JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.215.48.244

85.215.48.244 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 96%: ?

96%

ISP	STRATO AG for IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	dunker.de
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.215.48.244

Whois 85.215.48.244

IP Abuse Reports for 85.215.48.244:

This IP address has been reported a total of 23 times from 17 distinct sources. 85.215.48.244 was first reported on June 15th 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Godert Jan van Manen	2026-06-18 11:45:52 (31 minutes ago)	Jun 18 13:37:33 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<RngbmoVUopVV ... show more Jun 18 13:37:33 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<RngbmoVUopVV1zD0>): unknown user Jun 18 13:37:35 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=178.162.131.122, session=<RngbmoVUopVV1zD0> Jun 18 13:42:41 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<qTN9rIVULtJV1zD0>): unknown user Jun 18 13:42:43 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=178.162.131.122, session=<qTN9rIVULtJV1zD0> Jun 18 13:45:52 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<8lzYt4VUZNxV1zD0>): unknown user show less	Brute-Force
🇩🇪 jasperedv.de	2026-06-18 11:20:45 (56 minutes ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇳🇱 stom	2026-06-18 10:59:04 (1 hour ago)	2026-06-18T10:58:07.090878 socky.stom66.co.uk auth[1870161]: pam_unix(dovecot:auth): authentication ... show more 2026-06-18T10:58:07.090878 socky.stom66.co.uk auth[1870161]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=85.215.48.244 ... show less	Brute-Force Email Spam
🇩🇪 chris_yooo	2026-06-18 10:50:43 (1 hour ago)	Jun 18 12:45:30 plesk dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts ... show more Jun 18 12:45:30 plesk dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=144.76.2.152, session=<IxPd34RUcrVV1zD0> Jun 18 12:50:43 plesk dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=144.76.2.152, session=<0MSB8oRUvpRV1zD0> ... show less	Spoofing Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 10:49:12 (1 hour ago)	Jun 18 12:42:24 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<7sLl1IR ... show more Jun 18 12:42:24 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<7sLl1IRUNqdV1zD0>): unknown user Jun 18 12:42:26 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=178.162.131.122, session=<7sLl1IRUNqdV1zD0> Jun 18 12:42:36 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<B6lc1YRUJMNV1zD0>): unknown user Jun 18 12:42:38 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=178.162.131.122, session=<B6lc1YRUJMNV1zD0> Jun 18 12:49:12 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<hT8z7YRU3p9V1zD0>): unknown user show less	Brute-Force
Anonymous	2026-06-18 10:49:03 (1 hour ago)	(PERMBLOCK) 85.215.48.244 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Por ... show more (PERMBLOCK) 85.215.48.244 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force
🇮🇹 abuseiphack	2026-06-18 10:40:31 (1 hour ago)	Automatic report for brute force attack	Brute-Force
🇬🇧 Mendip_Defender	2026-06-18 10:26:24 (1 hour ago)	Jun 18 11:18:08 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 a ... show more Jun 18 11:18:08 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=188.246.206.60, session=<vLH6fYRU4I1V1zD0> Jun 18 11:26:18 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=188.246.206.60, session=<Hv00m4RUvplV1zD0> ... show less	Brute-Force
🇩🇪 dbmwebdesign	2026-06-18 10:25:36 (1 hour ago)	POP or IMAP failed login attempts detected by Fail2Ban in plesk-dovecot jail	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 10:14:42 (2 hours ago)	Jun 18 12:05:28 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<ZMvQUIRUNt ... show more Jun 18 12:05:28 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<ZMvQUIRUNtFV1zD0>): unknown user Jun 18 12:05:30 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=178.162.131.122, session=<ZMvQUIRUNtFV1zD0> Jun 18 12:13:13 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<YnCGbIRUCqZV1zD0>): unknown user Jun 18 12:13:15 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=178.162.131.122, session=<YnCGbIRUCqZV1zD0> Jun 18 12:14:42 odin dovecot: auth-worker(20585): sql([email protected],85.215.48.244,<ZJbScYRURpRV1zD0>): unknown user show less	Brute-Force
Anonymous	2026-06-18 10:05:37 (2 hours ago)	POP or IMAP failed login attempts detected by Fail2Ban	Brute-Force
🇩🇪 triple-web.net	2026-06-18 08:44:57 (3 hours ago)	$f2bV_matches	Brute-Force
🇫🇷 [email protected]	2026-06-18 08:43:39 (3 hours ago)	Jun 18 10:33:29 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<i ... show more Jun 18 10:33:29 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=141.94.194.45, session=<Ese4B4NU4t9V1zD0> Jun 18 10:35:37 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=141.94.194.45, session=<yyBcD4NUEsRV1zD0> Jun 18 10:40:17 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=141.94.194.45, session=<bUQNIINUIq1V1zD0> Jun 18 10:43:01 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=141.94.194.45, session=<fIzSKYNUiqhV1zD0> Jun 18 10:43:38 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=85.215.48.244, lip=141.94.194.45, session=<k1UI ... show less	Brute-Force
🇨🇦 zXero	2026-06-18 08:34:08 (3 hours ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
🇹🇭 thaizone.com	2026-06-18 08:24:28 (3 hours ago)	Mail credential brute-force attack (D1) #1	Email Spam Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.141.72.65

🇧🇮 102.134.101.35

🇮🇳 103.192.199.230

🇺🇸 24.163.114.60

🇺🇸 20.29.19.106

🇺🇸 200.10.45.154

🇫🇮 185.148.3.33

🇨🇳 182.61.35.204

🇱🇰 124.43.12.88

🇨🇳 115.191.22.111

🇺🇸 91.230.168.17

🇨🇳 47.117.3.109

🇩🇪 45.86.153.202

🇨🇳 39.96.197.8

🇵🇰 39.37.21.65

🇺🇸 31.59.40.94

🇭🇰 23.249.28.115

🇨🇱 176.52.133.47

🇺🇸 162.216.150.116

🇧🇷 150.230.66.98