CROSS - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User CROSS joined AbuseIPDB in October 2023 and has reported 811 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 167.89.17.229	07 Oct 2025	Authentication-Results: spf=pass (sender IP is 167.89.17.229) smtp.mailfrom=k1.hello.paintedpaper. ... show more Authentication-Results: spf=pass (sender IP is 167.89.17.229) smtp.mailfrom=k1.hello.paintedpaper.com; dkim=pass (signature was verified) header.d=hello.paintedpaper.com;dmarc=pass action=none header.from=paintedpaper.com;compauth=pass reason=100 Received-SPF: Pass (protection.outlook.com: domain of k1.hello.paintedpaper.com designates 167.89.17.229 as permitted sender) receiver=protection.outlook.com; client-ip=167.89.17.229; helo=o1276.shared.klaviyomail.com; pr=C Date: Tue, 07 Oct 2025 13:04:18 +0000 (UTC) From: The Painted Paper <[email protected]> Subject: Final Hours: Painted Paper 20% Off Return-Path: [email protected] show less	Phishing Email Spam
🇺🇸 4.151.107.118	07 Oct 2025	Authentication-Results: spf=pass (sender IP is 4.151.107.118) smtp.mailfrom=solarany.com; dkim=non ... show more Authentication-Results: spf=pass (sender IP is 4.151.107.118) smtp.mailfrom=solarany.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=solarany.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 4.151.107.118 as permitted sender) receiver=protection.outlook.com; client-ip=4.151.107.118; helo=qoco.anticorgoparrini.store; pr=EFrom: "Cheech & Chong" <[email protected]> Subject: "Cheech & Chong's crazy sleep guarantee" Date: Tue, 7 Oct 2025 05:23:28 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇺🇸 4.151.115.200	07 Oct 2025	Authentication-Results: spf=pass (sender IP is 4.151.115.200) smtp.mailfrom=solarany.com; dkim=non ... show more Authentication-Results: spf=pass (sender IP is 4.151.115.200) smtp.mailfrom=solarany.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=solarany.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 4.151.115.200 as permitted sender) receiver=protection.outlook.com; client-ip=4.151.115.200; helo=uhvr.anticorgoparrini.store; pr=E From: American Home Shield Warranty <[email protected]> Subject: Skip the worry. Not the Warranty. Date: Mon, 6 Oct 2025 17:59:37 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇺🇸 40.112.237.212	07 Oct 2025	Authentication-Results: spf=pass (sender IP is 40.112.237.212) smtp.mailfrom=temikafieldenterprise ... show more Authentication-Results: spf=pass (sender IP is 40.112.237.212) smtp.mailfrom=temikafieldenterprise.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=temikafieldenterprise.de;compauth=pass reason=100 Received-SPF: Pass (protection.outlook.com: domain of temikafieldenterprise.de designates 40.112.237.212 as permitted sender) receiver=protection.outlook.com; client-ip=40.112.237.212; helo=za5q.apheapwhochier.site; pr=E From: Car Emergency Kit<[email protected]> Subject: Congratulations! You have been selected for a reward from AAA , Receive a free Car Emergency Kit Date: Tue, 7 Oct 2025 03:09:09 +0200 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇺🇸 4.155.65.35	07 Oct 2025	Authentication-Results: spf=pass (sender IP is 4.155.65.35) smtp.mailfrom=solarany.com; dkim=none ... show more Authentication-Results: spf=pass (sender IP is 4.155.65.35) smtp.mailfrom=solarany.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=solarany.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 4.155.65.35 as permitted sender) receiver=protection.outlook.com; client-ip=4.155.65.35; helo=9t7i.12daysofchristmastoken.website; pr=E From: "Direct Meds Weight Loss" <[email protected]> Subject: Only a Few Spots Left Get Your GLP-1 Prescription Today! Date: Mon, 6 Oct 2025 22:34:07 +0000 To: Undisclosed recipients:; Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Spoofing Brute-Force Exploited Host
🇺🇸 57.103.66.177	06 Oct 2025	Authentication-Results: spf=pass (sender IP is 57.103.66.177) smtp.mailfrom=icloud.com; dkim=pass ... show more Authentication-Results: spf=pass (sender IP is 57.103.66.177) smtp.mailfrom=icloud.com; dkim=pass (signature was verified) header.d=icloud.com;dmarc=pass action=none header.from=icloud.com;compauth=pass reason=100 From: Terza Bekha <[email protected]> Subject: Fwd: 70ZXSZ Cashback credited585u* Date: Mon, 6 Oct 2025 16:49:18 +0000 (GMT) Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 170.203.24.4	06 Oct 2025	uthentication-Results: spf=pass (sender IP is 170.203.24.4) smtp.mailfrom=k3.hello.paintedpaper.co ... show more uthentication-Results: spf=pass (sender IP is 170.203.24.4) smtp.mailfrom=k3.hello.paintedpaper.com; dkim=pass (signature was verified) header.d=shared.klaviyomail.com;dkim=pass (signature was verified) header.d=hello.paintedpaper.com;dmarc=pass action=none header.from=paintedpaper.com;compauth=pass reason=100 Subject: Last Call: 20% Off Ends Tomorrow From: "The Painted Paper" <[email protected]> Return-Path: bounce-kl_28118061010-kl_101101k6nsv3e2hf0zrj-h-c57f109fe1=2@k3.hello.paintedpaper.com show less	Phishing Email Spam
🇺🇸 20.57.203.172	06 Oct 2025	Authentication-Results: spf=pass (sender IP is 20.57.203.172) smtp.mailfrom=solarany.com; dkim=non ... show more Authentication-Results: spf=pass (sender IP is 20.57.203.172) smtp.mailfrom=solarany.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=solarany.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 20.57.203.172 as permitted sender) receiver=protection.outlook.com; client-ip=20.57.203.172; helo=9fac.artistvibe.store; pr=E From: "Direct Meds Weight Loss" <[email protected]> Subject: Only a Few Spots Left Get Your GLP-1 Prescription Today! Date: Mon, 6 Oct 2025 01:50:09 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇮🇳 52.172.50.25	04 Oct 2025	Authentication-Results: spf=pass (sender IP is 52.172.50.25) smtp.mailfrom=ppokerwin.com; dkim=non ... show more Authentication-Results: spf=pass (sender IP is 52.172.50.25) smtp.mailfrom=ppokerwin.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=ppokerwin.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of ppokerwin.com designates 52.172.50.25 as permitted sender) receiver=protection.outlook.com; client-ip=52.172.50.25; helo=ljjl.asumattress.store; pr=E show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇬🇧 20.0.72.180	04 Oct 2025	Primitive Phishing, spamming. Authentication-Results: spf=pass (sender IP is 20.0.72.180) smtp.ma ... show more Primitive Phishing, spamming. Authentication-Results: spf=pass (sender IP is 20.0.72.180) smtp.mailfrom=solarany.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=solarany.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 20.0.72.180 as permitted sender) receiver=protection.outlook.com; client-ip=20.0.72.180; helo=hwv3.amrmazesnuref.store; pr=E show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇦🇪 20.233.17.161	23 Sep 2025	Authentication-Results: spf=pass (sender IP is 20.233.17.161) smtp.mailfrom=ppokerwin.com; dkim=non ... show more Authentication-Results: spf=pass (sender IP is 20.233.17.161) smtp.mailfrom=ppokerwin.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=ppokerwin.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of ppokerwin.com designates 20.233.17.161 as permitted sender) receiver=protection.outlook.com; client-ip=20.233.17.161; helo=ptgd.asskickinpot.online; pr=E From: Walmart Department - Pending Order 1 <[email protected]> Subject: Your package could not be delivered due to an outstanding payment of $5.95 Date: Tue, 23 Sep 2025 03:16:41 +0000 To: Undisclosed recipients:; Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇸🇪 4.223.74.218	17 Sep 2025	Not much more than unskilled low-level spammer . Authentication-Results: spf=pass (sender IP is 4.2 ... show more Not much more than unskilled low-level spammer . Authentication-Results: spf=pass (sender IP is 4.223.74.218) smtp.mailfrom=solarany.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=solarany.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 4.223.74.218 as permitted sender) receiver=protection.outlook.com; client-ip=4.223.74.218; helo=ws9j.arabyelwkies.site; pr=E show less	Fraud Orders Phishing Email Spam Spoofing Exploited Host
🇺🇸 57.103.64.169	16 Sep 2025	From: Dory Favien <[email protected]> Subject: Fwd: 074* Deposit Notification* Date: Tue, 16 Sep 2025 19:07:09 +0000 (GMT) show less	Fraud Orders Phishing Email Spam Spoofing Exploited Host
🇦🇺 13.70.159.122	13 Sep 2025	Multiple Phishing attempts. Received-SPF: Pass (protection.outlook.com: domain of ppokerwin.com designates 13.70.159.122 as permitted sender) receiver=protection.outlook.com; client-ip=13.70.159.122; helo=bmns.assignmenthelpworld.website; pr=E	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇨🇦 4.205.142.180	12 Sep 2025	Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 4.205.142.180 as permitted sender) receiver=protection.outlook.com; client-ip=4.205.142.180; helo=p3nd.artofgiles.store; pr=E	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇬🇧 172.166.202.84	03 Sep 2025	Phishing scams. Received-SPF: Pass (protection.outlook.com: domain of solarany.com designates 172.166.202.84 as permitted sender) receiver=protection.outlook.com; client-ip=172.166.202.84; helo=xb0m.amrmazesnuref.store; pr=E	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇺🇸 40.122.233.235	26 Aug 2025	Authentication-Results: spf=pass (sender IP is 40.122.233.235) smtp.mailfrom=solarany.com; dkim=non ... show more Authentication-Results: spf=pass (sender IP is 40.122.233.235) smtp.mailfrom=solarany.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=solarany.com;compauth=pass reason=111 Subject: Erase pain IMMEDIATELY with this blue patch Date: Tue, 26 Aug 2025 15:43:35 +0000 show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇧🇷 187.102.244.147	26 Aug 2025	Scams and Phishing.	Fraud Orders Phishing Email Spam Spoofing Brute-Force Exploited Host
🇸🇬 43.156.250.74	20 Aug 2025	Date: Wed, 20 Afrom: DirectPay Service Hub <[email protected]> subject: =?utf-8?q?PayPal_Alert=3A_Unauthorized_USD_423=2E65_Charge_=E2=80=93_Verify_Your_Account?= ug 2025 09:40:18 -0700 (PDT) show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇭🇰 43.134.193.82	05 Aug 2025	from: ePay Desk <[email protected]> subject: Confirmation: Your Coinbase Global Inc. order Paid show less	Fraud Orders Phishing Email Spam Spoofing Brute-Force Exploited Host
🇰🇷 43.133.242.171	04 Aug 2025	from: SmartWallet Security <[email protected]> subject: =?u8?q?You_Paid_USD1098=2E99_=E2=80=93_Here=E2=80=99s_Proof? show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇯🇵 101.32.99.95	29 Jul 2025	Date: Tue, 29 Jul 2025 11:19:29 -0700 (PDT) from: Security Services <[email protected]> subject: Your Payment Success - A Message from Check your PayPal Attachedul 2025 11:19:29 -0700 (PDT) show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇮🇳 4.224.253.254	28 Jul 2025	Authentication-Results: spf=pass (sender IP is 4.224.253.254) smtp.mailfrom=bookheewillkillyou.de; ... show more Authentication-Results: spf=pass (sender IP is 4.224.253.254) smtp.mailfrom=bookheewillkillyou.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=bookheewillkillyou.de;compauth=pass reason=100 Received-SPF: Pass (protection.outlook.com: domain of bookheewillkillyou.de designates 4.224.253.254 as permitted sender) receiver=protection.outlook.com; client-ip=4.224.253.254; helo=fhg3.apheapwhochier.site; pr=E From: Virus Detected <[email protected]> Subject: We found 5 threats on your system, Your device is under attack stop it now Date: Mon, 28 Jul 2025 11:09:48 +0200 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇭🇰 43.154.96.132	23 Jul 2025	from: Office365 Invoice Support <[email protected]> subject: =?utf-8?q?Your_Hassle-Free_Payment_USD_557=2E35_Charged_=E2=80=93_Receipt?= show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host
🇺🇸 20.230.3.59	22 Jul 2025	Authentication-Results: spf=pass (sender IP is 20.230.3.59) smtp.mailfrom=curvesabsback.com; dkim= ... show more Authentication-Results: spf=pass (sender IP is 20.230.3.59) smtp.mailfrom=curvesabsback.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=curvesabsback.com;compauth=pass reason=111 Received-SPF: Pass (protection.outlook.com: domain of curvesabsback.com designates 20.230.3.59 as permitted sender) receiver=protection.outlook.com; client-ip=20.230.3.59; helo=wgey.ashiroppobh.store; pr= From: Pending Package (1) <[email protected]> Subject: You have won a Fishing Starter Pack Date: Tue, 22 Jul 2025 17:31:43 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Brute-Force Exploited Host