JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.169.249.214

81.169.249.214 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 68%: ?

68%

ISP	Strato Rechenzentrum, Berlin
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6724
Hostname(s)	mailout.desos.net
Domain Name	strato.de
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.169.249.214

Whois 81.169.249.214

IP Abuse Reports for 81.169.249.214:

This IP address has been reported a total of 20 times from 17 distinct sources. 81.169.249.214 was first reported on June 18th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Godert Jan van Manen	2026-06-18 11:44:21 (2 weeks ago)	Jun 18 13:36:00 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<AYaSlIVU+OR ... show more Jun 18 13:36:00 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<AYaSlIVU+ORRqfnW>): unknown user Jun 18 13:36:02 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=178.162.131.122, session=<AYaSlIVU+ORRqfnW> Jun 18 13:41:11 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<gl0hp4VUgopRqfnW>): unknown user Jun 18 13:41:13 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=178.162.131.122, session=<gl0hp4VUgopRqfnW> Jun 18 13:44:21 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<7G9tsoVUnqNRqfnW>): unknown user show less	Brute-Force
🇩🇪 jasperedv.de	2026-06-18 11:19:01 (2 weeks ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇳🇱 stom	2026-06-18 10:57:41 (2 weeks ago)	2026-06-18T10:56:27.431837 socky.stom66.co.uk auth[1870161]: pam_unix(dovecot:auth): authentication ... show more 2026-06-18T10:56:27.431837 socky.stom66.co.uk auth[1870161]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=81.169.249.214 ... show less	Brute-Force Email Spam
🇩🇪 chris_yooo	2026-06-18 10:49:04 (2 weeks ago)	Jun 18 12:43:41 plesk dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts ... show more Jun 18 12:43:41 plesk dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=144.76.2.152, session=<CzBc2YRUAulRqfnW> Jun 18 12:49:03 plesk dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=144.76.2.152, session=<k4SN7IRUsJtRqfnW> ... show less	Spoofing Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 10:47:29 (2 weeks ago)	Jun 18 12:40:35 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<yeJizo ... show more Jun 18 12:40:35 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<yeJizoRUDJxRqfnW>): unknown user Jun 18 12:40:37 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=178.162.131.122, session=<yeJizoRUDJxRqfnW> Jun 18 12:40:46 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<i1bWzoRUnK1RqfnW>): unknown user Jun 18 12:40:48 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=178.162.131.122, session=<i1bWzoRUnK1RqfnW> Jun 18 12:47:29 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<risQ54RUIo5RqfnW>): unknown user show less	Brute-Force
Anonymous	2026-06-18 10:45:25 (2 weeks ago)	(PERMBLOCK) 81.169.249.214 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Po ... show more (PERMBLOCK) 81.169.249.214 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force
🇮🇹 abuseiphack	2026-06-18 10:38:41 (2 weeks ago)	Automatic report for brute force attack	Brute-Force
🇬🇧 Mendip_Defender	2026-06-18 10:24:29 (2 weeks ago)	Jun 18 11:16:18 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 a ... show more Jun 18 11:16:18 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=188.246.206.60, session=<tbxod4RU1NJRqfnW> Jun 18 11:24:23 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=188.246.206.60, session=<ugNalIRUkItRqfnW> ... show less	Brute-Force
🇩🇪 dbmwebdesign	2026-06-18 10:20:43 (2 weeks ago)	POP or IMAP failed login attempts detected by Fail2Ban in plesk-dovecot jail	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 10:12:53 (2 weeks ago)	Jun 18 12:03:37 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<cnEzSoRUA ... show more Jun 18 12:03:37 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<cnEzSoRUAoFRqfnW>): unknown user Jun 18 12:03:39 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=178.162.131.122, session=<cnEzSoRUAoFRqfnW> Jun 18 12:11:23 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<e6L+ZYRU+uNRqfnW>): unknown user Jun 18 12:11:25 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=178.162.131.122, session=<e6L+ZYRU+uNRqfnW> Jun 18 12:12:52 odin dovecot: auth-worker(20585): sql([email protected],81.169.249.214,<u2FIa4RU1LBRqfnW>): unknown user show less	Brute-Force
Anonymous	2026-06-18 10:05:28 (2 weeks ago)	POP or IMAP failed login attempts detected by Fail2Ban	Brute-Force
🇧🇷 dominioz	2026-06-18 10:04:51 (2 weeks ago)	81.169.249.214 [2B94] 05:48:57 Authentication [POP3] - Result=0, [email protected], M ... show more 81.169.249.214 [2B94] 05:48:57 Authentication [POP3] - Result=0, [email protected], Method=0 81.169.249.214 [2464] 06:59:03 Authentication [POP3] - Result=0, [email protected], Method=0 81.169.249.214 [2B94] 07:04:48 Authentication [POP3] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇫🇷 [email protected]	2026-06-18 08:41:43 (2 weeks ago)	Jun 18 10:31:42 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<i ... show more Jun 18 10:31:42 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=141.94.194.45, session=<UBJXAYNU5thRqfnW> Jun 18 10:33:49 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=141.94.194.45, session=<KX3tCINUdOtRqfnW> Jun 18 10:38:25 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=141.94.194.45, session=<kHVoGYNUGMdRqfnW> Jun 18 10:41:06 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=141.94.194.45, session=<pOv6IoNUTLRRqfnW> Jun 18 10:41:43 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=81.169.249.214, lip=141.94.194.45, session= ... show less	Brute-Force
🇨🇦 zXero	2026-06-18 08:32:21 (2 weeks ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
🇹🇭 thaizone.com	2026-06-18 08:22:47 (2 weeks ago)	Mail credential brute-force attack (D1) #1	Email Spam Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 166.239.184.117

🇻🇳 103.75.182.108

🇬🇧 2.57.17.207

🇰🇷 220.127.148.6

🇺🇸 162.216.149.129

🇮🇹 151.0.160.69

🇬🇧 89.37.172.147

🇫🇷 85.217.140.2

🇷🇺 82.204.185.138

🇸🇬 45.78.202.217

🇺🇸 12.195.63.18

🇬🇧 5.252.83.80

🇩🇪 2a0b:f4c2:2::35

🇹🇼 211.20.14.156

🇺🇸 147.185.132.112

🇺🇦 141.105.138.236

🇸🇬 101.47.15.26

🇳🇱 91.92.42.64

🇸🇪 31.59.160.12

🇺🇸 20.65.192.160