JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 87.140.48.96

87.140.48.96 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Deutsche Telekom AG
Usage Type	Fixed Line ISP
ASN	AS3320
Hostname(s)	p578c3060.dip0.t-ipconnect.de
Domain Name	telekom.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 87.140.48.96

Whois 87.140.48.96

IP Abuse Reports for 87.140.48.96:

This IP address has been reported a total of 29 times from 22 distinct sources. 87.140.48.96 was first reported on June 18th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 [email protected]	2026-06-18 19:29:47 (19 hours ago)	Jun 18 21:18:35 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<i ... show more Jun 18 21:18:35 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=141.94.194.45, session=<CIDFCoxUt+9XjDBg> Jun 18 21:22:26 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=141.94.194.45, session=<VoGVGIxUD+dXjDBg> Jun 18 21:22:37 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=141.94.194.45, session=<bN/1GIxUq/RXjDBg> Jun 18 21:27:38 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=141.94.194.45, session=<Dg4uK4xUZflXjDBg> Jun 18 21:29:47 mail6 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=141.94.194.45, session=<KU3TMoxUnflX ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 18:37:22 (20 hours ago)	Jun 18 20:29:29 odin dovecot: auth-worker(13141): sql([email protected],87.140.48.96,<3U9RW4tU5+dXj ... show more Jun 18 20:29:29 odin dovecot: auth-worker(13141): sql([email protected],87.140.48.96,<3U9RW4tU5+dXjDBg>): unknown user Jun 18 20:29:31 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<3U9RW4tU5+dXjDBg> Jun 18 20:29:44 odin dovecot: auth-worker(13141): sql([email protected],87.140.48.96,<jJX+W4tUwehXjDBg>): unknown user Jun 18 20:29:46 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<jJX+W4tUwehXjDBg> Jun 18 20:37:22 odin dovecot: auth-worker(13141): sql([email protected],87.140.48.96,<meeDd4tUwOdXjDBg>): unknown user show less	Brute-Force
🇩🇪 gadix	2026-06-18 17:52:33 (20 hours ago)	2026-06-18 11:39:17,850 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 87.140.48.96 202 ... show more 2026-06-18 11:39:17,850 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 87.140.48.96 2026-06-18 15:51:37,535 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 87.140.48.96 2026-06-18 19:52:33,257 fail2ban.actions [4743]: NOTICE [plesk-dovecot] Ban 87.140.48.96 ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 15:40:55 (23 hours ago)	Jun 18 17:38:54 odin dovecot: auth-worker(3431): sql([email protected],87.140.48.96,<mvJE+YhUQvlXj ... show more Jun 18 17:38:54 odin dovecot: auth-worker(3431): sql([email protected],87.140.48.96,<mvJE+YhUQvlXjDBg>): unknown user Jun 18 17:38:56 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<mvJE+YhUQvlXjDBg> Jun 18 17:39:51 odin dovecot: auth-worker(3431): sql([email protected],87.140.48.96,<r4Om/IhUiPFXjDBg>): unknown user Jun 18 17:39:53 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<r4Om/IhUiPFXjDBg> Jun 18 17:40:55 odin dovecot: auth-worker(3431): sql([email protected],87.140.48.96,<BYVyAIlUR+5XjDBg>): unknown user show less	Brute-Force
🇧🇾 hbars.by	2026-06-18 14:51:23 (23 hours ago)	2026-06-18T17:51:22.586734+03:00 radionet dovecot: auth: passwd-file([email protected],87.140.48.96,<08B ... show more 2026-06-18T17:51:22.586734+03:00 radionet dovecot: auth: passwd-file([email protected],87.140.48.96,<08BGT4hUyuZXjDBg>): unknown user show less	Brute-Force
Anonymous	2026-06-18 13:36:58 (1 day ago)	Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attem ... show more Port scanning: Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 6 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) Disconnected (auth failed, 1 attempts in 2 secs) show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 12:43:34 (1 day ago)	Jun 18 14:33:46 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<wUooY4ZUfPxXjDBg ... show more Jun 18 14:33:46 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<wUooY4ZUfPxXjDBg>): unknown user Jun 18 14:33:48 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<wUooY4ZUfPxXjDBg> Jun 18 14:36:29 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<b03kbIZUqftXjDBg>): unknown user Jun 18 14:36:31 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<b03kbIZUqftXjDBg> Jun 18 14:43:33 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<0ekvhoZUCulXjDBg>): unknown user show less	Brute-Force
🇫🇷 Batz	2026-06-18 12:37:24 (1 day ago)	[87.140.48.96] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
🇩🇪 onlyops.app	2026-06-18 12:00:25 (1 day ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇳🇱 Godert Jan van Manen	2026-06-18 11:59:30 (1 day ago)	Jun 18 13:54:39 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<h9pE14VUFf1 ... show more Jun 18 13:54:39 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<h9pE14VUFf1XjDBg>): unknown user Jun 18 13:54:41 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<h9pE14VUFf1XjDBg> Jun 18 13:57:22 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<Bmn94IVUafZXjDBg>): unknown user Jun 18 13:57:24 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=178.162.131.122, session=<Bmn94IVUafZXjDBg> Jun 18 13:59:30 odin dovecot: auth-worker(20585): sql([email protected],87.140.48.96,<dNed6IVUGPxXjDBg>): unknown user show less	Brute-Force
🇮🇹 abuseiphack	2026-06-18 11:40:42 (1 day ago)	Automatic report for brute force attack	Brute-Force
🇺🇸 Runlevel0	2026-06-18 11:32:10 (1 day ago)	Too many failed attempts / attacks from 87.140.48.96	Brute-Force Port Scan Email Spam
🇩🇪 ecs.ge	2026-06-18 11:22:45 (1 day ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇦🇹 AustrianSimon	2026-06-18 11:21:17 (1 day ago)	18 Jun 2026 11:21:16UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 18 Jun 2026 11:21:16UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 87.140.48.96 show less	Brute-Force
🇬🇧 Mendip_Defender	2026-06-18 10:45:55 (1 day ago)	Jun 18 10:40:09 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 a ... show more Jun 18 10:40:09 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=188.246.206.60, session=<++si9oNUZu5XjDBg> Jun 18 11:45:50 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=87.140.48.96, lip=188.246.206.60, session=<0zMM4YRUq/dXjDBg> ... show less	Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 217.60.195.150

🇰🇷 211.223.107.86

🇺🇸 157.245.141.140

🇩🇪 69.5.169.27

🇺🇸 44.192.49.230

🇺🇸 34.197.70.90

🇫🇮 147.185.133.202

🇵🇱 95.214.53.157

🇫🇮 65.21.150.20

🇳🇱 45.148.10.183

🇺🇸 45.33.109.18

🇬🇧 35.203.211.6

🇯🇵 14.137.237.192

🇺🇸 216.25.89.126

🇭🇰 194.187.178.122

🇬🇧 193.163.125.57

🇵🇪 190.223.60.209

🇧🇴 190.129.122.12

🇨🇴 186.168.55.37

🇺🇸 172.253.210.93