JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.130.200.87

61.130.200.87 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET-ZJ Huzhou node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Huzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.130.200.87

Whois 61.130.200.87

IP Abuse Reports for 61.130.200.87:

This IP address has been reported a total of 27 times from 26 distinct sources. 61.130.200.87 was first reported on July 17th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-19 10:05:38 (18 hours ago)	7 packets to port 993	Brute-Force
🇦🇺 KevinNeale	2026-07-18 18:14:34 (1 day ago)	Fail2Ban recidive block for repeated malicious authentication attempts.	Web App Attack
🇩🇪 kreativstrecke	2026-07-18 16:09:21 (1 day ago)	2026-07-18T18:09:13.323433+02:00 srv03 postfix/smtps/smtpd[1353639]: warning: unknown[61.130.200.87] ... show more 2026-07-18T18:09:13.323433+02:00 srv03 postfix/smtps/smtpd[1353639]: warning: unknown[61.130.200.87]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=r.boensch 2026-07-18T18:09:20.478099+02:00 srv03 postfix/smtps/smtpd[1353639]: lost connection after AUTH from unknown[61.130.200.87] 2026-07-18T18:09:20.478373+02:00 srv03 postfix/smtps/smtpd[1353639]: disconnect from unknown[61.130.200.87] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇺🇸 entangled_mongoose	2026-07-18 14:09:33 (1 day ago)	Failed IMAP authentication with username 'user_sha_0585d@domain_sha_70fc2'.	Brute-Force Hacking
🇨🇭 hobeika.fr	2026-07-18 12:25:52 (1 day ago)	2026-07-18T14:25:51.506081+02:00 tigrou postfix/smtpd[2524288]: warning: unknown[61.130.200.87]: SAS ... show more 2026-07-18T14:25:51.506081+02:00 tigrou postfix/smtpd[2524288]: warning: unknown[61.130.200.87]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇳🇱 Slartibartfast	2026-07-18 05:40:01 (1 day ago)	SMTP Brute Force	Brute-Force
Anonymous	2026-07-18 05:31:02 (1 day ago)	...	Brute-Force
🇮🇹 CoreTech srl	2026-07-18 04:12:33 (1 day ago)	mail3-dc1 06:07:42.609 [185.149.191.92] SMTP Login failed: Incorrect password for user [backup@fenix ... show more mail3-dc1 06:07:42.609 [185.149.191.92] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 06:08:20.400 [2.228.150.60] SMTP Login failed: Invalid username ([email protected]) and password combination.MAIL4-new 06:08:20.400 [2.228.150.60] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 06:09:41.917 [61.130.200.87] SMTP Login failed: Invalid username ([email protected]) and password combination.MAIL4-new 06:09:41.917 [61.130.200.87] SMTP Login failed: User [riccardo] not foundis-60632bc2 06:11:29.127 [124.115.69.166] SMTP Login failed: That domain was not found. Double check your email address.is-60632bc2 06:11:29.127 [124.115.69.166] SMTP Login failed: Domain [csleguide.it] not foundMAIL4-new 06:11:30.751 [88.51.41.38] SMTP Login failed: Domain [termisol.com] not foundMAIL4-new 06:11:30.751 [88.51.41.38] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 06:12:20.298 [104.28.152.126] SMTP Login fai show less	Brute-Force
🇮🇩 aaKenshin	2026-07-18 04:12:16 (2 days ago)	Suspicious activity detected from IP 61.130.200.87 based on mailserver logs. Sample logs: 2026-07-18 ... show more Suspicious activity detected from IP 61.130.200.87 based on mailserver logs. Sample logs: 2026-07-18 11:21:52,713 INFO [qtp2102534528-204823] [ip=172.16.0.182;oip=61.130.200.87;oport=46264;oproto=smtp;port=59016;soapId=1e120b5c;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-07-18 11:21:52,713 INFO [qtp2102534528-204823] [ip=172.16.0.182;oip=61.130.200.87;oport=46264;oproto=smtp;port=59016;soapId=1e120b5c;] SoapEngine - handler exception: authentication failed for [], account not found 2026-07-18 11:21:52,713 INFO [qtp2102534528-204823] [ip=172.16.0.182;oip=61.130.200.87;oport=46264;oproto=smtp;port=59016;soapId=1e120b5c;] soap - AuthRequest elapsed=1 2026-07-18 12:12:10,028 INFO [qtp2102534528-205104] [name=*@.id;ip=172.16.0.182;oip=61.130.200.87;oport=36534;oproto=smtp;port=37748;soapId=1e120b8f;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: invalid show less	Brute-Force
Anonymous	2026-07-18 03:44:55 (2 days ago)	61.130.200.87 detected on srv01	Brute-Force
Anonymous	2026-07-18 03:24:53 (2 days ago)	2026-07-18T05:24:09.126030+02:00 ns.almogavers.net auth[1775088]: pam_unix(dovecot:auth): authentica ... show more 2026-07-18T05:24:09.126030+02:00 ns.almogavers.net auth[1775088]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=61.130.200.87 2026-07-18T05:24:51.393180+02:00 ns.almogavers.net auth[1775088]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=61.130.200.87 ... show less	Web Spam Email Spam Port Scan Brute-Force
🇷🇴 clauss	2026-07-18 01:51:47 (2 days ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇬🇧 Steve	2026-07-18 01:47:41 (2 days ago)	Attempts against SMTP/SSMTP	Brute-Force
🇫🇷 basing	2026-07-18 00:34:54 (2 days ago)	2026-07-18 01:34:54 idz SASL PLAIN auth failed: rhost=61.130.200.87...	Brute-Force
🇳🇱 maxxsense	2026-07-18 00:32:05 (2 days ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 61.130.200.87 (CN/China ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 61.130.200.87 (CN/China/-) show less	Hacking

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.59

🇧🇷 177.10.128.82

🇨🇳 113.250.177.24

🇨🇦 85.217.149.46

🇳🇱 81.19.216.100

🇩🇪 69.5.169.116

🇩🇪 69.5.169.48

🇩🇪 69.5.169.23

🇮🇳 59.178.104.47

🇮🇩 36.75.9.77

🇨🇳 14.103.123.75

🇨🇳 14.103.120.132

🇦🇪 217.165.77.126

🇺🇸 162.216.150.58

🇺🇸 147.185.132.12

🇫🇮 135.181.251.219

🇨🇳 101.126.4.215

🇷🇴 92.118.39.71

🇫🇷 85.217.140.19

🇹🇷 85.106.145.129