JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.236.211.54

81.236.211.54 was found in our database!

This IP was reported 1,803 times. Confidence of Abuse is 100%: ?

100%

ISP	Telia Network Services
Usage Type	Fixed Line ISP
ASN	AS3301
Hostname(s)	81-236-211-54-no2550.tbcn.telia.com
Domain Name	telia.net
Country	🇸🇪 Sweden
City	Karlstad, Varmland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.236.211.54

Whois 81.236.211.54

IP Abuse Reports for 81.236.211.54:

This IP address has been reported a total of 1,803 times from 321 distinct sources. 81.236.211.54 was first reported on November 19th 2025, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 chummy-clinch8q	2026-02-23 05:49:17 (3 months ago)	SSH brute-force detected by Fail2Ban on securevision.ftp.sh	Brute-Force SSH
🇩🇪 www.fransveldman.world	2026-02-23 05:42:04 (3 months ago)	Feb 23 05:42:03 mail postfix/submission/smtpd[1061383]: warning: 81-236-211-54-no2550.tbcn.telia.com ... show more Feb 23 05:42:03 mail postfix/submission/smtpd[1061383]: warning: 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 23 05:42:03 mail postfix/submission/smtpd[1061383]: lost connection after AUTH from 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54] ... show less	Brute-Force Email Spam
🇺🇦 MakselPr	2026-02-23 05:02:32 (3 months ago)	Feb 22 09:17:45 mail postfix/smtps/smtpd[1883019]: warning: 81-236-211-54-no2550.tbcn.telia.com[81.2 ... show more Feb 22 09:17:45 mail postfix/smtps/smtpd[1883019]: warning: 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Feb 23 07:02:32 mail postfix/smtps/smtpd[1942776]: warning: 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=internat_direktor ... show less	Brute-Force
🇩🇪 enjoyably	2026-02-23 04:05:21 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf	SSH Brute-Force
🇭🇺 Lacika555	2026-02-23 03:48:08 (3 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇦🇺 aglenday	2026-02-23 02:18:23 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 81.236.211.54 (SE/Sweden/81-236-211-54-no2550.tbcn.telia.com) ... show more (smtpauth) Failed SMTP AUTH login from 81.236.211.54 (SE/Sweden/81-236-211-54-no2550.tbcn.telia.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-02-23T13:17:59.294539+11:00 mail postfix/submission/smtpd[36020]: warning: 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54]: SASL LOGIN authentication failed: (reason unavailable), [email protected] show less	Port Scan
🇵🇱 bmino.pl	2026-02-23 02:02:56 (3 months ago)	Autoban IP(2): 81.236.211.54 - Hostname: 81-236-211-54-no2550.tbcn.telia.com - City: Karlstad - Regi ... show more Autoban IP(2): 81.236.211.54 - Hostname: 81-236-211-54-no2550.tbcn.telia.com - City: Karlstad - Region: Värmland - Country: SE - Location: 59.3793,13.5036 - Organization: AS3301 Telia Company AB - failed attempts. show less	Brute-Force
🇰🇷 Woodie	2026-02-23 00:30:56 (3 months ago)	2026-02-22T19:24:23.009453-05:00 debian sshd[1980412]: Invalid user admin from 81.236.211.54 port 48 ... show more 2026-02-22T19:24:23.009453-05:00 debian sshd[1980412]: Invalid user admin from 81.236.211.54 port 48364 2026-02-22T19:24:23.014621-05:00 debian sshd[1980412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.236.211.54 2026-02-22T19:24:25.290564-05:00 debian sshd[1980412]: Failed password for invalid user admin from 81.236.211.54 port 48364 ssh2 2026-02-22T19:30:53.096559-05:00 debian sshd[1985806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.236.211.54 user=root 2026-02-22T19:30:55.579995-05:00 debian sshd[1985806]: Failed password for root from 81.236.211.54 port 60528 ssh2 ... show less	Brute-Force SSH
🇦🇺 aglenday	2026-02-23 00:15:00 (3 months ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-OpenSSH_7.4	SSH Port Scan
🇹🇷 rtbh.com.tr	2026-02-22 20:11:42 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Paul Smith	2026-02-22 18:43:50 (3 months ago)	Email Auth Brute force attack 15/15 in last day	Brute-Force
Anonymous	2026-02-22 16:30:37 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 chrisj	2026-02-22 14:38:27 (3 months ago)	2026-02-22T14:38:27.294582+00:00 aws postfix/smtps/smtpd[973502]: warning: 81-236-211-54-no2550.tbcn ... show more 2026-02-22T14:38:27.294582+00:00 aws postfix/smtps/smtpd[973502]: warning: 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-02-22T14:38:27.407742+00:00 aws postfix/smtps/smtpd[973502]: lost connection after AUTH from 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54] 2026-02-22T14:38:27.407876+00:00 aws postfix/smtps/smtpd[973502]: disconnect from 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇮🇹 www.tana.it	2026-02-22 09:50:50 (3 months ago)	SMTP auth dictionary attack	Brute-Force
🇦🇺 aglenday	2026-02-22 09:05:05 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 81.236.211.54 (SE/Sweden/81-236-211-54-no2550.tbcn.telia.com) ... show more (smtpauth) Failed SMTP AUTH login from 81.236.211.54 (SE/Sweden/81-236-211-54-no2550.tbcn.telia.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-02-22T20:04:45.395100+11:00 mail postfix/submission/smtpd[3860861]: warning: 81-236-211-54-no2550.tbcn.telia.com[81.236.211.54]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=ardelve2 show less	Port Scan

Showing 1606 to 1620 of 1803 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.84.100.201

🇺🇸 135.233.112.103

🇻🇳 113.171.81.144

🇲🇲 103.203.135.151

🇷🇺 92.241.120.249

🇧🇷 45.205.1.243

🇳🇱 45.148.10.121

🇮🇹 34.17.118.205

🇺🇸 8.229.207.28

🇩🇴 186.149.252.42

🇺🇸 97.122.251.63

🇺🇸 68.235.52.99

🇺🇸 52.176.211.73

🇩🇪 47.91.76.73

🇬🇧 35.203.211.108

🇺🇸 2a09:bac5:a538:1be1::2c7:76

🇺🇸 216.24.219.158

🇬🇧 193.163.125.173

🇵🇪 190.119.63.98

🇮🇳 182.95.230.150