack
🇩🇪 filstal.org	2026-06-26 06:42:23 (9 hours ago)	SMTP brute-force detected by Fail2Ban	Email Spam Brute-Force
🇷🇴 iulianh	2026-06-26 03:20:04 (12 hours ago)	25,465,587	Brute-Force SSH
🇮🇩 sockominfo	2026-06-25 06:00:53 (1 day ago)	Postfix: Multiple SASL authentication failures.. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS ... show more Postfix: Multiple SASL authentication failures.. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1110 (Brute Force). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Exploited Host
🇮🇩 sockominfo	2026-06-25 05:00:09 (1 day ago)	Postfix: Multiple SASL authentication failures.. Threat Score: 5.4/10 (MEDIUM). Reported by Tangeran ... show more Postfix: Multiple SASL authentication failures.. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 bigscoots.com	2026-06-25 03:30:47 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 213.209.159.81 (DE/Germany/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 213.209.159.81 (DE/Germany/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-24 23:29:49 dovecot_login authenticator failed for H=(ZBg5wi9) [213.209.159.81]:50030: 535 Incorrect authentication data (set_id=rohwederg) 2026-06-24 23:29:56 dovecot_login authenticator failed for H=(9wCoGum) [213.209.159.81]:50097: 535 Incorrect authentication data (set_id=rohwederg) 2026-06-24 23:30:07 dovecot_login authenticator failed for H=(N280GNIZzr) [213.209.159.81]:50249: 535 Incorrect authentication data (set_id=rohwederg) 2026-06-24 23:30:25 dovecot_login authenticator failed for H=(j34HTJk6) [213.209.159.81]:50491: 535 Incorrect authentication data (set_id=rohwederg) 2026-06-24 23:30:43 dovecot_login authenticator failed for H=(BtP3H78) [213.209.159.81]:50904: 535 Incorrect authentication data (set_id=rohwederg) show less	Brute-Force SSH
🇫🇷 UM3	2026-06-25 02:50:37 (1 day ago)	Exim Auth Failed	Brute-Force
🇫🇮 notelseit	2026-06-24 23:07:46 (1 day ago)	2026-06-25T01:07:44.830845+02:00 mail postfix/smtpd[3449651]: NOQUEUE: reject: RCPT from unknown[213 ... show more 2026-06-25T01:07:44.830845+02:00 mail postfix/smtpd[3449651]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 450 4.7.25 Client host rejected: cannot find your hostname, [213.209.159.81]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<sWZLxXd> 2026-06-25T01:07:45.171100+02:00 mail postfix/smtpd[3449651]: disconnect from unknown[213.209.159.81] ehlo=2 starttls=1 auth=0/1 commands=3/4 2026-06-25T01:07:45.432656+02:00 mail postfix/smtpd[3449651]: disconnect from unknown[213.209.159.81] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force Email Spam
🇨🇿 unhfree.net	2026-06-12 17:43:46 (1 week ago)	Jun 12 19:43:45 canopus postfix/smtpd[1478610]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: ... show more Jun 12 19:43:45 canopus postfix/smtpd[1478610]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<r7k387VW2> Jun 12 19:43:45 canopus postfix/smtpd[1478610]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WEpeN9i> Jun 12 19:43:45 canopus postfix/smtpd[1478610]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<rd15cPwVLn> Jun 12 19:43:46 canopus postfix/smtpd[1478610]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<kinkkyprince@yahoo ... show less	Brute-Force Exploited Host
🇨🇦 craftxbox	2026-06-09 21:06:59 (2 weeks ago)	SMTP Relay Attempt. HELO/EHLO as 'npbzzb6ps'. Envelope from [email protected] to JoshuaBandileNoah@ ... show more SMTP Relay Attempt. HELO/EHLO as 'npbzzb6ps'. Envelope from [email protected] to [email protected] show less	Email Spam
🇫🇮 notelseit	2026-06-09 13:28:41 (2 weeks ago)	2026-06-09T15:27:16.654546+02:00 mail postfix/smtpd[934401]: NOQUEUE: reject: RCPT from unknown[213. ... show more 2026-06-09T15:27:16.654546+02:00 mail postfix/smtpd[934401]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 450 4.7.25 Client host rejected: cannot find your hostname, [213.209.159.81]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<I86eELSy> 2026-06-09T15:28:41.097102+02:00 mail postfix/smtpd[934401]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 450 4.7.25 Client host rejected: cannot find your hostname, [213.209.159.81]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<6RVBy6rV> 2026-06-09T15:28:41.439849+02:00 mail postfix/smtpd[934402]: NOQUEUE: reject: RCPT from unknown[213.209.159.81]: 450 4.7.25 Client host rejected: cannot find your hostname, [213.209.159.81]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<Rmbcu3> ... show less	Brute-Force Email Spam
🇦🇺 rubixstudios	2026-06-05 10:00:02 (3 weeks ago)	Suspicious SMTP activity detected. Type: Repeated dropped SMTP connections (6 hits).	Email Spam Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.197.14.60

🇳🇱 213.177.179.79

🇧🇷 177.30.64.65

🇨🇴 161.18.57.112

🇧🇯 137.255.147.56

🇨🇳 115.190.64.245

🇻🇳 103.48.192.48

🇬🇵 90.15.61.99

🇨🇦 85.217.149.16

🇺🇸 85.208.98.58

🇷🇴 84.232.135.133

🇬🇧 80.1.51.168

🇺🇸 52.21.227.35

🇨🇦 51.161.86.195

🇨🇳 1.24.16.133

🇪🇬 197.63.239.213

🇳🇱 195.178.110.30

🇬🇧 193.32.209.248

🇩🇪 167.94.146.36

🇨🇦 144.172.141.12