JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

85.204.27.246

Neutral Activity

Abuse confidence score ?

0% Low Risk

82 reports

62 reporters · latest 2 months ago

ISP	HITME.PL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50840
Domain Name	hitme.pl
Country	🇵🇱 Poland
City	Gdansk, Pomerania

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

85.204.27.246 has been reported 82 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 85.204.27.246

Export CSV

This IP address has been reported a total of 82 times from 62 distinct sources. 85.204.27.246 was first reported on July 17th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 eebh.hu	2026-07-21 21:50:48 (2 months ago)	Jul 21 23:30:52 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<sa ... show more Jul 21 23:30:52 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=194.36.88.23, TLS, session=<tQmfvCVXytpVzBv2> Jul 21 23:50:46 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=194.36.88.23, TLS, session=<lKvNAyZXDKVVzBv2> ... show less	Brute-Force
🇩🇪 John Chrys.	2026-07-21 21:24:14 (2 months ago)	Jul 21 23:44:37 loki dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts i ... show more Jul 21 23:44:37 loki dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=139.162.162.70, TLS, session=<fyQfFyVXCtZVzBv2> Jul 22 00:04:24 loki dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=139.162.162.70, TLS, session=<X4HfXSVXjp5VzBv2> Jul 22 00:24:13 loki dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=139.162.162.70, TLS, session=<y6u5pCVXgORVzBv2> ... show less	Brute-Force Email Spam
🇩🇪 kutswa.com	2026-07-21 21:14:24 (2 months ago)	$f2bV_matches	Brute-Force
🇩🇪 eebh.hu	2026-07-21 21:11:04 (2 months ago)	Jul 21 22:31:27 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<co ... show more Jul 21 22:31:27 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=194.36.88.23, TLS, session=<NQ4m6CRXNJZVzBv2> Jul 21 22:51:15 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=194.36.88.23, TLS, session=<jeD1LiVXns9VzBv2> Jul 21 23:11:03 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.204.27.246, lip=194.36.88.23, TLS, session=<iRXBdSVXHJRVzBv2> ... show less	Brute-Force
🇺🇸 bigwavedave	2026-07-21 21:09:47 (2 months ago)	IMAP or POP3	Brute-Force
🇩🇪 ecs.ge	2026-07-21 21:06:19 (2 months ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇩🇪 iNetWorker	2026-07-21 20:49:04 (2 months ago)	pop/imap	Brute-Force
🇨🇿 sajmon0011	2026-07-21 20:47:24 (2 months ago)	2026-07-21T22:47:24.316032 server1.sajmon0011.cz auth[2105816]: pam_unix(dovecot:auth): authenticati ... show more 2026-07-21T22:47:24.316032 server1.sajmon0011.cz auth[2105816]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=contact rhost=85.204.27.246 ... show less	Brute-Force
🇨🇦 zXero	2026-07-21 20:31:58 (2 months ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
Anonymous	2026-07-21 19:39:51 (2 months ago)	2026-07-21T21:04:34.051146+02:00 postfix/smtps/smtpd[2858388]: warning: unknown[85.204.27.246]: SAS ... show more 2026-07-21T21:04:34.051146+02:00 postfix/smtps/smtpd[2858388]: warning: unknown[85.204.27.246]: SASL PLAIN authentication failed: (reason unavailable), show less	Email Spam Brute-Force
🇩🇪 netclix.gr	2026-07-21 19:35:44 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 85.204.27.246 (PL/Poland/-)	Brute-Force
🇺🇸 vandomatos	2026-07-21 19:31:53 (2 months ago)	Jul 21 11:56:23 servidor postfix/smtps/smtpd[1769835]: warning: unknown[85.204.27.246]: SASL PLAIN a ... show more Jul 21 11:56:23 servidor postfix/smtps/smtpd[1769835]: warning: unknown[85.204.27.246]: SASL PLAIN authentication failed: Jul 21 12:14:12 servidor postfix/smtps/smtpd[1775630]: warning: unknown[85.204.27.246]: SASL PLAIN authentication failed: Jul 21 12:31:49 servidor postfix/smtps/smtpd[1784575]: warning: unknown[85.204.27.246]: SASL PLAIN authentication failed: ... show less	Phishing Web Spam Email Spam Hacking Spoofing Brute-Force Bad Web Bot
🇺🇸 TAY	2026-07-21 19:25:44 (2 months ago)	2026-07-22 03:08:07 auth-worker(364567): Info: sql([email protected],85.204.27.246): unknown use ... show more 2026-07-22 03:08:07 auth-worker(364567): Info: sql([email protected],85.204.27.246): unknown user 2026-07-22 03:25:44 auth-worker(369084): Info: sql([email protected],85.204.27.246): Password mismatch ... show less	Brute-Force
🇺🇸 mnogoweb	2026-07-21 19:16:49 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 85.204.27.246 (RO/Romania/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 85.204.27.246 (RO/Romania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-21 12:47:15 plain authenticator failed for (localhost) [85.204.27.246]: 535 Incorrect authentication data ([email protected]) 2026-07-21 12:47:16 plain authenticator failed for (localhost) [85.204.27.246]: 535 Incorrect authentication data ([email protected]) 2026-07-21 12:47:16 plain authenticator failed for (localhost) [85.204.27.246]: 535 Incorrect authentication data ([email protected]) 2026-07-21 12:58:57 plain authenticator failed for (localhost) [85.204.27.246]: 535 Incorrect authentication data ([email protected]) 2026-07-21 13:16:45 plain authenticator failed for (localhost) [85.204.27.246]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇷🇺 apa4h	2026-07-21 19:10:04 (2 months ago)	banned by Fail2Ban postfix	Brute-Force

Showing 16 to 30 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 193.37.32.75

🇫🇮 147.185.133.235

🇮🇳 123.253.162.253

🇦🇹 46.124.156.153

🇧🇪 34.38.12.179

🇻🇳 14.187.32.54

🇬🇧 200.138.46.90

🇬🇧 193.163.125.101

🇺🇸 167.172.149.213

🇺🇿 94.158.58.112

🇺🇿 94.158.49.223

🇮🇷 85.198.19.242

🇬🇧 64.205.72.180

🇳🇱 45.156.128.192

🇺🇸 24.106.43.27

🇺🇸 2a00:1450:4864:20::136

🇭🇰 223.17.1.118

🇹🇼 198.235.24.36

🇺🇸 188.255.156.155

🇺🇸 172.234.25.150