AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User BigB joined AbuseIPDB in July 2023 and has reported 282 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇦🇷 45.174.48.2	04 Nov 2026	Spoofed payment scam with malware	Spoofing Brute-Force Email Spam Phishing Hacking
🇸🇰 92.118.24.68	02 Nov 2026	Domain impersonation credential phishing	Phishing
🇺🇦 91.195.53.57	12 Oct 2026	Malware delivery via attachment: The email from info010[@]blizzarini[.]ua, a sender with 100% malici ... show more Malware delivery via attachment: The email from info010[@]blizzarini[.]ua, a sender with 100% malicious reputation across multiple observations, uses a suspicious Cyrillic subject line "Одштампани примерак" and delivers a payload attachment, while the sender domain blizzarini[.]ua shows consistent malicious history with zero legitimate emails, indicating a malware distribution campaign. show less	Brute-Force Phishing Hacking
🇩🇪 142.251.14.94	08 Oct 2026	Malware delivery	Phishing
🇳🇱 103.136.41.48	08 Oct 2026	Malware delivery with credential phishing: The email from [email protected] with subject "P ... show more Malware delivery with credential phishing: The email from [email protected] with subject "Payment DEST Group" contains a malicious attachment, while sender reputation data shows 100% malicious history across all vectors (55 malicious incidents, zero clean), the domain was registered only 149 days ago, and content similarity analysis indicates credential phishing characteristics, suggesting this is likely a multi-stage attack combining malware delivery with social engineering targeting payment-related credentials. show less	Phishing
10.88.0.3	08 Oct 2026	from [10.88.0.3] (143.82.66.136.bc.googleusercontent.com [136.66.82.143])	Phishing
🇺🇸 136.66.82.143	08 Oct 2026	Domain spoofing	Phishing
🇲🇾 103.71.176.147	05 Oct 2026	Malware delivery with invoice spoofing: The email from [email protected] displays "Andrei Pop" as s ... show more Malware delivery with invoice spoofing: The email from [email protected] displays "Andrei Pop" as sender name with subject "RE: Bank Slip for shipment invocie 09/10," contains an attachment payload, and exhibits a 100% malicious reputation history across multiple observations, combined with content similarity to phone scams and HTML image href elements, indicating probable malware distribution disguised as legitimate business correspondence. show less	Brute-Force Phishing Hacking
🇺🇸 104.21.56.2	05 Oct 2026	Credentials teft	Phishing Hacking
🇺🇸 8.229.133.6	05 Oct 2026	Domain spoofing phishing	Spoofing Email Spam Phishing
🇫🇮 95.216.100.105	05 Oct 2026	Spoofed BEC with malicious attachment: The email from [email protected] fails SPF authentication check ... show more Spoofed BEC with malicious attachment: The email from [email protected] fails SPF authentication checks and originates from a malicious IP address with 100% malicious reputation, while the sender address itself shows 33.1% malicious history; the subject "Uvozna dokumentacija" (import documentation) combined with attachment payload and BEC similarity detection (score 0.715) suggests this is likely a spoofed business communication attempting to deceive recipients into opening a potentially harmful attachment. Hidden Powershell commands. Script File writes to the public folder.... show less	Brute-Force Phishing Hacking
🇵🇱 89.184.68.67	22 Sep 2026	Credentials Phishing	Phishing
🇹🇷 92.42.34.232	21 Sep 2026	Malware delivery, malicious attachment	Brute-Force Phishing Hacking
🇫🇷 163.172.253.247	21 Sep 2026	Scam - Bitcoin Extortion: The email is a failed mail delivery notification from the 'Mail Delivery S ... show more Scam - Bitcoin Extortion: The email is a failed mail delivery notification from the 'Mail Delivery System' with a suspicious sender address '[email protected]'. The email detection engines have identified this as a likely scam, possibly a Bitcoin extortion attempt, based on the low sender reputation, high malicious activity, and similarity to known scam patterns. show less	Phishing
🇺🇸 35.196.122.102	17 Sep 2026	CREDENTIAL PHISHING: The email is likely a credential phishing attempt as the sender address 'suppor ... show more CREDENTIAL PHISHING: The email is likely a credential phishing attempt as the sender address '[email protected]' has a high malicious reputation ratio, the SPF check failed for the main address domain, and the email contains an image with a link, which is a common tactic used in phishing campaigns to steal user credentials. show less	Phishing
🇺🇸 34.73.222.109	17 Sep 2026	Credential Phishing: The email is from a sender '[email protected]' impersonating a 'Storage Management ... show more Credential Phishing: The email is from a sender '[email protected]' impersonating a 'Storage Management Team' and urging the recipient to take action on their 'storage plan' and 'cloud storage', which is a tactic to steal the recipient's login credentials. show less	Phishing
🇷🇴 94.156.152.152	09 Sep 2026	Credentials phishing	Email Spam Phishing
🇺🇸 209.85.128.176	12 Aug 2026	Malicious attachment	Phishing
🇹🇷 195.142.109.20	12 Aug 2026	Scam; Malicious attachment	Brute-Force Phishing Hacking
🇮🇹 80.211.125.76	12 Aug 2026	BEC; Hidden Powershell commands; malicious code execution; Malicious VBScript; Executable file type ... show more BEC; Hidden Powershell commands; malicious code execution; Malicious VBScript; Executable file type in email; Return-path address: [email protected] show less	Email Spam Brute-Force Phishing Hacking
🇬🇧 185.27.134.212	11 Aug 2026	Still used in phishing capmaigns.	Phishing
🇷🇸 93.87.76.105	11 Aug 2026	BEC scam; Multi Layered Malware; Malicious JS attachment	Fraud Orders Brute-Force Phishing Hacking
🇸🇬 18.136.32.61	11 Aug 2026	Used in phishing attacks	Phishing
🇺🇸 147.124.215.71	11 Aug 2026	Credential phishing	Phishing
🇺🇸 209.85.161.51	06 Aug 2026	BEC, Credentials phishing, Malware delivery	Email Spam Brute-Force Phishing Hacking