JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.214.133.120

85.214.133.120 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Strato Rechenzentrum, Berlin
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6724
Hostname(s)	h3001554.stratoserver.net
Domain Name	strato.de
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.214.133.120

Whois 85.214.133.120

IP Abuse Reports for 85.214.133.120:

This IP address has been reported a total of 32 times from 23 distinct sources. 85.214.133.120 was first reported on June 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Godert Jan van Manen	2026-06-18 17:41:33 (1 day ago)	Jun 18 19:34:57 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<E61PmIpUJJNV ... show more Jun 18 19:34:57 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<E61PmIpUJJNV1oV4>): unknown user Jun 18 19:34:59 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<E61PmIpUJJNV1oV4> Jun 18 19:35:12 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<7x7umIpUeLVV1oV4>): unknown user Jun 18 19:35:14 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<7x7umIpUeLVV1oV4> Jun 18 19:41:33 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<4Bbjr4pU5MBV1oV4>): unknown user show less	Brute-Force
🇩🇪 gadix	2026-06-18 17:03:52 (1 day ago)	2026-06-18 11:18:28,493 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 85.214.133.120 2 ... show more 2026-06-18 11:18:28,493 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 85.214.133.120 2026-06-18 15:29:40,614 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 85.214.133.120 2026-06-18 19:03:52,562 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 85.214.133.120 ... show less	Brute-Force
🇩🇪 triple-web.net	2026-06-18 16:30:17 (1 day ago)	$f2bV_matches	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 15:17:02 (1 day ago)	Jun 18 17:15:04 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<1e4DpIhUvtd ... show more Jun 18 17:15:04 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<1e4DpIhUvtdV1oV4>): unknown user Jun 18 17:15:06 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<1e4DpIhUvtdV1oV4> Jun 18 17:15:59 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<Z8ZOp4hUHKlV1oV4>): unknown user Jun 18 17:16:01 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<Z8ZOp4hUHKlV1oV4> Jun 18 17:17:02 odin dovecot: auth-worker(3431): sql([email protected],85.214.133.120,<ZqcNq4hU3JxV1oV4>): unknown user show less	Brute-Force
🇧🇾 hbars.by	2026-06-18 14:28:11 (1 day ago)	2026-06-18T17:28:11.454220+03:00 radionet dovecot: auth: passwd-file([email protected],85.214.133.120,<S ... show more 2026-06-18T17:28:11.454220+03:00 radionet dovecot: auth: passwd-file([email protected],85.214.133.120,<ScFb/IdUTI1V1oV4>): unknown user show less	Brute-Force
Anonymous	2026-06-18 13:15:37 (1 day ago)	Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attem ... show more Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 6 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 12:21:16 (1 day ago)	Jun 18 14:11:18 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<vonREoZUrtxV1o ... show more Jun 18 14:11:18 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<vonREoZUrtxV1oV4>): unknown user Jun 18 14:11:20 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<vonREoZUrtxV1oV4> Jun 18 14:14:05 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<bLjHHIZUDuhV1oV4>): unknown user Jun 18 14:14:07 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<bLjHHIZUDuhV1oV4> Jun 18 14:21:16 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<tWt1NoZUnqVV1oV4>): unknown user show less	Brute-Force
🇫🇷 Batz	2026-06-18 12:15:01 (1 day ago)	[85.214.133.120] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
Anonymous	2026-06-18 12:03:14 (1 day ago)	(PERMBLOCK) 85.214.133.120 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Po ... show more (PERMBLOCK) 85.214.133.120 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force
🇩🇪 onlyops.app	2026-06-18 12:00:19 (1 day ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇳🇱 Godert Jan van Manen	2026-06-18 11:37:06 (1 day ago)	Jun 18 13:32:16 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<FIY8h4VUL ... show more Jun 18 13:32:16 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<FIY8h4VULqBV1oV4>): unknown user Jun 18 13:32:18 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<FIY8h4VULqBV1oV4> Jun 18 13:34:59 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<+iDxkIVUIqJV1oV4>): unknown user Jun 18 13:35:01 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.133.120, lip=178.162.131.122, session=<+iDxkIVUIqJV1oV4> Jun 18 13:37:06 odin dovecot: auth-worker(20585): sql([email protected],85.214.133.120,<h4yAmIVU4KBV1oV4>): unknown user show less	Brute-Force
🇮🇹 abuseiphack	2026-06-18 11:18:33 (1 day ago)	Automatic report for brute force attack	Brute-Force
🇺🇸 Runlevel0	2026-06-18 11:10:29 (1 day ago)	Too many failed attempts / attacks from 85.214.133.120	Brute-Force Port Scan Email Spam
🇦🇹 AustrianSimon	2026-06-18 11:08:24 (1 day ago)	18 Jun 2026 11:08:24UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 18 Jun 2026 11:08:24UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 85.214.133.120 show less	Brute-Force
🇩🇪 ecs.ge	2026-06-18 11:01:31 (1 day ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.234

🇩🇪 178.83.45.218

🇩🇪 69.5.169.176

🇺🇸 66.132.198.40

🇳🇱 45.148.10.147

🇳🇱 45.148.10.67

🇧🇪 34.22.194.124

🇵🇪 181.176.225.37

🇵🇱 87.251.64.176

🇺🇸 76.107.19.33

🇺🇸 65.111.9.220

🇰🇷 49.246.3.236

🇨🇳 36.41.184.119

🇺🇸 18.220.73.65

🇨🇳 183.6.118.248

🇮🇳 182.95.181.166

🇵🇱 176.106.32.195

🇰🇷 121.159.71.249

🇫🇷 91.231.89.169

🇨🇦 57.134.215.133