JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.214.91.4

85.214.91.4 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 54%: ?

54%

ISP	Strato Rechenzentrum, Berlin
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6724
Hostname(s)	h3011148.stratoserver.net
Domain Name	strato.de
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.214.91.4

Whois 85.214.91.4

IP Abuse Reports for 85.214.91.4:

This IP address has been reported a total of 125 times from 32 distinct sources. 85.214.91.4 was first reported on June 18th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 zXero	2026-06-30 12:58:07 (1 month ago)	Fail2Ban automatic report - jail: recidive	Brute-Force SSH DDoS Attack
🇸🇮 administrator	2026-06-29 22:04:06 (1 month ago)	2026-06-29 00:04:53,213 fail2ban.actions [1196]: NOTICE [pam-generic] Ban 85.214.91.4 2026-0 ... show more 2026-06-29 00:04:53,213 fail2ban.actions [1196]: NOTICE [pam-generic] Ban 85.214.91.4 2026-06-29 00:04:53,213 fail2ban.actions [1196]: NOTICE [pam-generic] Ban 85.214.91.4 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇺🇸 TAY	2026-06-27 02:20:35 (1 month ago)	2026-06-27 10:20:32 auth-worker(39374): Info: sql([email protected],85.214.91.4,<IMyk3jJVfs5V1ls ... show more 2026-06-27 10:20:32 auth-worker(39374): Info: sql([email protected],85.214.91.4,<IMyk3jJVfs5V1lsE>): unknown user 2026-06-27 10:20:34 pop3-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=162.220.160.187, session=<IMyk3jJVfs5V1lsE> ... show less	Brute-Force
🇫🇷 Batz	2026-06-26 21:02:53 (1 month ago)	[85.214.91.4] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
🇳🇱 Godert Jan van Manen	2026-06-26 19:50:18 (1 month ago)	Jun 26 21:40:27 odin dovecot: auth-worker(23803): sql([email protected],85.214.91.4,<lH/ZRy1VGuFV1lsE>) ... show more Jun 26 21:40:27 odin dovecot: auth-worker(23803): sql([email protected],85.214.91.4,<lH/ZRy1VGuFV1lsE>): unknown user Jun 26 21:40:29 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<lH/ZRy1VGuFV1lsE> Jun 26 21:45:25 odin dovecot: auth-worker(23803): sql([email protected],85.214.91.4,<wgqZWS1VZuRV1lsE>): unknown user Jun 26 21:45:27 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<wgqZWS1VZuRV1lsE> Jun 26 21:50:17 odin dovecot: auth-worker(23803): sql([email protected],85.214.91.4,<YywEay1VMoVV1lsE>): unknown user show less	Brute-Force
🇺🇸 Runlevel0	2026-06-26 19:06:10 (1 month ago)	Too many failed attempts / attacks from 85.214.91.4	Brute-Force Port Scan Email Spam
🇬🇧 Mendip_Defender	2026-06-26 17:45:14 (1 month ago)	Jun 26 16:52:33 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 a ... show more Jun 26 16:52:33 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=188.246.206.60, session=<l7mtGCpVNJlV1lsE> Jun 26 18:45:07 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=188.246.206.60, session=<eJY9qytVlu1V1lsE> ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-26 13:00:13 (1 month ago)	Jun 26 14:57:02 odin dovecot: auth-worker(4403): sql([email protected],85.214.91.4,<i7IYpSdViLlV1l ... show more Jun 26 14:57:02 odin dovecot: auth-worker(4403): sql([email protected],85.214.91.4,<i7IYpSdViLlV1lsE>): unknown user Jun 26 14:57:04 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<i7IYpSdViLlV1lsE> Jun 26 14:58:32 odin dovecot: auth-worker(4403): sql([email protected],85.214.91.4,<eWB7qidVnr9V1lsE>): unknown user Jun 26 14:58:34 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<eWB7qidVnr9V1lsE> Jun 26 15:00:12 odin dovecot: auth-worker(4403): sql([email protected],85.214.91.4,<hTZzsCdV6rhV1lsE>): unknown user show less	Brute-Force
🇩🇪 gadix	2026-06-26 10:08:27 (1 month ago)	2026-06-25 22:43:56,853 fail2ban.actions [4645]: NOTICE [plesk-dovecot] Ban 85.214.91.4 2026 ... show more 2026-06-25 22:43:56,853 fail2ban.actions [4645]: NOTICE [plesk-dovecot] Ban 85.214.91.4 2026-06-26 03:48:21,710 fail2ban.actions [4645]: NOTICE [plesk-dovecot] Ban 85.214.91.4 2026-06-26 12:08:23,858 fail2ban.actions [4645]: NOTICE [plesk-dovecot] Ban 85.214.91.4 ... show less	Brute-Force
🇩🇪 ecs.ge	2026-06-26 09:25:15 (1 month ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-26 06:17:24 (1 month ago)	Jun 26 08:10:34 odin dovecot: auth-worker(21290): sql([email protected],85.214.91.4,<IW179yFVps ... show more Jun 26 08:10:34 odin dovecot: auth-worker(21290): sql([email protected],85.214.91.4,<IW179yFVpsZV1lsE>): unknown user Jun 26 08:10:36 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<IW179yFVpsZV1lsE> Jun 26 08:14:40 odin dovecot: auth-worker(21290): sql([email protected],85.214.91.4,<bccjBiJVgMZV1lsE>): unknown user Jun 26 08:14:42 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<bccjBiJVgMZV1lsE> Jun 26 08:17:23 odin dovecot: auth-worker(21290): sql([email protected],85.214.91.4,<cpfWDyJVKI1V1lsE>): unknown user show less	Brute-Force
🇩🇪 jasperedv.de	2026-06-26 05:58:51 (1 month ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇮🇹 abuseiphack	2026-06-26 05:39:58 (1 month ago)	Automatic report for brute force attack	Brute-Force
Anonymous	2026-06-26 04:34:32 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-dovecot jail	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-25 23:02:01 (1 month ago)	Jun 26 00:58:59 odin dovecot: auth-worker(21348): sql([email protected],85.214.91.4,<OcX+7xtVVs1V1 ... show more Jun 26 00:58:59 odin dovecot: auth-worker(21348): sql([email protected],85.214.91.4,<OcX+7xtVVs1V1lsE>): unknown user Jun 26 00:59:01 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<OcX+7xtVVs1V1lsE> Jun 26 01:00:23 odin dovecot: auth-worker(21348): sql([email protected],85.214.91.4,<Q1wL9RtVDuFV1lsE>): unknown user Jun 26 01:00:25 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.214.91.4, lip=178.162.131.122, session=<Q1wL9RtVDuFV1lsE> Jun 26 01:02:00 odin dovecot: auth-worker(21348): sql([email protected],85.214.91.4,<iBrM+htVguBV1lsE>): unknown user show less	Brute-Force

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇭 84.255.184.126

🇺🇸 45.194.67.67

🇨🇴 45.172.218.151

🇳🇱 45.148.10.141

🇨🇳 39.156.168.240

🇩🇪 35.246.204.217

🇻🇪 138.122.6.7

🇺🇸 107.167.34.125

🇳🇱 45.148.10.151

🇸🇬 34.124.145.122

🇧🇪 34.14.61.16

🇳🇱 23.109.180.222

🇧🇷 189.80.198.223

🇺🇸 185.198.240.205

🇻🇳 103.75.182.108

🇫🇷 91.231.89.29

🇩🇪 45.135.141.10

🇯🇵 34.97.113.245

🇭🇰 31.77.145.89

🇺🇸 20.163.15.247