JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.30.98.207

81.30.98.207 was found in our database!

This IP was reported 9,184 times. Confidence of Abuse is 100%: ?

100%

ISP	Atis Omran Sevin PSJ
Usage Type	Commercial
ASN	AS209425
Domain Name	khatbi.org
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.30.98.207

Whois 81.30.98.207

IP Abuse Reports for 81.30.98.207:

This IP address has been reported a total of 9,184 times from 333 distinct sources. 81.30.98.207 was first reported on May 5th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnogoweb	2026-06-01 09:40:23 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 81.30.98.207 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 81.30.98.207 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-01 03:39:43 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=mahdi) 2026-06-01 03:39:55 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=mahdi) 2026-06-01 03:40:15 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=mahdi) 2026-06-01 03:40:16 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=mahdi) 2026-06-01 03:40:19 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=mahdi) show less	Port Scan
🇩🇪 Tamsweb	2026-06-01 09:39:31 (3 days ago)	2026-06-01T11:35:55.426858+02:00 tamsweb postfix/smtpd[1174869]: warning: unknown[81.30.98.207]: SAS ... show more 2026-06-01T11:35:55.426858+02:00 tamsweb postfix/smtpd[1174869]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=stest 2026-06-01T11:36:50.360729+02:00 tamsweb postfix/smtpd[1196953]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=ip-us 2026-06-01T11:37:45.293535+02:00 tamsweb postfix/smtpd[1197136]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=avatar 2026-06-01T11:38:40.101343+02:00 tamsweb postfix/smtpd[1196953]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=spinetail 2026-06-01T11:39:31.051712+02:00 tamsweb postfix/smtpd[1197136]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=realty ... show less	Hacking Brute-Force
🇪🇸 www.pk25.com	2026-06-01 09:35:59 (3 days ago)	2026-06-01T11:34:09.924561+02:00 servidor1 auth[3581241]: pam_unix(dovecot:auth): authentication fai ... show more 2026-06-01T11:34:09.924561+02:00 servidor1 auth[3581241]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=worldwide rhost=81.30.98.207 2026-06-01T11:35:07.941488+02:00 servidor1 auth[3581241]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=stest rhost=81.30.98.207 2026-06-01T11:35:58.443822+02:00 servidor1 auth[3584029]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=ip-us rhost=81.30.98.207 ... show less	Brute-Force
🇩🇪 mueller-nils.com	2026-06-01 09:32:39 (3 days ago)	Jun 1 11:29:00 [host] postfix/smtpd[25401]: warning: unknown[81.30.98.207]: SASL LOGIN authenticati ... show more Jun 1 11:29:00 [host] postfix/smtpd[25401]: warning: unknown[81.30.98.207]: SASL LOGIN authenticati Jun 1 11:29:55 [host] postfix/smtpd[25784]: warning: unknown[81.30.98.207]: SASL LOGIN authenticati Jun 1 11:30:51 [host] postfix/smtpd[21274]: warning: unknown[81.30.98.207]: SASL LOGIN authenticati Jun 1 11:31:45 [host] postfix/smtpd[25784]: warning: unknown[81.30.98.207]: SASL LOGIN authenticati Jun 1 11:32:39 [host] postfix/smtpd[25401]: warning: unknown[81.30.98.207]: SASL LOGIN authenticati show less	Hacking Brute-Force
🇨🇦 craftxbox	2026-06-01 09:31:59 (3 days ago)	SMTP Brute-Force Attempt. HELO/EHLO as 'localhost'. Attempted Username: mauro	Brute-Force
🇧🇬 geddo.in	2026-06-01 09:29:42 (3 days ago)	2026-06-01 03:26:07 login_server authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect ... show more 2026-06-01 03:26:07 login_server authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=nagiosadmin) 2026-06-01 03:27:00 login_server authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=harrison) 2026-06-01 03:27:54 login_server authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=chatbot) 2026-06-01 03:28:48 login_server authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=willow) 2026-06-01 03:29:41 login_server authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=143) ... show less	Brute-Force
🇩🇪 sorgenfrei-it.com	2026-06-01 09:28:35 (3 days ago)	2026-06-01T11:26:42.085493+02:00 mainserver postfix/smtpd[3121869]: warning: unknown[81.30.98.207]: ... show more 2026-06-01T11:26:42.085493+02:00 mainserver postfix/smtpd[3121869]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=nagiosadmin 2026-06-01T11:27:39.123222+02:00 mainserver postfix/smtpd[3121869]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=harrison 2026-06-01T11:28:34.482412+02:00 mainserver postfix/smtpd[3111627]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=chatbot ... show less	Brute-Force
Anonymous	2026-06-01 09:28:22 (3 days ago)	2026-06-01T09:24:43.440071+00:00 nsx postfix/smtpd[263387]: warning: unknown[81.30.98.207]: SASL LOG ... show more 2026-06-01T09:24:43.440071+00:00 nsx postfix/smtpd[263387]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=accesslevel 2026-06-01T09:25:36.072078+00:00 nsx postfix/smtpd[263387]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=programs 2026-06-01T09:26:32.352276+00:00 nsx postfix/smtpd[271665]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=nagiosadmin 2026-06-01T09:27:26.447439+00:00 nsx postfix/smtpd[271665]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=harrison 2026-06-01T09:28:20.278902+00:00 nsx postfix/smtpd[271665]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=chatbot ... show less	Brute-Force
🇺🇸 mnogoweb	2026-06-01 09:24:31 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 81.30.98.207 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 81.30.98.207 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-01 03:23:43 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=o2) 2026-06-01 03:24:02 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=o2) 2026-06-01 03:24:09 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=o2) 2026-06-01 03:24:13 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=o2) 2026-06-01 03:24:29 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=accesslevel) show less	Port Scan
🇳🇱 Godert Jan van Manen	2026-06-01 09:24:02 (3 days ago)	Jun 1 11:22:10 odin postfix/smtpd[12946]: warning: unknown[81.30.98.207]: SASL LOGIN authentication ... show more Jun 1 11:22:10 odin postfix/smtpd[12946]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 1 11:23:07 odin postfix/smtpd[20555]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 1 11:24:02 odin postfix/smtpd[20555]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Brute-Force
🇫🇷 floofy.tech	2026-06-01 09:22:45 (3 days ago)	2026-06-01T11:19:08.048434 yip.floofy.tech postal-smtp[2626274]: 2026-06-01 09:19:08 +0000 WARN Au ... show more 2026-06-01T11:19:08.048434 yip.floofy.tech postal-smtp[2626274]: 2026-06-01 09:19:08 +0000 WARN Authentication failure for 81.30.98.207 trace_id=2F0UT114 component=smtp-server 2026-06-01T11:20:59.948915 yip.floofy.tech postal-smtp[2626274]: 2026-06-01 09:20:59 +0000 WARN Authentication failure for 81.30.98.207 trace_id=DAPMAYZC component=smtp-server 2026-06-01T11:22:44.036364 yip.floofy.tech postal-smtp[2626274]: 2026-06-01 09:22:44 +0000 WARN Authentication failure for 81.30.98.207 trace_id=XS5MGXVK component=smtp-server ... show less	Brute-Force
🇨🇦 craftxbox	2026-06-01 09:16:41 (3 days ago)	SMTP Brute-Force Attempt. HELO/EHLO as 'localhost'. Attempted Username: web14	Brute-Force
🇩🇪 Pz	2026-06-01 09:12:04 (3 days ago)	2026-06-01T09:10:16.650232+00:00 htz2.hosts.pzenix.com postfix/smtpd[621556]: warning: unknown[81.30 ... show more 2026-06-01T09:10:16.650232+00:00 htz2.hosts.pzenix.com postfix/smtpd[621556]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: authentication failure, sasl_username=rfid 2026-06-01T09:11:08.841775+00:00 htz2.hosts.pzenix.com postfix/smtpd[621626]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: authentication failure, sasl_username=lisa 2026-06-01T09:12:03.656597+00:00 htz2.hosts.pzenix.com postfix/smtpd[621626]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: authentication failure, sasl_username=cherry ... show less	Brute-Force
🇩🇪 Tamsweb	2026-06-01 09:10:51 (3 days ago)	2026-06-01T11:07:13.374398+02:00 tamsweb postfix/smtpd[1185849]: warning: unknown[81.30.98.207]: SAS ... show more 2026-06-01T11:07:13.374398+02:00 tamsweb postfix/smtpd[1185849]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=wjb 2026-06-01T11:08:03.205738+02:00 tamsweb postfix/smtpd[1180077]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=gsk 2026-06-01T11:09:02.136175+02:00 tamsweb postfix/smtpd[1185849]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=mimi 2026-06-01T11:09:55.035697+02:00 tamsweb postfix/smtpd[1185849]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=birmingham 2026-06-01T11:10:51.217097+02:00 tamsweb postfix/smtpd[1180077]: warning: unknown[81.30.98.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=rfid ... show less	Hacking Brute-Force
🇺🇸 mnogoweb	2026-06-01 09:08:23 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 81.30.98.207 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; ... show more (smtpauth) Failed SMTP AUTH login from 81.30.98.207 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-06-01 03:07:38 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=gsk) 2026-06-01 03:07:57 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=gsk) 2026-06-01 03:08:03 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=gsk) 2026-06-01 03:08:03 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=gsk) 2026-06-01 03:08:19 login authenticator failed for (localhost) [81.30.98.207]: 535 Incorrect authentication data (set_id=mimi) show less	Port Scan

Showing 121 to 135 of 9184 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.127.62.32

🇨🇴 186.179.100.0

🇭🇰 185.239.84.249

🇩🇪 164.92.244.132

🇳🇱 77.83.39.94

🇩🇪 64.226.65.160

🇺🇸 64.207.225.55

🇨🇳 49.112.136.3

🇺🇸 18.226.72.170

🇭🇰 8.210.88.252

🇺🇸 2602:80d:1008::23

🇰🇷 220.126.215.120

🇮🇶 212.237.122.106

🇨🇳 180.188.45.179

🇦🇫 180.94.74.82

🇧🇷 177.76.134.111

🇵🇰 121.52.147.5

🇷🇺 95.165.142.8

🇷🇺 94.25.40.30

🇷🇺 81.22.51.64