JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.254.118.54

192.254.118.54 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	SendGrid, Inc.
Usage Type	Commercial
ASN	AS11377
Hostname(s)	o2.email.wetransfer.com
Domain Name	twilio.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.254.118.54

Whois 192.254.118.54

IP Abuse Reports for 192.254.118.54:

This IP address has been reported a total of 14 times from 12 distinct sources. 192.254.118.54 was first reported on May 14th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 rubixstudios	2026-05-13 16:00:02 (1 month ago)	Confirmed Spam: System level Exim filters - Pattern and Longtail Keywords	Email Spam
🇮🇹 Pengu	2026-04-13 04:00:04 (2 months ago)	Malicious email activity detected by MSSP SOC	Email Spam Phishing
🇫🇷 solution.it	2026-03-06 09:38:48 (3 months ago)		Email Spam
🇧🇷 ICS Labs	2026-02-25 22:04:26 (3 months ago)	ICS Labs identified malicious URL in email communication from IP 192.254.118.54	Phishing Email Spam Spoofing
🇨🇭 Origon	2025-12-15 09:43:35 (6 months ago)	NOQUEUE - IP: 192.254.118.54 - Dec 15 10:43:34 plesk postfix/smtpd[3782167]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 192.254.118.54 - Dec 15 10:43:34 plesk postfix/smtpd[3782167]: NOQUEUE: reject: RCPT from o2.email.wetransfer.com[192.254.118.54]: 554 5.7.1 Service unavailable; Client host [192.254.118.54] blocked using dnsbl-3.uceprotect.net; Your ISP SENDGRID, US/AS11377 is UCEPROTECT-Level3 listed because of a spamscore of 194.2. See: http://www.uceprotect.net/rblcheck.php?ipr=192.254.118.54; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<o2.email.wetransfer.com> show less	Email Spam
🇺🇸 Kenneth Miller	2025-08-05 16:12:00 (10 months ago)	Wetransfer.com – PayPal spoof - bitcoin fraud/phishing From: WeTransfer <[email protected]> " ... show more Wetransfer.com – PayPal spoof - bitcoin fraud/phishing From: WeTransfer <[email protected]> " Customer Support Hotline : +1 (801) 406 4978 " Received: from 192.254.118.54 (EHLO o2.email.wetransfer.com) show less	Phishing Email Spam Spoofing
Anonymous	2025-07-25 13:19:00 (10 months ago)	Wetransfer.com – PayPal spoof - bitcoin fraud/phishing From: WeTransfer <[email protected]> " ... show more Wetransfer.com – PayPal spoof - bitcoin fraud/phishing From: WeTransfer <[email protected]> " Customer Support Hotline : +1 (801) 406 4978 " Received: from 192.254.118.54 (EHLO o2.email.wetransfer.com) Header Return-Path: <bounces+922094-3d0c-[redacted][email protected]> Header sendgrid.info Header wetransfer.com Content <mailto:[email protected]> Message URL: wetransfer.com wetransfer.zendesk.com safety.wetransfer.com email.wetransfer.com show less	Fraud Orders Phishing Web Spam Email Spam Spoofing Bad Web Bot
🇩🇪 H. Hampel	2025-02-12 07:48:10 (1 year ago)	Spam.	Email Spam
🇺🇸 GeekSec	2024-02-28 23:22:00 (2 years ago)	Malicious URLs phishing IOC, sent from [email protected]	Phishing Email Spam Hacking
Anonymous	2022-01-24 05:30:11 (4 years ago)	SMTP Bruteforce	Brute-Force
🇬🇧 Joe-Mark	2021-11-17 03:12:46 (4 years ago)	RecipientDoesNotExist Timestamp : 17-Nov-21 07:51 Listed on spam-sorbs s5h-net (67 ... show more RecipientDoesNotExist Timestamp : 17-Nov-21 07:51 Listed on spam-sorbs s5h-net (67) show less	Email Spam
🇩🇪 www.blocklist.de	2021-07-09 09:42:07 (4 years ago)	Lines containing failures of 192.254.118.54 Jul 7 14:14:50 v11 postfix/smtpd[27853]: connect from o ... show more Lines containing failures of 192.254.118.54 Jul 7 14:14:50 v11 postfix/smtpd[27853]: connect from o2.email.wetransfer.com[192.254.118.54] Jul 7 14:14:51 v11 postfix/smtpd[27853]: Anonymous TLS connection established from o2.email.wetransfer.com[192.254.118.54]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Jul 7 14:14:53 v11 postfix/smtpd[26673]: connect from o2.email.wetransfer.com[192.254.118.54] Jul 7 14:14:53 v11 postgrey[25784]: action=greylist, reason=new, client_name=o2.email.wetransfer.com, client_address=192.254.118.54/32, sender=x@x recipient=x@x Jul 7 14:14:53 v11 postfix/smtpd[27853]: lost connection after RCPT from o2.email.wetransfer.com[192.254.118.54] Jul 7 14:14:53 v11 postfix/smtpd[27853]: disconnect from o2.email.wetransfer.com[192.254.118.54] ehlo=2 starttls=1 mail=1 rcpt=0/1 commands=4/5 Jul 7 14:14:54 v11 postfix/smtpd[26673]: Anonymous TLS connection established from o2.email.wetransfer.com[192.254.118.54]: TLSv1........ ------------------------------ show less	Email Spam
🇩🇪 www.blocklist.de	2021-07-09 07:01:04 (4 years ago)	Lines containing failures of 192.254.118.54 Jul 7 14:14:50 v11 postfix/smtpd[27853]: connect from o ... show more Lines containing failures of 192.254.118.54 Jul 7 14:14:50 v11 postfix/smtpd[27853]: connect from o2.email.wetransfer.com[192.254.118.54] Jul 7 14:14:51 v11 postfix/smtpd[27853]: Anonymous TLS connection established from o2.email.wetransfer.com[192.254.118.54]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Jul 7 14:14:53 v11 postfix/smtpd[26673]: connect from o2.email.wetransfer.com[192.254.118.54] Jul 7 14:14:53 v11 postgrey[25784]: action=greylist, reason=new, client_name=o2.email.wetransfer.com, client_address=192.254.118.54/32, sender=x@x recipient=x@x Jul 7 14:14:53 v11 postfix/smtpd[27853]: lost connection after RCPT from o2.email.wetransfer.com[192.254.118.54] Jul 7 14:14:53 v11 postfix/smtpd[27853]: disconnect from o2.email.wetransfer.com[192.254.118.54] ehlo=2 starttls=1 mail=1 rcpt=0/1 commands=4/5 Jul 7 14:14:54 v11 postfix/smtpd[26673]: Anonymous TLS connection established from o2.email.wetransfer.com[192.254.118.54]: TLSv1........ ------------------------------ show less	Email Spam
🇬🇧 Joe-Mark	2021-05-14 10:03:39 (5 years ago)	Blocked by Sophos UTM Network Protection / proto=6 . srcport=59217 . dstport=25 SMTP . (27 ... show more Blocked by Sophos UTM Network Protection / proto=6 . srcport=59217 . dstport=25 SMTP . (2703) show less	Hacking Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.69

🇨🇦 198.50.239.95

🇺🇸 147.185.132.51

🇷🇺 95.167.225.76

🇩🇪 77.110.107.31

🇧🇷 205.210.31.220

🇧🇷 187.15.75.6

🇩🇪 139.59.208.49

🇨🇳 122.115.224.56

🇨🇳 111.198.53.188

🇸🇬 101.32.240.31

🇳🇱 91.92.40.19

🇺🇸 64.62.197.59

🇸🇬 43.160.214.230

🇺🇸 20.163.4.176

🇺🇸 20.119.72.191

🇬🇪 2.57.217.229

🇺🇸 207.203.28.2

🇺🇸 205.210.31.50

🇧🇪 198.235.24.231