JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.30.98.27

81.30.98.27 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 100%: ?

100%

ISP	Atis Omran Sevin PSJ
Usage Type	Commercial
ASN	AS209425
Domain Name	khatbi.org
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.30.98.27

Whois 81.30.98.27

IP Abuse Reports for 81.30.98.27:

This IP address has been reported a total of 107 times from 59 distinct sources. 81.30.98.27 was first reported on July 7th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 justmail.es	2026-07-08 08:18:34 (4 minutes ago)	Rude login attack (10 tries in 1d)	Brute-Force
🇩🇪 reznekcs	2026-07-08 07:59:48 (23 minutes ago)	F2B postfix ban. Logs: 2026-07-08T09:59:48.092195+02:00 isp postfix/smtpd[3947229]: warning: unknown ... show more F2B postfix ban. Logs: 2026-07-08T09:59:48.092195+02:00 isp postfix/smtpd[3947229]: warning: unknown[81.30.98.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=test 2026-07-08T09:59:48.123171+02:00 isp postfix/smtpd[3947229]: disconnect from unknown[81.30.98.27] ehlo=1 auth=0/1 rset=1 commands=2/3 show less	Brute-Force Web App Attack
🇬🇧 David Gebler	2026-07-08 07:56:03 (26 minutes ago)	Jul 8 07:56:03 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show more Jul 8 07:56:03 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=81.30.98.27 show less	Brute-Force Email Spam
🇺🇸 mnogoweb	2026-07-08 07:38:03 (44 minutes ago)	(smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-08 01:05:23 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-08 01:19:22 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-08 01:20:24 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-08 01:34:41 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-08 01:37:59 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) show less	Port Scan
🇦🇺 brocococonut	2026-07-08 06:51:55 (1 hour ago)	2026-07-08 09:15:26 dovecot_login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect ... show more 2026-07-08 09:15:26 dovecot_login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-08 16:01:50 dovecot_login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-08 16:01:50 dovecot_login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-08 16:51:55 dovecot_login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-08 16:51:55 dovecot_login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) ... show less	Brute-Force
🇺🇸 mnogoweb	2026-07-08 06:47:56 (1 hour ago)	(smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-08 00:15:25 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-08 00:29:02 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-08 00:29:54 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-08 00:44:24 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-08 00:47:54 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) show less	Port Scan
🇷🇴 EasyNet Consulting	2026-07-08 06:23:02 (1 hour ago)	2026-07-08T07:53:54.007942+03:00 EmailStorage postfix/smtpd[2130384]: warning: unknown[81.30.98.27]: ... show more 2026-07-08T07:53:54.007942+03:00 EmailStorage postfix/smtpd[2130384]: warning: unknown[81.30.98.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin 2026-07-08T07:54:49.375398+03:00 EmailStorage postfix/smtpd[2130384]: warning: unknown[81.30.98.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin 2026-07-08T08:03:03.378932+03:00 EmailStorage postfix/smtpd[2130588]: warning: unknown[81.30.98.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin 2026-07-08T08:15:56.459426+03:00 EmailStorage postfix/smtpd[2130973]: warning: unknown[81.30.98.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin 2026-07-08T08:33:41.465427+03:00 EmailStorage postfix/smtpd[2131385]: warning: unknown[81.30.98.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin 2026-07-08T08:42:39.393327+03:00 EmailStorage postfix/smtpd[2131707]: warning: unknown[81.30.98.27]: SASL LOGIN aut ... show less	Brute-Force SSH
🇩🇪 reznekcs	2026-07-08 06:19:43 (2 hours ago)	F2B postfix ban. Logs: 2026-07-08T08:19:42.234914+02:00 isp postfix/smtpd[3858777]: warning: unknown ... show more F2B postfix ban. Logs: 2026-07-08T08:19:42.234914+02:00 isp postfix/smtpd[3858777]: warning: unknown[81.30.98.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=test 2026-07-08T08:19:42.273646+02:00 isp postfix/smtpd[3858777]: disconnect from unknown[81.30.98.27] ehlo=1 auth=0/1 rset=1 commands=2/3 show less	Brute-Force Web App Attack
🇩🇪 justmail.es	2026-07-08 06:17:34 (2 hours ago)	Rude login attack (7 tries in 1d)	Brute-Force
🇬🇧 David Gebler	2026-07-08 06:15:35 (2 hours ago)	Jul 8 06:15:35 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show more Jul 8 06:15:35 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=81.30.98.27 show less	Brute-Force Email Spam
🇫🇷 tecnicorioja	2026-07-08 06:02:15 (2 hours ago)	SASL LOGIN authentication failed Jul 08 04:02:22	Brute-Force
🇺🇸 mnogoweb	2026-07-08 05:58:07 (2 hours ago)	(smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-07 23:26:02 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-07 23:39:35 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-07 23:40:35 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-07 23:54:36 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-07 23:58:04 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) show less	Port Scan
🇳🇱 jetron	2026-07-08 05:25:51 (2 hours ago)	unauthorized login attempt @ mailgarant.jetron.com	Brute-Force
🇺🇸 mnogoweb	2026-07-08 05:09:01 (3 hours ago)	(smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 81.30.98.27 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-07 22:36:52 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=test) 2026-07-07 22:50:46 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-07 22:52:08 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-07 23:05:35 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) 2026-07-07 23:08:56 login authenticator failed for (localhost) [81.30.98.27]: 535 Incorrect authentication data (set_id=admin) show less	Port Scan
🇩🇪 paneologist	2026-07-08 04:54:29 (3 hours ago)	2026-07-07T23:10:22.744674alpha auth\[875\]: pam_unix\(dovecot:auth\): authentication failure\; logn ... show more 2026-07-07T23:10:22.744674alpha auth\[875\]: pam_unix\(dovecot:auth\): authentication failure\; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=81.30.98.27 2026-07-07T23:10:24.983424alpha auth\[875\]: pam_unix\(dovecot:auth\): authentication failure\; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=81.30.98.27 2026-07-08T00:03:46.223921alpha auth\[30431\]: pam_unix\(dovecot:auth\): authentication failure\; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=81.30.98.27 2026-07-08T00:03:48.986532alpha auth\[30431\]: pam_unix\(dovecot:auth\): authentication failure\; logname= uid=0 euid=0 tty=dovecot ruser=admin rhost=81.30.98.27 2026-07-08T00:55:08.360060alpha auth\[31815\]: pam_unix\(dovecot:auth\): authentication failure\; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=81.30.98.27 2026-07-08T00:55:09.888464alpha auth\[30303\]: pam_unix\(dovecot:auth\): authentication failure\; logname= uid=0 euid=0 tty=dovecot ruser=test rhost=81.30.98.27 2026-07-08T01:47:32.445069alpha auth\[29676\]: pam_unix\(dov show less	Brute-Force

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.134.192.1

🇧🇷 187.110.238.50

🇸🇬 172.188.89.41

🇭🇰 103.56.115.187

🇫🇷 84.247.136.70

🇺🇸 54.173.255.233

🇺🇸 17.241.75.42

🇺🇸 215.121.152.171

🇺🇸 205.210.31.47

🇲🇩 195.178.106.224

🇧🇷 186.251.71.202

🇧🇷 186.208.231.41

🇪🇨 186.68.83.104

🇺🇸 162.241.132.172

🇬🇧 157.245.34.56

🇺🇸 134.123.212.242

🇺🇸 132.148.155.138

🇮🇳 103.241.45.120

🇨🇳 101.126.30.240

🇺🇸 64.62.197.8