JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.239.154.113

193.239.154.113 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 26%: ?

26%

ISP	HDTIDC LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136038
Domain Name	f57.net
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.239.154.113

Whois 193.239.154.113

IP Abuse Reports for 193.239.154.113:

This IP address has been reported a total of 16 times from 14 distinct sources. 193.239.154.113 was first reported on November 21st 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-05 05:57:40 (3 weeks ago)	IP Address black-listed by anti-spam (blocked).	Email Spam
🇫🇷 smtp.com.es	2026-06-02 01:11:26 (3 weeks ago)	Brute force attempt.	Brute-Force Email Spam
🇨🇭 Origon	2026-05-31 01:05:33 (4 weeks ago)	NOQUEUE - IP: 193.239.154.113 - May 31 03:05:33 plesk postfix/smtpd[145817]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 193.239.154.113 - May 31 03:05:33 plesk postfix/smtpd[145817]: NOQUEUE: reject: RCPT from unknown[193.239.154.113]: 554 5.7.1 Service unavailable; Client host [193.239.154.113] blocked using dnsbl-1.uceprotect.net; IP 193.239.154.113 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=193.239.154.113; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<sp63375-sendai287.sendai.nifty.com> show less	Email Spam
🇯🇵 hirajo	2026-05-28 14:08:26 (1 month ago)	Source of spoofed email forging From: @atsoho.com domain. Observed via aggregated DMARC RUA reports. ... show more Source of spoofed email forging From: @atsoho.com domain. Observed via aggregated DMARC RUA reports. Between 2026-05-13 and 2026-05-17, this IP and 250+ neighbors in 193.239.154.0/24 (AS136038 HDTIDC LIMITED / AS136526 ALLCLOUD LIMITED) sent over 11,000 spoofed emails forging the From header as our domain "atsoho.com". All messages fail SPF and DKIM authentication against atsoho.com (DMARC enforced: p=quarantine). Legitimate atsoho.com mail is sent exclusively from Google Workspace, SocketLabs, and XServer. Reporting receivers (sample): Mail.Ru, Microsoft (Enterprise Outlook), seznam.cz, JCOM, au.com, Yahoo, GMO Pepabo, GMO Internet. WHOIS abuse-mailbox ([email protected]) is non-functional (550 5.1.1 rejection). APNIC and RIPE NCC have been notified of the invalid abuse contact. show less	Phishing Email Spam Spoofing
🇸🇪 triplecode	2026-05-16 05:54:16 (1 month ago)	Reported from hMailServer	Email Spam
🇩🇪 CK_beats	2026-05-13 12:55:01 (1 month ago)	Blocked by OPNsense firewall; 5 hits, proto=tcp, ports=25	Port Scan Hacking
🇯🇵 ken	2026-05-11 12:09:00 (1 month ago)		Email Spam Phishing
🇷🇸 Smel	2026-05-08 02:34:29 (1 month ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇯🇵 Kinsei Engineering Inc.	2025-12-14 06:23:54 (6 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
🇵🇱 TheWojtek	2025-12-03 02:12:38 (6 months ago)	Dec 3 03:12:38 hq postfix/smtpd[1709588]: NOQUEUE: reject: RCPT from unknown[193.239.154.113]: 554 ... show more Dec 3 03:12:38 hq postfix/smtpd[1709588]: NOQUEUE: reject: RCPT from unknown[193.239.154.113]: 554 5.7.1 Client host 193.239.154.113 blocked using ZEN - see https://www.spamhaus.org/query/ip/193.239.154.113 for details; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<C202511282192933.local> ... show less	Email Spam
🇯🇵 Kinsei Engineering Inc.	2025-11-30 11:08:07 (6 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
🇺🇸 vestibtech	2025-11-26 18:26:53 (7 months ago)	2025-11-26T11:26:52.981245-07:00 Host-KLAX-C amavis[943207]: (943207-07) Blocked SPAM {RejectedInbou ... show more 2025-11-26T11:26:52.981245-07:00 Host-KLAX-C amavis[943207]: (943207-07) Blocked SPAM {RejectedInbound}, AM.PDP-SOCK [193.239.154.113] [193.239.154.113] <[email protected]> -> <[email protected]>, Queue-ID: 62C6A1BD039, Message-ID: <[email protected]>, mail_id: JMrvsq1o-kgt, Hits: 26.672, size: 30581, 3936 ms ... show less	Email Spam
🇸🇮 dsmidge	2025-11-22 17:43:37 (7 months ago)	Nov 22 18:43:36 server postfix/smtpd[3511128]: connect from unknown[193.239.154.113] Nov 22 18:43:36 ... show more Nov 22 18:43:36 server postfix/smtpd[3511128]: connect from unknown[193.239.154.113] Nov 22 18:43:36 server postfix/smtpd[3511128]: NOQUEUE: reject: RCPT from unknown[193.239.154.113]: 554 5.7.1 Service unavailable; Client host [193.239.154.113] blocked using zen.spamhaus.org; Listed by DROP, see https://check.spamhaus.org/sbl/query/SBL520298 / Listed by CSS, see https://check.spamhaus.org/query/ip/193.239.154.113 / Listed by XBL, see https://check.spamhaus.org/query/ip/193.239.154.113 / Listed by SBL, see https://check.spamhaus.org/sbl/query/SBL520298; from=<> to=<[email protected]> proto=ESMTP helo=<C202511200041536.local> ... show less	Email Spam
🇯🇵 Kinsei Engineering Inc.	2025-11-22 03:00:06 (7 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
Anonymous	2025-11-22 00:33:36 (7 months ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.114

🇧🇷 160.20.35.101

🇺🇸 147.185.132.97

🇺🇸 104.236.83.40

🇫🇷 85.217.140.35

🇺🇸 66.132.195.74

🇺🇸 66.132.195.37

🇳🇱 45.148.10.141

🇺🇸 20.65.194.161

🇺🇸 18.116.101.220

🇧🇪 198.235.24.231

🇧🇪 198.235.24.181

🇺🇸 167.172.238.165

🇺🇸 166.88.44.177

🇺🇸 162.239.89.55

🇩🇪 157.230.101.182

🇰🇷 152.32.243.98

🇵🇭 118.193.73.8

🇳🇬 102.88.137.213

🇵🇱 83.168.89.49