AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Leo MacWilliam joined AbuseIPDB in January 2023 and has reported 6 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇮🇹 2.42.230.246	15 Sep 2023	Spearphishing attempt, spoofing our local domain, and delivering a PDF with attack-links. Receive ... show more Spearphishing attempt, spoofing our local domain, and delivering a PDF with attack-links. Received: from vmmail.comune.cosenza.it (net-2-42-230-246.cust.vodafonedsl.it [2.42.230.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) show less	Phishing Spoofing
🇺🇸 35.167.227.85	15 Sep 2023	Spearphishing attempts spoofing our local domain name and carrying a PDF payload with attack links. ... show more Spearphishing attempts spoofing our local domain name and carrying a PDF payload with attack links. Received: from vmmail.comune.cosenza.it (net-2-42-230-246.cust.vodafonedsl.it [2.42.230.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) show less	Phishing Spoofing
🇩🇪 45.11.229.7	17 May 2023	Received several spearphishing attempts from online-jpmchase.com which resolves to this IP. Leo D ... show more Received several spearphishing attempts from online-jpmchase.com which resolves to this IP. Leo D. show less	Phishing Email Spam Spoofing
🇺🇸 23.94.160.241	03 Feb 2023	This IP (associated with airfountain.res with server name of srv4.ag-elecs.com) Was seen in our spam ... show more This IP (associated with airfountain.res with server name of srv4.ag-elecs.com) Was seen in our spam filtering system sending viruses and sending Phishing emails. Possible exploited host. show less	Phishing Email Spam
🇺🇸 173.231.207.61	25 Jan 2023	Various users received spearphishing attempts from spoofed emails that originated from the shirazila ... show more Various users received spearphishing attempts from spoofed emails that originated from the shirazilaw.com domain. Mail is hosted via google for business. Last known attempt was 12/29/2022 show less	Phishing Email Spam Spoofing
🇺🇸 192.64.119.212	18 Jan 2023	IP was used to host a phantom site that mimic a real organization and they used spearphishing to try ... show more IP was used to host a phantom site that mimic a real organization and they used spearphishing to try to get money and passwords from the real organization. (thewarrencenter.live) Site decomm'd on 1.11.23. show less	Fraud Orders Phishing Spoofing