AbuseIPDB » 61.131.136.238

61.131.136.238 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 24%: ?

24%

ISP	ChinaNet Jiangxi Province Network
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	238.136.131.61.dial.nc.jx.dynamic.163data.com.cn
Domain Name	chinatelecom.com.cn
Country	China
City	Nanchang, Jiangxi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 61.131.136.238

Whois 61.131.136.238

IP Abuse Reports for 61.131.136.238:

This IP address has been reported a total of 130 times from 44 distinct sources. 61.131.136.238 was first reported on July 3rd 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	13 Apr 2022	Mar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE ... show moreMar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:34:52 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:05 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:24 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:41 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user show less	Fraud VoIP Brute-Force
ipcop.net	13 Apr 2022	Mar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE ... show moreMar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:34:52 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:05 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:24 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:41 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user show less	Fraud VoIP Brute-Force
ipcop.net	13 Apr 2022	Mar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE ... show moreMar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:34:52 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:05 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:24 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:41 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user show less	Fraud VoIP Brute-Force
ipcop.net	13 Apr 2022	Mar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE ... show moreMar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:34:52 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:05 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:24 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:41 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user show less	Fraud VoIP Brute-Force
ipcop.net	13 Apr 2022	Mar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE ... show moreMar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:34:52 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:05 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:24 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:41 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user show less	Fraud VoIP Brute-Force
ipcop.net	13 Apr 2022	Mar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE ... show moreMar 30 11:34:44 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:34:52 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:05 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:24 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user Mar 30 11:35:41 mail.srvfarm.net dovecot: auth-worker(2866233): sql(info,61.131.136.238,<4jl2QWzbXIE9g4ju>): unknown user show less	Fraud VoIP Brute-Force
big-cloud.nl	04 Apr 2022	Unauthorized SMTP/IMAP/POP3 connection attempt	Brute-Force
swiszczu	03 Apr 2022	Fail2Ban automatic report: SSH suspicious user names: Apr 3 07:43:30 serw sshd[15409]: ... show moreFail2Ban automatic report: SSH suspicious user names: Apr 3 07:43:30 serw sshd[15409]: Connection closed by invalid user admin 61.131.136.238 port 62065 [preauth] show less	Brute-Force SSH
IrisFlower	01 Apr 2022	Unauthorized connection attempt detected from IP address 61.131.136.238 to port 22 [J]	Port Scan Hacking
IrisFlower	31 Mar 2022	Unauthorized connection attempt detected from IP address 61.131.136.238 to port 22 [J]	Port Scan Hacking
basing	29 Mar 2022	2022-03-29 02:32:49 pzb SASL PLAIN auth failed: rhost=61.131.136.238...	Brute-Force
Smel	28 Mar 2022	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
0x00000F	23 Mar 2022	[Cisco-FW] Unauthorized user login on port 22.	Brute-Force SSH
bsoft.de	23 Mar 2022	2022-03-23T12:19:09.493871MailD imap[22604]: badlogin: 238.136.131.61.dial.nc.jx.dynamic.163data.com ... show more2022-03-23T12:19:09.493871MailD imap[22604]: badlogin: 238.136.131.61.dial.nc.jx.dynamic.163data.com.cn [61.131.136.238] PLAIN [SASL(-13): authentication failure: Password verification failed] 2022-03-23T12:19:34.455158MailD imap[22604]: badlogin: 238.136.131.61.dial.nc.jx.dynamic.163data.com.cn [61.131.136.238] PLAIN [SASL(-13): authentication failure: Password verification failed] 2022-03-23T12:19:37.458697MailD imap[22604]: badlogin: 238.136.131.61.dial.nc.jx.dynamic.163data.com.cn [61.131.136.238] PLAIN [SASL(-13): authentication failure: Password verification failed] show less	Hacking Brute-Force
Anonymous	22 Mar 2022	Mar 22 06:31:44 posta dovecot: imap-login: Disconnected (auth failed, 5 attempts in 62 secs): user=< ... show moreMar 22 06:31:44 posta dovecot: imap-login: Disconnected (auth failed, 5 attempts in 62 secs): user=<[email protected]>, method=PLAIN, rip=61.131.136.238, lip=85.207.218.6, TLS: Connection closed, session=<qZv66cfa4po9g4ju> Mar 22 10:57:33 posta dovecot: imap-login: Disconnected: Inactivity (auth failed, 4 attempts in 175 secs): user=<[email protected]>, method=PLAIN, rip=61.131.136.238, lip=85.207.218.6, TLS, session=<6DPpmcvaGMM9g4ju> Mar 22 12:57:26 posta dovecot: imap-login: Disconnected (auth failed, 4 attempts in 43 secs): user=<haida-is>, method=PLAIN, rip=61.131.136.238, lip=85.207.218.6, TLS: Connection closed, session=<TrB5Ts3aXZc9g4ju> ... show less	Email Spam Brute-Force Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩