This IP address has been reported a total of
80
times from
46 distinct
sources.
196.216.14.64 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Switzerland
with 4
reports;
Germany
with 1
report;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Email Spam
6
times;
Brute-Force
1
time;
Exploited Host
1
time;
Port Scan
1
time;
Web Spam
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
MikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-21 20:46 UTC. Part of ...
show moreMikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-21 20:46 UTC. Part of a distributed credential-stuffing campaign: 79 distinct source IPs attempted the same username against our infrastructure within the same hour. Automated detection. AS36913 TELEKOM NETWORKS MALAWI LTD.
show less
NOQUEUE - IP: 196.216.14.64 - Sep 16 16:40:51 plesk postfix/smtpd[17754]: NOQUEUE: reject: RCPT fro ...
show moreNOQUEUE - IP: 196.216.14.64 - Sep 16 16:40:51 plesk postfix/smtpd[17754]: NOQUEUE: reject: RCPT from unknown[196.216.14.64]: 554 5.7.1 Service unavailable; Client host [196.216.14.64] blocked using dnsbl-2.uceprotect.net; Net 196.216.12.0/22 is UCEPROTECT-Level2 listed because 9 impacts are seen from TELEKOM-NETWORKS-MALAWI, MW/AS36913 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.216.14.64 / Net 196.216.8.0/21 is UCEPROTECT-Level2 listed because 31 impacts are seen from TNM, MW/AS37294 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.216.14.64; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.216.14.64>
show less
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show moreHoneypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
NOQUEUE - IP: 196.216.14.64 - Jun 11 10:15:08 plesk postfix/smtpd[3160903]: NOQUEUE: reject: RCPT f ...
show moreNOQUEUE - IP: 196.216.14.64 - Jun 11 10:15:08 plesk postfix/smtpd[3160903]: NOQUEUE: reject: RCPT from unknown[196.216.14.64]: 554 5.7.1 Service unavailable; Client host [196.216.14.64] blocked using dnsbl-2.uceprotect.net; Net 196.216.12.0/22 is UCEPROTECT-Level2 listed because 15 impacts are seen from TELEKOM-NETWORKS-MALAWI, MW/AS36913 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.216.14.64 / Net 196.216.8.0/21 is UCEPROTECT-Level2 listed because 42 impacts are seen from TNM, MW/AS37294 there. See: http://www.uceprotect.net/rblcheck.php?ipr=196.216.14.64 / Net 196.216.14.0/23 is UCEPROTECT-Level2 listed because 6 impacts are seen from TELEKOM-NETWORKS-MALAWI, MW/AS36913 there. See: http://www.ucepro; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[196.216.14.64]>
show less
[07/Jun/2026 19:10:48] IP address 196.216.14.64 found in DNS blacklist SpamHaus SBL-XBL, mail from < ...
show more[07/Jun/2026 19:10:48] IP address 196.216.14.64 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]>
[07/Jun/2026 19:10:48] IP address 196.216.14.64 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]>
[07/Jun/2026 19:10:48] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 196.216.14.64
...
show less
NOQUEUE - IP: 196.216.14.64 - May 30 11:09:33 plesk postfix/smtpd[2422120]: NOQUEUE: reject: RCPT f ...
show moreNOQUEUE - IP: 196.216.14.64 - May 30 11:09:33 plesk postfix/smtpd[2422120]: NOQUEUE: reject: RCPT from unknown[196.216.14.64]: 554 5.7.1 Service unavailable; Client host [196.216.14.64] blocked using dnsbl-1.uceprotect.net; IP 196.216.14.64 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.216.14.64; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.216.14.64>
show less
