JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.215.200.66

85.215.200.66 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	mail.landscheidt.net
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.215.200.66

Whois 85.215.200.66

IP Abuse Reports for 85.215.200.66:

This IP address has been reported a total of 53 times from 29 distinct sources. 85.215.200.66 was first reported on June 18th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-06-29 22:04:10 (3 days ago)	2026-06-29 00:04:58,464 fail2ban.actions [1196]: NOTICE [pam-generic] Ban 85.215.200.66 2026 ... show more 2026-06-29 00:04:58,464 fail2ban.actions [1196]: NOTICE [pam-generic] Ban 85.215.200.66 2026-06-29 00:04:58,464 fail2ban.actions [1196]: NOTICE [pam-generic] Ban 85.215.200.66 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇩🇪 ecs.ge	2026-06-26 09:25:15 (6 days ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇸🇮 administrator	2026-06-21 22:04:16 (1 week ago)	2026-06-20 00:03:03,786 fail2ban.actions [1112]: NOTICE [dovecot] Ban 85.215.200.66 2026-06- ... show more 2026-06-20 00:03:03,786 fail2ban.actions [1112]: NOTICE [dovecot] Ban 85.215.200.66 2026-06-20 00:03:40,597 fail2ban.actions [1112]: NOTICE [pam-generic] Ban 85.215.200.66 2026-06-22 00:03:58,413 fail2ban.actions [1112]: NOTICE [dovecot] Ban 85.215.200.66 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇭🇺 dd3589	2026-06-19 17:48:02 (1 week ago)	2026-06-19T19:47:51.241248+02:00 <masked> dovecot[-].info: pop3-login: Login aborted: Connection clo ... show more 2026-06-19T19:47:51.241248+02:00 <masked> dovecot[-].info: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 0 secs) (auth_failed): user=<[email protected]>, rip=85.215.200.66, lip=192.168.200.64, session=<DGU/5J5U1p1V18hC> show less	Brute-Force
🇪🇸 alferez	2026-06-19 16:59:12 (1 week ago)	Searching random mail account login	Email Spam
🇨🇦 zXero	2026-06-19 15:43:53 (1 week ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
🇳🇱 Godert Jan van Manen	2026-06-19 14:04:52 (1 week ago)	Jun 19 15:57:52 odin dovecot: auth-worker(24408): sql([email protected],85.215.200.66,<5a/CrZtUZrNV18hC ... show more Jun 19 15:57:52 odin dovecot: auth-worker(24408): sql([email protected],85.215.200.66,<5a/CrZtUZrNV18hC>): unknown user Jun 19 15:57:54 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.200.66, lip=178.162.131.122, session=<5a/CrZtUZrNV18hC> Jun 19 16:01:24 odin dovecot: auth-worker(24408): sql([email protected],85.215.200.66,<Z0lmuptUgLhV18hC>): unknown user Jun 19 16:01:26 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.200.66, lip=178.162.131.122, session=<Z0lmuptUgLhV18hC> Jun 19 16:04:52 odin dovecot: auth-worker(24408): sql([email protected],85.215.200.66,<GOfKxptUqJBV18hC>): unknown user show less	Brute-Force
🇧🇷 dominioz	2026-06-19 13:34:56 (1 week ago)	85.215.200.66 [2668] 10:34:53 Authentication [POP3] - Result=0, [email protected], Method= ... show more 85.215.200.66 [2668] 10:34:53 Authentication [POP3] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇺🇸 Runlevel0	2026-06-19 13:33:44 (1 week ago)	Too many failed attempts / attacks from 85.215.200.66	Brute-Force Port Scan Email Spam
🇳🇱 Godert Jan van Manen	2026-06-19 11:46:00 (1 week ago)	Jun 19 13:37:54 odin dovecot: auth-worker(26171): sql([email protected],85.215.200.66,<GwI4uZlU+NtV ... show more Jun 19 13:37:54 odin dovecot: auth-worker(26171): sql([email protected],85.215.200.66,<GwI4uZlU+NtV18hC>): unknown user Jun 19 13:37:56 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.200.66, lip=178.162.131.122, session=<GwI4uZlU+NtV18hC> Jun 19 13:38:10 odin dovecot: auth-worker(26171): sql([email protected],85.215.200.66,<60jyuZlULpNV18hC>): unknown user Jun 19 13:38:12 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=85.215.200.66, lip=178.162.131.122, session=<60jyuZlULpNV18hC> Jun 19 13:46:00 odin dovecot: auth-worker(26171): sql([email protected],85.215.200.66,<um4w1plUDp1V18hC>): unknown user show less	Brute-Force
🇩🇪 jasperedv.de	2026-06-19 08:58:59 (1 week ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-19 08:52:31 (1 week ago)	Jun 19 10:50:10 odin dovecot: auth-worker(10495): sql([email protected],85.215.200.66,<D2pYYZdUjKZ ... show more Jun 19 10:50:10 odin dovecot: auth-worker(10495): sql([email protected],85.215.200.66,<D2pYYZdUjKZV18hC>): unknown user Jun 19 10:50:12 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.200.66, lip=178.162.131.122, session=<D2pYYZdUjKZV18hC> Jun 19 10:51:16 odin dovecot: auth-worker(10495): sql([email protected],85.215.200.66,<ig5JZZdUisxV18hC>): unknown user Jun 19 10:51:18 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.200.66, lip=178.162.131.122, session=<ig5JZZdUisxV18hC> Jun 19 10:52:30 odin dovecot: auth-worker(10495): sql([email protected],85.215.200.66,<3Xa1aZdUrOFV18hC>): unknown user show less	Brute-Force
🇺🇸 TAY	2026-06-19 08:21:11 (1 week ago)	2026-06-19 16:21:09 auth-worker(76936): Info: sql([email protected],85.215.200.66,<yIqY+ZZUaKtV1 ... show more 2026-06-19 16:21:09 auth-worker(76936): Info: sql([email protected],85.215.200.66,<yIqY+ZZUaKtV18hC>): unknown user 2026-06-19 16:21:11 pop3-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.200.66, lip=162.220.160.187, session=<yIqY+ZZUaKtV18hC> ... show less	Brute-Force
🇧🇾 hbars.by	2026-06-19 07:54:19 (1 week ago)	2026-06-19T10:54:19.092476+03:00 radionet dovecot: auth: passwd-file([email protected],85.215.200.66,<B+ ... show more 2026-06-19T10:54:19.092476+03:00 radionet dovecot: auth: passwd-file([email protected],85.215.200.66,<B+iZmZZUXLVV18hC>): unknown user show less	Brute-Force
🇩🇪 paneologist	2026-06-19 07:13:58 (1 week ago)	2026-06-18T09:55:55.574946alpha dovecot\[4552\]: pop3-login: Disconnected \(tried to use disallowed ... show more 2026-06-18T09:55:55.574946alpha dovecot\[4552\]: pop3-login: Disconnected \(tried to use disallowed plaintext auth\): user=\<[email protected]\>, rip=85.215.200.66, lip=80.152.201.148, session=\<Kb6CgYJUmOJV18hC\> 2026-06-18T12:28:14.326015alpha dovecot\[4552\]: pop3-login: Disconnected \(tried to use disallowed plaintext auth\): user=\<[email protected]\>, rip=85.215.200.66, lip=80.152.201.148, session=\<4wM5ooRUWsZV18hC\> 2026-06-18T13:02:43.116090alpha dovecot\[4552\]: pop3-login: Disconnected \(tried to use disallowed plaintext auth\): user=\<[email protected]\>, rip=85.215.200.66, lip=80.152.201.148, session=\<RT+IHYVUJMtV18hC\> 2026-06-18T13:32:44.354783alpha dovecot\[4552\]: pop3-login: Disconnected \(tried to use disallowed plaintext auth\): user=\<[email protected]\>, rip=85.215.200.66, lip=80.152.201.148, session=\<9/fkiIVU/oxV18hC\> 2026-06-18T14:57:45.455937alpha dovecot\[4552\]: pop3-login: Disconnected \(tried to use disallowed plaintext auth\): user=\<[email protected]\>, rip=85.215.200.66, show less	Brute-Force

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 76.130.57.6

🇺🇸 66.240.205.34

🇭🇰 43.132.150.89

🇺🇸 2600:1406:6400:1::172d:cd10

🇵🇭 222.127.30.166

🇹🇼 211.20.14.156

🇺🇸 185.223.152.105

🇺🇸 158.94.187.73

🇺🇸 147.185.132.69

🇩🇪 89.23.108.134

🇮🇳 80.225.238.77

🇳🇱 45.148.10.152

🇳🇱 45.148.10.151

🇧🇷 205.210.31.220

🇺🇸 195.184.76.36

🇬🇧 195.96.139.80

🇷🇴 151.242.30.224

🇺🇸 143.42.0.97

🇮🇳 117.247.48.117

🇨🇳 117.34.85.169