AbuseIPDB » 126.96.36.199
Enter an IP Address, Domain Name, or Subnet:
e.g. 188.8.131.52, microsoft.com, or 184.108.40.206/24
220.127.116.11 was found in our database!
This IP was reported 27 times. Confidence of Abuse is 23%: ?
|Usage Type||Data Center/Web Hosting/Transit|
Spot an error? IP info including ISP, Usage Type, and Location provided by IP2Location.
IP Abuse Reports for 18.104.22.168:
This IP address has been reported a total of 27 times from 22 distinct sources. 22.214.171.124 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Sending out fake invoice orders from IP 126.96.36.199 (exacttarget.com / salesforce.com) <b ... show moreSending out fake invoice orders from
IP 188.8.131.52 (exacttarget.com / salesforce.com)
The spammer's websites are located at
IP: 184.108.40.206 (amazon.com / amazonaws.com)
Which redirects to
IP: 220.127.116.11 (frantech.ca / buyvm.net)
frantech.ca see ticket Ticket #946326
And it tries to make you download a zip file called
The file is coming from
IP: 18.104.22.168 (microsoft.com) show less
|Fraud Orders Phishing Email Spam|
|Phishing Email Spam Spoofing|
Phishing URL resolves to this IP
huge data transfer
TCP Port: 443 _ invalid blocked zen-spamhaus rbldns-ru _ _ Client xx.xx.4.90 _ _ (270)
TCP Port: 443 _ invalid blocked zen-spamhaus rbldns-ru _ _ Client xx.xx.4.123 _ _ (1039)
TCP async Port: 443 _ invalid blocked zen-spamhaus rbldns-ru _ _ Client xx.xx.4.104 _ _ (350)
This IP has been used to host the following addresses: hr-allianz.com https:// ... show moreThis IP has been used to host the following addresses:
It has been spaming our users and sending phishing emails with below contents
Good Morning Celynne,
Sorry for the inconvenience, a few people had issues accessing their appraisal.
Please navigate to one of the following locations to run the application, while IT fixes the issue
As the quarter draws to a close, it is time to reflect on this year's progress at Allianz Partners and how we individually have risen show less
|Phishing Email Spam|
Phishing email acting as from HR: "As change is constant, please take a minute to update your ... show morePhishing email acting as from HR:
"As change is constant, please take a minute to update your profile information( Residential Address, AGE,DOB,Position).
Everyone is expected to have his/her profile updated no Later than today as we are adding up few changes to our website."
Attached link goes to hxxps://netorg397987-my[.]sharepoint[.]com/personal/sales_baroccimotorgroup_com/_layouts/15/guestaccess[.]aspx?e=cAdfc5&share=EUg3ZnDjVQNGnFs-b3dhxdgB2Fr8vlGAbm7Maa4p15huYg&cid=aead0065-bfcc-48b0-9595-5378fc23cdd1 show less
Showing 1 to 15 of 27 reports
Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership.