JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.12.145.66

49.12.145.66 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.66.145.12.49.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.12.145.66

Whois 49.12.145.66

IP Abuse Reports for 49.12.145.66:

This IP address has been reported a total of 116 times from 105 distinct sources. 49.12.145.66 was first reported on June 7th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rsa	2026-06-09 18:06:00 (1 hour ago)	brute forcing email accounts	Email Spam Brute-Force
🇳🇱 e.fierstra	2026-06-09 17:45:03 (1 hour ago)	Failed IMAP logins over 24h	Brute-Force
🇫🇷 dwmp	2026-06-09 17:19:27 (2 hours ago)	Jun 9 18:50:57 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 9 18:50:57 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.12.145.66, lip=75.119.153.41, TLS, session=<JV9B7tRT1IIxDJFC> Jun 9 19:05:11 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.12.145.66, lip=75.119.153.41, TLS, session=<K9ggIdVTSrAxDJFC> Jun 9 19:19:26 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=49.12.145.66, lip=75.119.153.41, TLS, session=<yfoYVNVTYOExDJFC> ... show less	Brute-Force
Anonymous	2026-06-09 17:13:03 (2 hours ago)	Jun 09 12:44:33 imap-login: Info: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<sales@s ... show more Jun 09 12:44:33 imap-login: Info: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=49.12.145.66, lip=162.212.158.192, TLS, session=\<+61h19RTBt8xDJFC\> Jun 09 12:58:48 imap-login: Info: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=49.12.145.66, lip=162.212.158.192, TLS, session=\<Z7ZNCtVTXqUxDJFC\> Jun 09 13:13:01 imap-login: Info: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=49.12.145.66, lip=162.212.158.192, TLS, session=\<stQvPdVT+t8xDJFC\> ... show less	Brute-Force
🇳🇴 Harald	2026-06-09 11:14:53 (8 hours ago)	Jun 9 12:55:16 login dovecot: pop3-login: Disconnected (tried to use disallowed plaintext auth): us ... show more Jun 9 12:55:16 login dovecot: pop3-login: Disconnected (tried to use disallowed plaintext auth): user=<[email protected]>, rip=49.12.145.66, lip=91.90.45.154, session=<2OBX9s9THJQxDJFC> Jun 9 13:05:05 login dovecot: pop3-login: Disconnected (tried to use disallowed plaintext auth): user=<[email protected]>, rip=49.12.145.66, lip=91.90.45.154, session=<ok5yGdBTTM4xDJFC> Jun 9 13:14:53 login dovecot: pop3-login: Disconnected (tried to use disallowed plaintext auth): user=<[email protected]>, rip=49.12.145.66, lip=91.90.45.154, session=<W0N7PNBTmMkxDJFC> ... show less	Brute-Force
🇺🇸 PKThai	2026-06-09 11:11:37 (8 hours ago)	Attempted brute-force SASL access to mail server - Repeat offender 49.12.145.66 banned at least 4 ti ... show more Attempted brute-force SASL access to mail server - Repeat offender 49.12.145.66 banned at least 4 times in the last 7 days show less	Port Scan Hacking Brute-Force
🇸🇬 pusathosting.com	2026-06-09 11:05:07 (8 hours ago)	imap1 failed login	Brute-Force
🇩🇪 onlyops.app	2026-06-09 11:00:05 (8 hours ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇸🇰 Schomburg	2026-06-09 10:59:22 (8 hours ago)	Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Report ... show more Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: nPP28kx30rq4KUExDwxzbkRDrie3pa3D show less	Port Scan Hacking Brute-Force
🇫🇷 adembaysal	2026-06-09 10:59:04 (8 hours ago)	Rule : POP 06/09/26 13:58:33 POPS 1460 49.12.145.66 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 06/09/26 13:58:33 POPS 1460 49.12.145.66 OK Welcome to MailEnable POP3 Server 39 0 06/09/26 13:58:33 POPS 1460 49.12.145.66 USER USER [email protected] OK 5 31 06/09/26 13:58:33 POPS 1460 49.12.145.66 PASS PASS * -ERR Unable to log on 23 21 show less	Port Scan Spoofing
🇺🇸 bigwavedave	2026-06-09 10:58:51 (8 hours ago)	IMAP or POP3	Brute-Force
🇬🇧 WebNiraj	2026-06-09 10:56:29 (8 hours ago)	(pop3d) Failed POP3 login from 49.12.145.66 (DE/Germany/static.66.145.12.49.clients.your-server.de): ... show more (pop3d) Failed POP3 login from 49.12.145.66 (DE/Germany/static.66.145.12.49.clients.your-server.de): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇺🇸 AWSGIEMSAN7	2026-06-09 10:49:36 (8 hours ago)	Blocked by Fail2ban (Jail: dovecot).	Brute-Force
🇺🇸 m4xx	2026-06-09 10:40:50 (8 hours ago)	2026-06-09T10:23:42.196541+00:00 blinken.mattjan.us dovecot[362311]: pop3-login: Disconnected: Conne ... show more 2026-06-09T10:23:42.196541+00:00 blinken.mattjan.us dovecot[362311]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=49.12.145.66, lip=129.121.87.72, session=<TtBVhc9THO0xDJFC> 2026-06-09T10:32:07.115876+00:00 blinken.mattjan.us dovecot[362311]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=49.12.145.66, lip=129.121.87.72, session=<nD5uo89TcIYxDJFC> 2026-06-09T10:40:50.266564+00:00 blinken.mattjan.us dovecot[362311]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=49.12.145.66, lip=129.121.87.72, session=<BiOUws9TYKUxDJFC> ... show less	Brute-Force Email Spam
🇷🇺 anatoliy.males	2026-06-09 10:40:04 (8 hours ago)	Jun 9 17:22:57 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts i ... show more Jun 9 17:22:57 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=49.12.145.66, lip=192.168.100.29, session=<RujDgs9TmsIxDJFC> Jun 9 17:31:19 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=49.12.145.66, lip=192.168.100.29, session=<6rO0oM9Tfp0xDJFC> Jun 9 17:40:02 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=49.12.145.66, lip=192.168.100.29, session=<qZ3Yv89THukxDJFC> ... show less	Brute-Force Email Spam

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.161.235.168

🇫🇷 176.139.18.192

🇺🇸 172.98.33.35

🇺🇸 149.13.15.54

🇺🇸 147.185.132.84

🇫🇷 85.217.140.25

🇸🇦 82.167.169.167

🇨🇳 61.140.247.12

🇨🇳 39.164.94.190

🇺🇸 154.92.23.249

🇨🇳 120.230.111.209

🇺🇸 98.83.61.175

🇫🇷 93.21.125.240

🇫🇷 91.196.152.36

🇷🇺 81.177.101.45

🇮🇩 69.5.7.218

🇳🇱 51.158.205.203

🇨🇱 45.231.50.88

🇺🇸 43.153.12.68

🇺🇸 34.74.158.47