JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.204.239.201

92.204.239.201 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	domainfactory GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8972
Hostname(s)	sh11511.ispgateway.de
Domain Name	df.eu
Country	🇫🇷 France
City	Strasbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.204.239.201

Whois 92.204.239.201

IP Abuse Reports for 92.204.239.201:

This IP address has been reported a total of 63 times from 43 distinct sources. 92.204.239.201 was first reported on July 19th 2022, and the most recent report was 19 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Batz	2026-06-18 12:18:01 (19 minutes ago)	[92.204.239.201] Multiple Dovecot Login Attempts	Brute-Force Hacking Port Scan
🇩🇪 onlyops.app	2026-06-18 12:00:21 (37 minutes ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇳🇱 Godert Jan van Manen	2026-06-18 11:39:32 (58 minutes ago)	Jun 18 13:34:39 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<Sp29j4VUU ... show more Jun 18 13:34:39 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<Sp29j4VUUopczO/J>): unknown user Jun 18 13:34:41 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=178.162.131.122, session=<Sp29j4VUUopczO/J> Jun 18 13:37:23 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<XryLmYVUfJlczO/J>): unknown user Jun 18 13:37:25 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=178.162.131.122, session=<XryLmYVUfJlczO/J> Jun 18 13:39:31 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<P20roYVUVuFczO/J>): unknown user show less	Brute-Force
🇮🇹 abuseiphack	2026-06-18 11:20:34 (1 hour ago)	Automatic report for brute force attack	Brute-Force
🇺🇸 Runlevel0	2026-06-18 11:12:18 (1 hour ago)	Too many failed attempts / attacks from 92.204.239.201	Brute-Force Port Scan Email Spam
🇦🇹 AustrianSimon	2026-06-18 11:10:25 (1 hour ago)	18 Jun 2026 11:10:25UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 18 Jun 2026 11:10:25UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 92.204.239.201 show less	Brute-Force
🇩🇪 ecs.ge	2026-06-18 11:03:15 (1 hour ago)	Automatic Fail2Ban report from jail plesk-dovecot: multiple matching events detected.	Brute-Force
🇬🇧 Mendip_Defender	2026-06-18 10:25:49 (2 hours ago)	Jun 18 10:19:08 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 a ... show more Jun 18 10:19:08 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=188.246.206.60, session=<IZMBq4NUjLRczO/J> Jun 18 11:25:43 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=188.246.206.60, session=<Hc4emYRUuuVczO/J> ... show less	Brute-Force
🇧🇷 dominioz	2026-06-18 10:02:59 (2 hours ago)	92.204.239.201 [2B94] 06:50:18 Authentication [POP3] - Result=0, [email protected], Method= ... show more 92.204.239.201 [2B94] 06:50:18 Authentication [POP3] - Result=0, [email protected], Method=0 92.204.239.201 [1D00] 07:02:56 Authentication [POP3] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 09:52:52 (2 hours ago)	Jun 18 11:46:50 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<SzMtDoRUwKt ... show more Jun 18 11:46:50 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<SzMtDoRUwKtczO/J>): unknown user Jun 18 11:46:52 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=178.162.131.122, session=<SzMtDoRUwKtczO/J> Jun 18 11:47:03 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<eQO7DoRUErhczO/J>): unknown user Jun 18 11:47:05 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=178.162.131.122, session=<eQO7DoRUErhczO/J> Jun 18 11:52:48 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<K9eJI4RUfMlczO/J>): unknown user show less	Brute-Force
🇨🇦 zXero	2026-06-18 09:19:25 (3 hours ago)	Fail2Ban automatic report - jail: dovecot-iptables	Brute-Force SSH DDoS Attack
Anonymous	2026-06-18 08:05:32 (4 hours ago)	POP or IMAP failed login attempts detected by Fail2Ban	Brute-Force
🇩🇪 XICTRON	2026-06-18 08:01:14 (4 hours ago)	Email brute-force attempt detected by Fail2Ban in Dovecot jail	Brute-Force
🇩🇪 jasperedv.de	2026-06-18 07:46:00 (4 hours ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇳🇱 Godert Jan van Manen	2026-06-18 07:41:10 (4 hours ago)	Jun 18 09:39:28 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<XdilRoJUZO ... show more Jun 18 09:39:28 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<XdilRoJUZO1czO/J>): unknown user Jun 18 09:39:30 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=178.162.131.122, session=<XdilRoJUZO1czO/J> Jun 18 09:40:15 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<vdJ9SYJUTMtczO/J>): unknown user Jun 18 09:40:17 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=92.204.239.201, lip=178.162.131.122, session=<vdJ9SYJUTMtczO/J> Jun 18 09:41:10 odin dovecot: auth-worker(20585): sql([email protected],92.204.239.201,<HFe9TIJU7rJczO/J>): unknown user show less	Brute-Force

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.101.138.172

🇺🇸 162.216.150.153

🇬🇧 80.1.51.168

🇨🇳 60.190.49.50

🇺🇸 45.156.129.121

🇬🇧 193.163.125.200

🇧🇷 179.125.169.27

🇩🇪 143.244.82.182

🇺🇸 85.208.96.204

🇬🇪 2.57.217.229

🇮🇳 202.141.101.64

🇨🇳 202.46.62.14

🇬🇧 193.163.125.155

🇨🇴 186.146.235.58

🇭🇰 112.120.171.95

🇺🇸 52.146.88.130

🇺🇸 52.70.123.241

🇺🇸 35.169.206.177

🇺🇸 162.216.150.170

🇳🇱 77.83.39.7