JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.216.11.166

196.216.11.166 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 37%: ?

37%

ISP	TELEKOM NETWORKS MALAWI LTD
Usage Type	Fixed Line ISP
ASN	AS36913
Domain Name	tnm.co.mw
Country	🇲🇼 Malawi
City	Blantyre, Southern Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.216.11.166

Whois 196.216.11.166

IP Abuse Reports for 196.216.11.166:

This IP address has been reported a total of 22 times from 13 distinct sources. 196.216.11.166 was first reported on February 5th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-11 14:09:18 (23 hours ago)	NOQUEUE - IP: 196.216.11.166 - Jun 11 16:09:18 plesk postfix/smtpd[3622119]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 196.216.11.166 - Jun 11 16:09:18 plesk postfix/smtpd[3622119]: NOQUEUE: reject: RCPT from unknown[196.216.11.166]: 554 5.7.1 Service unavailable; Client host [196.216.11.166] blocked using dnsbl-2.uceprotect.net; Net 196.216.8.0/21 is UCEPROTECT-Level2 listed because 44 impacts are seen from TNM, MW/AS37294 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.216.11.166 / Net 196.216.8.0/22 is UCEPROTECT-Level2 listed because 28 impacts are seen from TNM, MW/AS37294 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.216.11.166 / Net 196.216.10.0/23 is UCEPROTECT-Level2 listed because 25 impacts are seen from TELEKOM-NETWORKS-MALAWI, MW/AS36913 there. See: http://www.uceprotect.net/rblcheck.; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[196.216.11.166]> show less	Email Spam
🇸🇪 KIDOS	2026-06-08 09:55:17 (4 days ago)	Apache monitor: ssrf_log_spoofing	Brute-Force SSH
🇳🇱 DrLex0	2026-05-31 11:38:53 (1 week ago)	2026-05-31T11:38:41.626578+00:00 [host] postfix/smtpd[783763]: NOQUEUE: reject: RCPT from unknown[19 ... show more 2026-05-31T11:38:41.626578+00:00 [host] postfix/smtpd[783763]: NOQUEUE: reject: RCPT from unknown[196.216.11.166]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [196.216.11.166]; from=<admin@redacted> to=<admin@redacted> proto=ESMTP helo=<196.216.11.166> 2026-05-31T11:38:50.640517+00:00 [host] postfix/smtpd[783763]: NOQUEUE: reject: RCPT from unknown[196.216.11.166]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [196.216.11.166]; from=<admin@redacted> to=<admin@redacted> proto=ESMTP helo=<196.216.11.166> 2026-05-31T11:38:53.661804+00:00 [host] postfix/smtpd[783763]: NOQUEUE: reject: RCPT from unknown[196.216.11.166]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [196.216.11.166]; from=<admin@redacted> to=<admin@redacted> proto=ESMTP helo=<196.216.11.166> show less	Brute-Force
🇩🇪 filstal.org	2026-05-31 07:56:05 (1 week ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇩🇪 Viveronese	2026-05-31 06:46:25 (1 week ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-05-30 14:20:31 (1 week ago)	NOQUEUE - IP: 196.216.11.166 - May 30 16:20:31 plesk postfix/smtpd[2812114]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 196.216.11.166 - May 30 16:20:31 plesk postfix/smtpd[2812114]: NOQUEUE: reject: RCPT from unknown[196.216.11.166]: 554 5.7.1 Service unavailable; Client host [196.216.11.166] blocked using dnsbl-1.uceprotect.net; IP 196.216.11.166 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.216.11.166; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.216.11.166> show less	Email Spam
🇩🇪 filstal.org	2026-05-27 22:40:35 (2 weeks ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇨🇭 Origon	2026-05-27 12:41:49 (2 weeks ago)	NOQUEUE - IP: 196.216.11.166 - May 27 14:41:48 plesk postfix/smtpd[980920]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 196.216.11.166 - May 27 14:41:48 plesk postfix/smtpd[980920]: NOQUEUE: reject: RCPT from unknown[196.216.11.166]: 554 5.7.1 Service unavailable; Client host [196.216.11.166] blocked using dnsbl-1.uceprotect.net; IP 196.216.11.166 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.216.11.166; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.216.11.166> show less	Email Spam
🇳🇱 Cloud86 B.V.	2026-05-14 20:52:49 (4 weeks ago)	categories: Email Spam	Email Spam
🇬🇧 PeravixGroup	2026-05-13 01:23:00 (4 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇭 Origon	2026-04-30 10:06:30 (1 month ago)	NOQUEUE - IP: 196.216.11.166 - Apr 30 12:06:30 plesk postfix/smtpd[240160]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 196.216.11.166 - Apr 30 12:06:30 plesk postfix/smtpd[240160]: NOQUEUE: reject: RCPT from unknown[196.216.11.166]: 554 5.7.1 Service unavailable; Client host [196.216.11.166] blocked using dnsbl-1.uceprotect.net; IP 196.216.11.166 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.216.11.166; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.216.11.166> show less	Email Spam
🇨🇿 interconnect.cz	2026-03-21 18:03:51 (2 months ago)	[21/Mar/2026 19:03:50] IP address 196.216.11.166 found in DNS blacklist SpamHaus SBL-XBL, mail from ... show more [21/Mar/2026 19:03:50] IP address 196.216.11.166 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [21/Mar/2026 19:03:50] IP address 196.216.11.166 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [21/Mar/2026 19:03:50] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 196.216.11.166 ... show less	Brute-Force Email Spam
🇵🇹 rnl	2026-03-11 17:04:08 (3 months ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇪🇸 www.pk25.com	2026-03-08 20:22:07 (3 months ago)	2026-03-08 21:22:07 H=(cogetel-181-37-62-202.online.com.kh) [196.216.11.166] sender verify fail for ... show more 2026-03-08 21:22:07 H=(cogetel-181-37-62-202.online.com.kh) [196.216.11.166] sender verify fail for <[email protected]>: Unrouteable address 2026-03-08 21:22:07 H=(cogetel-181-37-62-202.online.com.kh) [196.216.11.166] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed ... show less	Brute-Force
🇪🇸 www.pk25.com	2026-03-06 19:03:50 (3 months ago)	2026-03-06 20:00:50 H=(196.216.11.166) [196.216.11.166] sender verify fail for <bpqxcftk@adycoaduana ... show more 2026-03-06 20:00:50 H=(196.216.11.166) [196.216.11.166] sender verify fail for <[email protected]>: Unrouteable address 2026-03-06 20:00:50 H=(196.216.11.166) [196.216.11.166] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-03-06 20:03:49 H=(196.216.11.166) [196.216.11.166] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.154.142.208

🇧🇷 177.85.247.230

🇳🇱 176.65.139.218

🇺🇸 144.202.82.88

🇹🇷 141.98.115.209

🇹🇭 118.194.250.31

🇺🇸 100.29.192.9

🇺🇿 95.214.211.233

🇱🇹 91.224.92.120

🇨🇦 85.217.149.41

🇷🇴 80.94.92.167

🇶🇦 78.100.228.181

🇺🇸 66.132.195.62

🇺🇸 66.132.186.196

🇬🇧 62.56.246.76

🇺🇸 57.141.20.35

🇺🇸 47.251.117.187

🇳🇴 20.251.193.202

🇺🇸 20.102.105.170

🇰🇿 2.135.97.241