This IP address has been reported a total of
12
times from
11 distinct
sources.
193.239.154.82 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
NOQUEUE - IP: 193.239.154.82 - May 31 03:08:48 plesk postfix/smtpd[145817]: NOQUEUE: reject: RCPT f ...
show moreNOQUEUE - IP: 193.239.154.82 - May 31 03:08:48 plesk postfix/smtpd[145817]: NOQUEUE: reject: RCPT from unknown[193.239.154.82]: 554 5.7.1 Service unavailable; Client host [193.239.154.82] blocked using dnsbl-1.uceprotect.net; IP 193.239.154.82 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=193.239.154.82; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<ab84182-aichi376.aichi.hi-ho.ne.jp>
show less
Source of spoofed email forging From: @atsoho.com domain. Observed via aggregated DMARC RUA reports. ...
show moreSource of spoofed email forging From: @atsoho.com domain. Observed via aggregated DMARC RUA reports.
Between 2026-05-13 and 2026-05-17, this IP and 250+ neighbors in 193.239.154.0/24 (AS136038 HDTIDC LIMITED / AS136526 ALLCLOUD LIMITED) sent over 11,000 spoofed emails forging the From header as our domain "atsoho.com".
All messages fail SPF and DKIM authentication against atsoho.com (DMARC enforced: p=quarantine). Legitimate atsoho.com mail is sent exclusively from Google Workspace, SocketLabs, and XServer.
Reporting receivers (sample): Mail.Ru, Microsoft (Enterprise Outlook), seznam.cz, JCOM, au.com, Yahoo, GMO Pepabo, GMO Internet.
WHOIS abuse-mailbox ([email protected]) is non-functional (550 5.1.1 rejection). APNIC and RIPE NCC have been notified of the invalid abuse contact.
show less
Nov 24 17:02:23 server postfix/smtpd[4046543]: connect from unknown[193.239.154.82]
Nov 24 17:02:23 ...
show moreNov 24 17:02:23 server postfix/smtpd[4046543]: connect from unknown[193.239.154.82]
Nov 24 17:02:23 server postfix/smtpd[4046543]: NOQUEUE: reject: RCPT from unknown[193.239.154.82]: 554 5.7.1 Service unavailable; Client host [193.239.154.82] blocked using zen.spamhaus.org; Listed by SBL, see https://check.spamhaus.org/sbl/query/SBL520298 / Listed by DROP, see https://check.spamhaus.org/sbl/query/SBL520298 / Listed by CSS, see https://check.spamhaus.org/query/ip/193.239.154.82 / Listed by XBL, see https://check.spamhaus.org/query/ip/193.239.154.82; from=<> to=<[email protected]> proto=ESMTP helo=<C202511231348652.local>
...
show less
Nov 21 23:23:22 server postfix/smtpd[3265193]: connect from unknown[193.239.154.82]
Nov 21 23:23:22 ...
show moreNov 21 23:23:22 server postfix/smtpd[3265193]: connect from unknown[193.239.154.82]
Nov 21 23:23:22 server postfix/smtpd[3265193]: NOQUEUE: reject: RCPT from unknown[193.239.154.82]: 554 5.7.1 Service unavailable; Client host [193.239.154.82] blocked using zen.spamhaus.org; Listed by SBL, see https://check.spamhaus.org/sbl/query/SBL520298 / Listed by DROP, see https://check.spamhaus.org/sbl/query/SBL520298 / Listed by CSS, see https://check.spamhaus.org/query/ip/193.239.154.82 / Listed by XBL, see https://check.spamhaus.org/query/ip/193.239.154.82; from=<> to=<[email protected]> proto=ESMTP helo=<C202511200026405.local>
...
show less
[22/Aug/2024 18:38:27] IP address 193.239.154.82 found in DNS blacklist SpamCop, mail from <myjcb-se ...
show more[22/Aug/2024 18:38:27] IP address 193.239.154.82 found in DNS blacklist SpamCop, mail from <[email protected]> to <[email protected]>
[22/Aug/2024 18:38:27] IP address 193.239.154.82 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]>
[22/Aug/2024 18:38:28] IP address 193.239.154.82 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]>
...
show less