JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.61.35.234

196.61.35.234 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 38%: ?

38%

ISP	Comsys (GH) Limited
Usage Type	Fixed Line ISP
ASN	AS37012
Domain Name	comsysghana.com
Country	🇬🇭 Ghana
City	Accra, Greater Accra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.61.35.234

Whois 196.61.35.234

IP Abuse Reports for 196.61.35.234:

This IP address has been reported a total of 87 times from 47 distinct sources. 196.61.35.234 was first reported on September 21st 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-18 15:33:09 (1 day ago)	NOQUEUE - IP: 196.61.35.234 - Jun 18 17:33:08 plesk postfix/smtpd[3553740]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 196.61.35.234 - Jun 18 17:33:08 plesk postfix/smtpd[3553740]: NOQUEUE: reject: RCPT from unknown[196.61.35.234]: 554 5.7.1 Service unavailable; Client host [196.61.35.234] blocked using dnsbl-1.uceprotect.net; IP 196.61.35.234 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.61.35.234; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.61.35.234> show less	Email Spam
🇺🇸 NXTwoThou	2026-06-16 18:39:46 (3 days ago)	Spam	Email Spam
🇨🇿 interconnect.cz	2026-06-07 19:06:28 (1 week ago)	[07/Jun/2026 21:06:28] IP address 196.61.35.234 found in DNS blacklist SpamHaus SBL-XBL, mail from < ... show more [07/Jun/2026 21:06:28] IP address 196.61.35.234 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 21:06:28] IP address 196.61.35.234 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> ... show less	Brute-Force Email Spam
🇨🇿 interconnect.cz	2026-06-07 18:32:05 (1 week ago)	[07/Jun/2026 20:32:04] IP address 196.61.35.234 found in DNS blacklist SpamHaus SBL-XBL, mail from < ... show more [07/Jun/2026 20:32:04] IP address 196.61.35.234 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 20:32:04] IP address 196.61.35.234 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [07/Jun/2026 20:32:04] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 196.61.35.234 ... show less	Brute-Force Email Spam
🇩🇪 filstal.org	2026-05-27 22:32:15 (3 weeks ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇨🇭 Origon	2026-05-26 13:57:59 (3 weeks ago)	NOQUEUE - IP: 196.61.35.234 - May 26 15:57:33 plesk postfix/smtpd[3176037]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 196.61.35.234 - May 26 15:57:33 plesk postfix/smtpd[3176037]: NOQUEUE: reject: RCPT from unknown[196.61.35.234]: 554 5.7.1 Service unavailable; Client host [196.61.35.234] blocked using dnsbl-1.uceprotect.net; IP 196.61.35.234 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.61.35.234; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.61.35.234> show less	Email Spam
🇫🇷 cocquerez.com	2026-05-25 19:15:25 (3 weeks ago)	From DMARC report: sender email spoofing for 2 times	Spoofing
🇳🇱 soverin	2026-05-25 16:50:27 (3 weeks ago)	spam	Email Spam
🇬🇧 PeravixGroup	2026-05-21 17:08:45 (4 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-14 01:23:38 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇿 lp	2026-05-05 06:20:41 (1 month ago)	Email account brute force: 1 attempts were recorded from 196.61.35.234 2026-05-05T08:00:28+02:00 war ... show more Email account brute force: 1 attempts were recorded from 196.61.35.234 2026-05-05T08:00:28+02:00 warning: unknown[196.61.35.234]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇭 Origon	2026-04-29 14:06:29 (1 month ago)	NOQUEUE - IP: 196.61.35.234 - Apr 29 16:06:29 plesk postfix/smtpd[2749300]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 196.61.35.234 - Apr 29 16:06:29 plesk postfix/smtpd[2749300]: NOQUEUE: reject: RCPT from unknown[196.61.35.234]: 554 5.7.1 Service unavailable; Client host [196.61.35.234] blocked using dnsbl-1.uceprotect.net; IP 196.61.35.234 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.61.35.234; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.61.35.234> show less	Email Spam
🇫🇷 Dampen59	2026-04-22 11:47:01 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 196.61.35.234 (GH/Ghana/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 196.61.35.234 (GH/Ghana/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-22 06:45:56 dovecot_login authenticator failed for H=(BJVSjPq) [196.61.35.234]:41775: 535 Incorrect authentication data ([email protected]) 2026-04-22 06:46:05 dovecot_login authenticator failed for H=(fPlYQhx) [196.61.35.234]:41791: 535 Incorrect authentication data ([email protected]) 2026-04-22 06:46:18 dovecot_login authenticator failed for H=(113Pim) [196.61.35.234]:41823: 535 Incorrect authentication data ([email protected]) 2026-04-22 06:46:38 dovecot_login authenticator failed for H=(8wJqb0n) [196.61.35.234]:41871: 535 Incorrect authentication data ([email protected]) 2026-04-22 06:46:58 dovecot_login authenticator failed for H=(P9PtYIk) [196.61.35.234]:41951: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇨🇭 Origon	2026-04-20 14:57:33 (1 month ago)	NOQUEUE - IP: 196.61.35.234 - Apr 20 16:57:33 plesk postfix/smtpd[2733256]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 196.61.35.234 - Apr 20 16:57:33 plesk postfix/smtpd[2733256]: NOQUEUE: reject: RCPT from unknown[196.61.35.234]: 554 5.7.1 Service unavailable; Client host [196.61.35.234] blocked using dnsbl-1.uceprotect.net; IP 196.61.35.234 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=196.61.35.234; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<196.61.35.234> show less	Email Spam
🇳🇱 Cloud86 B.V.	2026-04-20 14:52:16 (1 month ago)	categories: Email Spam	Email Spam

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 185.194.204.183

🇩🇪 104.248.130.34

🇺🇸 45.33.73.114

🇬🇧 213.171.208.62

🇧🇷 190.89.184.108

🇧🇷 189.90.55.242

🇺🇸 172.174.234.168

🇰🇷 61.75.245.101

🇬🇧 35.203.210.88

🇺🇸 18.191.47.251

🇺🇸 172.202.117.179

🇺🇸 135.222.40.118

🇻🇳 113.189.174.218

🇺🇸 107.167.122.24

🇫🇷 84.17.43.206

🇩🇴 200.124.70.51

🇳🇱 193.176.31.201

🇧🇴 181.188.176.242

🇦🇷 181.116.220.252

🇸🇪 45.84.107.54