JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.189.172.66

Recent Activity

Abuse Confidence Score

27% Elevated

13 reports

10 reporters · latest 2 days ago

ISP: Telekom Slovenije d.d.
Usage Type: Fixed Line ISP
ASN: AS5603
Domain Name: telekom.si
Country: 🇸🇮 Slovenia
City: Podcetrtek, Municipality of Podcetrtek

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

13 from 10 distinct reporters

First reported

October 30th 2023

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 1 🇩🇪 Germany 1 🇪🇸 Spain 1

Most common categories Email Spam 3 Hacking 2 Brute-Force 2 Web App Attack 1 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-07 08:15:03 UTC · (2 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /catalog/product_compare/add/product/2388/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvYnJhbmRzL2V4dHJvbi9hdWRpby9taXhlci1wcm9jZXNzb3IuaHRtbD9kaXI9YXNjJmFtcDttb2RlPWdyaWQmYW1wO29yZGVyPW1vc3Rfdmlld2Vk/form_key/OsgjBuy4kePIAtWx/ \| UA: Mozilla/5.0 (Android 5.0; Mobile; rv:60.0) Gecko/60.0 Firefox/60.0 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇪🇸 Gem	2026-10-27 14:18:34 UTC · (1 week ago)	Mail server brute-force access attempt. 6 times	Brute-Force
🇩🇪 FD-IX	2026-10-10 16:54:08 UTC · (4 weeks ago)	SMTP connection rejected due to missing valid reverse DNS (PTR).	Email Spam
🇨🇭 Origon	2026-10-04 15:22:51 UTC · (1 month ago)	NOQUEUE - IP: 193.189.172.66 - Oct 4 17:22:51 plesk postfix/smtpd[2589288]: NOQUEUE: reject: RCPT from unknown[193.189.172.66]: 554 5.7.1 Service unavailable; Client host [193.189.172.66] blocked using all.s5h.net; See http://s5h.net/rbl; from=<veri ... show more NOQUEUE - IP: 193.189.172.66 - Oct 4 17:22:51 plesk postfix/smtpd[2589288]: NOQUEUE: reject: RCPT from unknown[193.189.172.66]: 554 5.7.1 Service unavailable; Client host [193.189.172.66] blocked using all.s5h.net; See http://s5h.net/rbl; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<verifier.local> show less	Email Spam
🇷🇸 Smel	2026-10-03 14:49:13 UTC · (1 month ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇺🇸 xmission.com	2026-09-19 09:30:08 UTC · (1 month ago)	Blocked by UFW (TCP on 54809) Source port: 35597 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 193.189.172.66) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇳🇱 ipoac.nl	2026-09-02 20:13:01 UTC · (2 months ago)	2026-09-02T22:12:59.237766+02:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[193.189.172.66]:57544: 554 5.7.1 <campagnedem15libero.it>: Relay access denied; from=<riolinagmail.com> to=<campagnedem15libero.it> proto=ESMTP helo=<[127 ... show more 2026-09-02T22:12:59.237766+02:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[193.189.172.66]:57544: 554 5.7.1 <campagnedem15libero.it>: Relay access denied; from=<riolinagmail.com> to=<campagnedem15libero.it> proto=ESMTP helo=<[127.0.1.1]> 2026-09-02T22:12:59.255553+02:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[193.189.172.66]:59312: 554 5.7.1 <campagnedem15libero.it>: Relay access denied; from=<riolinagmail.com> to=<campagnedem15libero.it> proto=ESMTP helo=<[127.0.1.1]> 2026-09-02T22:12:59.307370+02:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[193.189.172.66]:52908: 554 5.7.1 <campagnedem15libero.it>: Relay access denied; from=<riolinagmail.com> to=<campagnedem15libero.it> proto=ESMTP helo=<[127.0.1.1]> 2026-09-02T22:12:59.363726+02:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[193.189.172.66]:58008: 554 5.7.1 <campagnedem15libero.it>: Relay access denied; from=<riolinagmail.com> to=<campagnedem15*libero.it> proto=ESMTP helo= show less	Brute-Force
🇺🇸 鬼影233	2026-09-01 01:10:09 UTC · (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇨🇭 Origon	2026-08-11 04:40:43 UTC · (2 months ago)	NOQUEUE - IP: 193.189.172.66 - Aug 11 06:40:42 plesk postfix/smtpd[3687363]: NOQUEUE: reject: RCPT from unknown[193.189.172.66]: 554 5.7.1 Service unavailable; Client host [193.189.172.66] blocked using dnsbl-1.uceprotect.net; IP 193.189.172.66 is U ... show more NOQUEUE - IP: 193.189.172.66 - Aug 11 06:40:42 plesk postfix/smtpd[3687363]: NOQUEUE: reject: RCPT from unknown[193.189.172.66]: 554 5.7.1 Service unavailable; Client host [193.189.172.66] blocked using dnsbl-1.uceprotect.net; IP 193.189.172.66 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=193.189.172.66; from=<[email protected]> to=<REDACTED@REDACTED> proto=SMTP helo=<LAPTOP-UGBSKDOC> show less	Email Spam
🇨🇭 Origon	2026-06-16 07:04:00 UTC · (4 months ago)	NOQUEUE - IP: 193.189.172.66 - Jun 16 09:04:00 plesk postfix/smtpd[3336363]: NOQUEUE: reject: RCPT from unknown[193.189.172.66]: 554 5.7.1 Service unavailable; Client host [193.189.172.66] blocked using dnsbl-1.uceprotect.net; IP 193.189.172.66 is U ... show more NOQUEUE - IP: 193.189.172.66 - Jun 16 09:04:00 plesk postfix/smtpd[3336363]: NOQUEUE: reject: RCPT from unknown[193.189.172.66]: 554 5.7.1 Service unavailable; Client host [193.189.172.66] blocked using dnsbl-1.uceprotect.net; IP 193.189.172.66 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=193.189.172.66; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<verifier.local> show less	Email Spam
🇺🇸 xmission.com	2026-06-12 06:41:03 UTC · (4 months ago)	Blocked by UFW (TCP on 25) Source port: 55266 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 193.189.172.66) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Email Spam
🇺🇸 hostseries	2024-05-15 03:55:40 UTC · (2 years ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2023-10-30 01:05:35 UTC · (3 years ago)	postfix	Email Spam Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:923:1000:2700:c22f:afdf:f6d6

🇨🇦 217.181.83.168

🇦🇷 190.48.65.72

🇧🇷 187.85.109.137

🇦🇷 142.249.122.3

🇳🇱 64.205.72.66

🇳🇱 51.158.195.49

🇧🇪 34.78.148.69

🇧🇪 34.22.154.192

🇷🇺 2.63.139.163

🇳🇱 195.178.110.30

🇺🇦 188.163.27.95

🇧🇷 187.112.62.114

🇻🇳 171.252.163.157

🇸🇬 143.198.214.25

🇦🇺 120.23.162.31

🇿🇦 102.66.152.131

🇨🇦 70.24.14.24

🇺🇸 66.132.195.28

🇨🇳 49.86.41.78