Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Spam sent Tue, 27 Oct 2026 14:30:13 from 80.228.12.108 (gmx.de), From gmx.de, SPF softfail DMARC fail AOL ktibeth spam folder pass 11-07
Email Spam
Anonymous
X-Originating-Ip: [80.228.12.108]
Received-SPF: softfail (domain of transitioning online.de does not designate 80.228.12.108 as permitted sender)
Received: from 80.228.12.108 (EHLO online.de) by 10.227.22.70 with SMTP;
Received: from mail.naihauts ...
show moreX-Originating-Ip: [80.228.12.108]
Received-SPF: softfail (domain of transitioning online.de does not designate 80.228.12.108 as permitted sender)
Received: from 80.228.12.108 (EHLO online.de) by 10.227.22.70 with SMTP;
Received: from mail.naihautsui.co.kr [212.240.212.235] by mx.reskind.net with SMTP;
Received: from unknown (205.14.29.180) by relay-x.misswldrs.com with ASMTP;
Received: from rly04.hottestmile.com [67.106.110.131] by qnx.mdrost.com with ESMTP;
Received: from [153.234.37.97] by mail.gimmicc.net with SMTP;
From: "Sadie Peterson" <[email protected]>
Subject: here's my photo.jpg !!
X-Campaignid: 468625_14568_4260_tHP
From: "Sadie Peterson" <"Sadie Peterson" [email protected]>
Hey,
I came across your profile and had to say hi.
I don't check this site much. If you want to talk, message me on Telegram - I'm on there all the time.
My Telegram:"Sadie Peterson"
Hope you write back!
"Sadie Peterson"
https://share.google/4o9EUXzynQe2h0hB9
show less
Spoofing
Exploited Host
Email Spam
Phishing
Anonymous
MALICIOUS DISTRIBUTED SMTP CAMPAIGN REPORT
Spoofed From Account (Mask): [email protected]
Collector Account (Reply-To) : Not Specified
Security validation: Severe SPF/DKIM failures triggered across all hops.
=== ROUTING IPS CHRONOLOGY ===
H ...
show moreMALICIOUS DISTRIBUTED SMTP CAMPAIGN REPORT
Spoofed From Account (Mask): [email protected]
Collector Account (Reply-To) : Not Specified
Security validation: Severe SPF/DKIM failures triggered across all hops.
=== ROUTING IPS CHRONOLOGY ===
Hop 01 [ENTRY (ORIGIN)] -> IP: 155.10.42.171
Hop 02 [PROXY_01] -> IP: 103.24.51.230
Hop 03 [EXIT (GATEWAY)] -> IP: 80.228.12.108
=== INTERMEDIARY DOMAINS (NO-IP) ===
Host 01 -> asx121.turbo-inline.com
Host 02 -> group21.345mail.com
Host 03 -> qrx.quickslick.com
Host 04 -> smtp-server1.cfdenselr.com
show less
DNS Compromise
DNS Poisoning
Fraud Orders
Spoofing
Brute-Force
Exploited Host
Web App Attack
Web Spam
Email Spam
Port Scan
Phishing
Hacking
Blog Spam
X-Originating-Ip: [80.228.12.108]
Received-SPF: softfail (domain of transitioning dimaregracas.com does not designate 80.228.12.108 as permitted sender)
From: "Adeline" <[email protected]>
Subject:=?utf-8?B?8J+Mnw==?= One-on-one m ...
show moreX-Originating-Ip: [80.228.12.108]
Received-SPF: softfail (domain of transitioning dimaregracas.com does not designate 80.228.12.108 as permitted sender)
From: "Adeline" <[email protected]>
Subject:=?utf-8?B?8J+Mnw==?= One-on-one message for you
User-Agent: Mozilla Thunderbird
Reply-to:[email protected]show less
Email Spam
Spoofing
Phishing
Anonymous
Received: from 10.217.151.74
by atlas115.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Wed, 20 May 2026 04:05:35 +0000
Return-Path: <[email protected]>
X-Originating-Ip: [80.228.12.108]
Received-SPF: fail (domain of arteting.de does not desi ...
show moreReceived: from 10.217.151.74
by atlas115.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Wed, 20 May 2026 04:05:35 +0000
Return-Path: <[email protected]>
X-Originating-Ip: [80.228.12.108]
Received-SPF: fail (domain of arteting.de does not designate 80.228.12.108 as permitted sender)
show less
Fraud Orders
Email Spam
Spoofing
Hacking
Anonymous
Banned by Fail2Ban on server
Bad Web Bot
Anonymous
This IP was involved in a brute force and password spray attack.
