JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.239.154.240

193.239.154.240 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 19%: ?

19%

ISP	HDTIDC LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136038
Domain Name	f57.net
Country	🇭🇰 Hong Kong
City	Prosperous Garden, Yau Tsim Mong District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.239.154.240

Whois 193.239.154.240

IP Abuse Reports for 193.239.154.240:

This IP address has been reported a total of 15 times from 13 distinct sources. 193.239.154.240 was first reported on July 3rd 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 SecureLinkSolutions	2026-06-18 04:32:10 (3 weeks ago)	Sending phising emails	Phishing
🇨🇭 Origon	2026-05-31 01:10:22 (1 month ago)	NOQUEUE - IP: 193.239.154.240 - May 31 03:10:21 plesk postfix/smtpd[178597]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 193.239.154.240 - May 31 03:10:21 plesk postfix/smtpd[178597]: NOQUEUE: reject: RCPT from unknown[193.239.154.240]: 554 5.7.1 Service unavailable; Client host [193.239.154.240] blocked using dnsbl-1.uceprotect.net; IP 193.239.154.240 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=193.239.154.240; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<p76110-miyagi431.miyagi.vectant.ne.jp> show less	Email Spam
🇯🇵 hirajo	2026-05-28 14:07:28 (1 month ago)	Source of spoofed email forging From: @atsoho.com domain. Observed via aggregated DMARC RUA reports. ... show more Source of spoofed email forging From: @atsoho.com domain. Observed via aggregated DMARC RUA reports. Between 2026-05-13 and 2026-05-17, this IP and 250+ neighbors in 193.239.154.0/24 (AS136038 HDTIDC LIMITED / AS136526 ALLCLOUD LIMITED) sent over 11,000 spoofed emails forging the From header as our domain "atsoho.com". All messages fail SPF and DKIM authentication against atsoho.com (DMARC enforced: p=quarantine). Legitimate atsoho.com mail is sent exclusively from Google Workspace, SocketLabs, and XServer. Reporting receivers (sample): Mail.Ru, Microsoft (Enterprise Outlook), seznam.cz, JCOM, au.com, Yahoo, GMO Pepabo, GMO Internet. WHOIS abuse-mailbox ([email protected]) is non-functional (550 5.1.1 rejection). APNIC and RIPE NCC have been notified of the invalid abuse contact. show less	Phishing Email Spam Spoofing
🇺🇸 OceanTreasure	2026-05-21 21:20:11 (1 month ago)	tcp/25; Repeated SMTP SYNs (≥3/120 s) (R18) @ 2026-05-21T21:10:21Z	Brute-Force
Anonymous	2026-05-20 20:12:57 (1 month ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇹🇼 tye	2026-05-18 10:43:12 (1 month ago)	Wazuh Alert Evidence: May 18 10:43:09 pico-gw1 postfix/smtpd[3605173]: NOQUEUE: reject: RCPT from un ... show more Wazuh Alert Evidence: May 18 10:43:09 pico-gw1 postfix/smtpd[3605173]: NOQUEUE: reject: RCPT from unknown[193.239.154.240]: 554 5.7.1 Service unavailable; Client host [193.239.154.240] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?193.239.154.240; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<n96790-fukushima891.fukushima.infoweb.ne.jp> show less	Hacking
🇺🇸 xmission.com	2026-05-14 13:20:02 (2 months ago)	Sourced 1 spam messages over 3x XMissions threshold. Highest score: 41.5. Latest msgid suffix: ...-6 ... show more Sourced 1 spam messages over 3x XMissions threshold. Highest score: 41.5. Latest msgid suffix: ...-6a-1fb5ed show less	Email Spam
🇷🇸 Smel	2026-05-07 07:34:15 (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇫🇷 smtp.com.es	2025-12-09 00:49:15 (7 months ago)	Brute force attempt.	Email Spam Brute-Force
Anonymous	2025-12-05 14:28:00 (7 months ago)	aeonを騙るメールｔ202512051802 https://5haz0x.top/	Phishing
🇯🇵 Kinsei Engineering Inc.	2025-12-01 23:44:45 (7 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
🇫🇷 smtp.com.es	2025-11-24 08:02:29 (7 months ago)	Brute force attempt.	Email Spam Brute-Force
🇳🇱 Cloud86 B.V.	2025-11-20 02:25:05 (7 months ago)	Email spam	Email Spam
🇯🇵 Kinsei Engineering Inc.	2025-11-19 19:41:21 (7 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Email Spam Brute-Force
🇩🇪 _ArminS_	2023-07-03 17:17:36 (3 years ago)	WEB-Scan 3384:80 detected 2023.07.03 19:17:36 blocked until 2023.08.22 12:20:23	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.92.162.240

🇹🇭 159.192.137.133

🇨🇳 120.48.88.69

🇺🇸 104.164.173.121

🇨🇳 42.123.126.29

🇺🇸 20.46.225.117

🇯🇵 203.25.124.164

🇺🇸 104.164.126.26

🇻🇳 103.200.23.154

🇳🇱 51.15.59.186

🇵🇪 38.250.132.103

🇹🇭 202.29.228.248

🇺🇸 198.46.199.90

🇵🇦 190.218.32.115

🇮🇩 180.252.89.17

🇨🇳 123.160.221.175

🇮🇳 103.25.47.94

🇬🇧 35.203.210.186

🇺🇸 20.169.105.164

🇹🇷 176.88.147.178