JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.0.231.254

138.0.231.254 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 32%: ?

32%

ISP	CATELSA
Usage Type	Fixed Line ISP
ASN	AS263725
Domain Name	catelsa.hn
Country	🇭🇳 Honduras
City	San Pedro Sula, Cortes Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.0.231.254

Whois 138.0.231.254

IP Abuse Reports for 138.0.231.254:

This IP address has been reported a total of 29 times from 15 distinct sources. 138.0.231.254 was first reported on December 29th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 unhfree.net	2026-09-16 01:25:17 (1 day ago)	Sep 16 03:25:15 canopus postfix/smtpd[1306229]: NOQUEUE: reject: RCPT from unknown[138.0.231.254]: 5 ... show more Sep 16 03:25:15 canopus postfix/smtpd[1306229]: NOQUEUE: reject: RCPT from unknown[138.0.231.254]: 554 5.7.1 Service unavailable; Client host [138.0.231.254] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/138.0.231.254; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<googlemail.com> Sep 16 03:25:16 canopus postfix/smtpd[1306229]: NOQUEUE: reject: RCPT from unknown[138.0.231.254]: 554 5.7.1 Service unavailable; Client host [138.0.231.254] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/138.0.231.254; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<googlemail.com> Sep 16 03:25:16 canopus postfix/smtpd[1306229]: NOQUEUE: reject: RCPT from unknown[138.0.231.254]: 554 5.7.1 Service unavailable; Client host [138.0.231.254] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/138.0.231.254; from=<[email protected]> to=<cmrdb3sjp4gk@privacy ... show less	Brute-Force Exploited Host
🇺🇸 gui-ying233	2026-09-05 20:06:27 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 EGP Abuse Dept	2026-08-29 00:06:01 (2 weeks ago)	Scraping webshop URLs (www.elliptigobenelux.com), likely botnet drone	Bad Web Bot Exploited Host
🇪🇸 el-brujo	2026-08-27 17:46:07 (2 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
Anonymous	2026-08-27 17:15:33 (2 weeks ago)	Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/13075/form_key/0otGPcHlTFDXMEo8/ \| UA: Mozilla/5.0 (Windows NT 6.0; fo-FO; rv:1.9.2.20) Gecko/8992-06-21 04:11:55.090302 Firefox/3.6.8 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-27 14:50:29 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 15:52:08 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-08-04 04:41:01 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -65.925 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -65.925 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇫🇷 Sklurk	2026-07-19 06:17:13 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 MatStef132	2026-07-15 21:06:44 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇩🇪 HandyTreff.de	2026-06-20 20:34:54 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.159 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.159 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.4 show less	Web App Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇨🇳 ThreatBook.io	2026-05-07 00:57:22 (4 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/138.0.231.254	SSH
🇳🇱 EGP Abuse Dept	2026-01-17 03:02:43 (8 months ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇨🇦 polycoda	2025-12-13 14:55:18 (9 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.26

🇻🇳 115.146.121.179

🇮🇳 103.214.63.49

🇷🇴 80.94.92.55

🇺🇸 37.140.223.35

🇭🇰 35.241.108.71

🇧🇷 16.5.0.181

🇧🇷 16.5.0.166

🇺🇸 207.45.31.123

🇨🇲 195.24.215.70

🇺🇸 162.216.150.78

🇺🇸 134.33.66.210

🇳🇱 91.92.42.51

🇦🇹 86.59.84.55

🇳🇱 45.156.128.106

🇨🇦 45.3.40.77

🇧🇪 34.156.206.32

🇳🇱 213.177.179.62

🇳🇱 185.242.226.19

🇺🇸 185.180.141.96