AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User CROSS joined AbuseIPDB in October 2023 and has reported 814 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇦🇺 20.58.130.38	26 Feb 2025	Fraudster activities at this IP address. Authentication-Results: spf=none (sender IP is 20.58.130.3 ... show more Fraudster activities at this IP address. Authentication-Results: spf=none (sender IP is 20.58.130.38) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: ServicePlus Home Warranty <[email protected]> Subject: New Year, New Savings: 50% OFF Lock in 2025 Rates! or Start 2025 Right: 50% OFF + Lock in Your Rate! Date: Tue, 25 Feb 2025 23:24:04 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇩🇪 43.131.63.198	25 Feb 2025	Fraudsters abusing Tencent and Gmail. Date: Tue, 25 Feb 2025 05:14:27 -0800 (PST) to: <[email protected]> from: <[email protected]> subject: Ready to ship: Bill 5377-pycjdcc. show less	Fraud Orders Phishing Email Spam Spoofing Exploited Host
🇯🇵 130.33.66.128	24 Feb 2025	Scam/fraud at this IP address. Authentication-Results: spf=none (sender IP is 130.33.66.128) smtp ... show more Scam/fraud at this IP address. Authentication-Results: spf=none (sender IP is 130.33.66.128) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: Pending Order (1) <[email protected]> Subject: renewQTymy, Your order has shipped! - AAA Car Emergency Kit Date: Mon, 24 Feb 2025 18:11:53 +0100 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇯🇵 40.107.117.98	24 Feb 2025	Fraud/scam at this IP address. Authentication-Results: spf=pass (sender IP is 40.107.117.98) smtp ... show more Fraud/scam at this IP address. Authentication-Results: spf=pass (sender IP is 40.107.117.98) smtp.mailfrom=guirlderen.com; dkim=pass (signature was verified) header.d=yousign.app;dmarc=pass action=none header.from=yousign.app;compauth=pass reason=100 Return-Path: [email protected] From: Yousign for damiante <[email protected]> To: [email protected] Subject: =?UTF-8?Q?You've_been_invited_to_sign_Alert=3A_?= =?UTF-8?Q?Unusual_Payment_Details_=E2=80=93_?= =?UTF-8?Q?Immediate_Verification_Required_?= =?UTF-8?Q?by_damiante_on_Yousign?= Date: Mon, 24 Feb 2025 18:40:53 +0000 show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 40.107.220.92	24 Feb 2025	Scam/fraud at this IP address. Authentication-Results: spf=pass (sender IP is 40.107.220.92) smtp ... show more Scam/fraud at this IP address. Authentication-Results: spf=pass (sender IP is 40.107.220.92) smtp.mailfrom=kamrenfoley.store; dkim=pass (signature was verified) header.d=yousign.app;dmarc=pass action=none header.from=yousign.app;compauth=pass reason=100 Return-Path: [email protected] From: Yousign for damiante <[email protected]> To: [email protected] Subject: =?UTF-8?Q?You've_been_invited_to_sign_Alert=3A_?= =?UTF-8?Q?Unusual_Payment_Details_=E2=80=93_?= =?UTF-8?Q?Immediate_Verification_Required_?= =?UTF-8?Q?by_damiante_on_Yousign?= Date: Mon, 24 Feb 2025 18:40:53 +0000 show less	Fraud Orders Phishing Email Spam Spoofing Exploited Host
🇸🇪 135.225.120.169	23 Feb 2025	(Illiterate) fraudster operating at this IP address. Authentication-Results: spf=none (sender IP is ... show more (Illiterate) fraudster operating at this IP address. Authentication-Results: spf=none (sender IP is 135.225.120.169) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: MiIestone MastercardÂ® <[email protected]> Subject: renewjkCTD, AppIy for a $1000 Credit Limit Offer Date: Sun, 23 Feb 2025 17:19:24 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇦🇺 4.197.178.36	23 Feb 2025	Fraudster at this IP address running useless scams. Authentication-Results: spf=none (sender IP is ... show more Fraudster at this IP address running useless scams. Authentication-Results: spf=none (sender IP is 4.197.178.36) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: Keranique - #1 Hair Regrowth Solution <[email protected]> Subject: Regrow Your Hair with Keranique! 120 Day Money Back Guarantee! Date: Fri, 21 Feb 2025 16:28:15 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇸🇪 135.225.77.242	22 Feb 2025	Repeat Phishing attempts. Authentication-Results: spf=pass (sender IP is 135.225.77.242) smtp.mai ... show more Repeat Phishing attempts. Authentication-Results: spf=pass (sender IP is 135.225.77.242) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "Costco Rewards " <[email protected]> Subject: Claim Your $100 Costco Reward Date: Sat, 22 Feb 2025 00:25:48 +0100 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 20.14.207.189	21 Feb 2025	Authentication-Results: spf=none (sender IP is 20.14.207.189) smtp.mailfrom=guiavip.co.uk; dkim=no ... show more Authentication-Results: spf=none (sender IP is 20.14.207.189) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: Life Saving Device <[email protected]> Subject: Be Prepared for Choking Emergencies with LifeVac Date: Fri, 21 Feb 2025 16:25:17 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇸🇪 20.91.244.189	21 Feb 2025	Lamo fraudster and his shallow scams at this IP address. Authentication-Results: spf=pass (sender I ... show more Lamo fraudster and his shallow scams at this IP address. Authentication-Results: spf=pass (sender IP is 20.91.244.189) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "EnergyBillCalculation! " <[email protected]> Subject: Unlock Big Solar Savings with Government Assistance Date: Fri, 21 Feb 2025 15:37:55 +0100 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 199.232.192.193	20 Feb 2025	IP address abused/compromised by fraudsters.	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 20.110.240.101	20 Feb 2025	Lamo fraudster abusing this IP address. Authentication-Results: spf=none (sender IP is 20.110.240.1 ... show more Lamo fraudster abusing this IP address. Authentication-Results: spf=none (sender IP is 20.110.240.101) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: MiIestone MastercardÂ® <[email protected]> Subject: AppIy for a $1000 Credit Limit Offer Date: Thu, 20 Feb 2025 15:53:52 +0100 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇰🇷 20.196.95.62	20 Feb 2025	Lamo fraudster abusing this IP address. Authentication-Results: spf=pass (sender IP is 20.196.95.62 ... show more Lamo fraudster abusing this IP address. Authentication-Results: spf=pass (sender IP is 20.196.95.62) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "Freedom Debt Relief Assistances " <[email protected]> Subject: Get Rid of Your Debt Stress! Date: Wed, 19 Feb 2025 15:18:19 +0000 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 13.66.185.104	20 Feb 2025	Lamo fraudster at abusing this IP address. Authentication-Results: spf=pass (sender IP is 13.66.185 ... show more Lamo fraudster at abusing this IP address. Authentication-Results: spf=pass (sender IP is 13.66.185.104) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "EnergyBillCalculation! " <[email protected]> Subject: Unlock Big Solar Savings with Government Assistance Date: Thu, 20 Feb 2025 14:21:52 +0100 Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 23.96.195.31	20 Feb 2025	Lamo fraudster at this IP address. Authentication-Results: spf=none (sender IP is 23.96.195.31) s ... show more Lamo fraudster at this IP address. Authentication-Results: spf=none (sender IP is 23.96.195.31) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: ServicePlus Home Warranty <[email protected]> Subject: New Year, New Savings: 50% OFF Lock in 2025 Rates! or Start 2025 Right: 50% OFF + Lock in Your Rate! Date: Wed, 19 Feb 2025 14:52:20 +0000 Return-Path: [email protected] show less	Phishing Email Spam Hacking Spoofing Exploited Host
🇰🇷 20.196.102.12	19 Feb 2025	Fraudster abusing Microsoft networks. Authentication-Results: spf=pass (sender IP is 20.196.102.12) ... show more Fraudster abusing Microsoft networks. Authentication-Results: spf=pass (sender IP is 20.196.102.12) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "Insurify Auto Quotes " <[email protected]> Subject: 19/02/2025 Affordable Car Coverage* Date: Wed, 19 Feb 2025 12:37:34 +0000 Return-Path: [email protected] show less	Phishing Email Spam Hacking Spoofing Exploited Host
🇸🇬 43.163.104.38	19 Feb 2025	Fraudsters mailing originally from Tencent via Gmail. from: <[email protected]> subject: You have been updated with Bill show less	Fraud Orders Phishing Email Spam Hacking Spoofing Exploited Host
🇦🇪 4.161.50.152	19 Feb 2025	Useless, repeat offers from the fraudster on this IP address. Authentication-Results: spf=none (sen ... show more Useless, repeat offers from the fraudster on this IP address. Authentication-Results: spf=none (sender IP is 4.161.50.152) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: ServicePlus Home Warranty <[email protected]> Subject: New Year, New Savings: 50% OFF Lock in 2025 Rates! or Start 2025 Right: 50% OFF + Lock in Your Rate! Date: Tue, 18 Feb 2025 15:27:13 +0000 Return-Path: [email protected] show less	Phishing Email Spam Hacking Spoofing Exploited Host
🇺🇸 20.12.46.220	18 Feb 2025	Lamo fraudster at this IP address. Authentication-Results: spf=none (sender IP is 20.12.46.220) s ... show more Lamo fraudster at this IP address. Authentication-Results: spf=none (sender IP is 20.12.46.220) smtp.mailfrom=guiavip.co.uk; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=guiavip.co.uk;compauth=fail reason=001 From: MiIestone MastercardÂ® <[email protected]> Subject: AppIy for a $1000 Credit Limit Offer Date: Tue, 18 Feb 2025 16:36:15 +0100 Return-Path: [email protected] show less	Phishing Email Spam Hacking Spoofing Exploited Host
🇮🇳 4.213.53.53	18 Feb 2025	Lame fraudster at this IP address. Authentication-Results: spf=pass (sender IP is 4.213.53.53) sm ... show more Lame fraudster at this IP address. Authentication-Results: spf=pass (sender IP is 4.213.53.53) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "EnergyBillCalculation! " <[email protected]> Subject: Unlock Big Solar Savings with Government Assistance Date: Tue, 18 Feb 2025 02:11:05 +0100 Return-Path: [email protected] show less	Phishing Email Spam Spoofing Exploited Host
🇺🇸 17.58.6.58	18 Feb 2025	Authentication-Results: spf=pass (sender IP is 17.58.6.58) smtp.mailfrom=icloud.com; dkim=pass (si ... show more Authentication-Results: spf=pass (sender IP is 17.58.6.58) smtp.mailfrom=icloud.com; dkim=pass (signature was verified) header.d=icloud.com;dmarc=pass action=none header.from=icloud.com;compauth=pass reason=100 From: oliver cox <[email protected]> Subject: =?utf-8?B?SGVyZeKAmXMgYSAyNSUgZGlzY291bnQgZm9yIHlvdSA=?= =?utf-8?B?8J+OgSMyNTQ5Njg0Ng==?= Date: Tue, 18 Feb 2025 12:27:24 +0000 (UTC) Return-Path: [email protected] show less	Fraud Orders Phishing Email Spam Spoofing Exploited Host
🇰🇷 4.230.36.23	17 Feb 2025	Fraudster, scammer, Phishing at this IP address. Authentication-Results: spf=pass (sender IP is 4.2 ... show more Fraudster, scammer, Phishing at this IP address. Authentication-Results: spf=pass (sender IP is 4.230.36.23) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "EnergyBillCalculation! " <[email protected]> Subject: Unlock Big Solar Savings with Government Assistance Date: Mon, 17 Feb 2025 00:24:10 +0000 Return-Path: [email protected] show less	Phishing Email Spam Spoofing Exploited Host
🇸🇪 20.240.240.237	17 Feb 2025	Fraudster at this IP address. Authentication-Results: spf=pass (sender IP is 20.240.240.237) smtp ... show more Fraudster at this IP address. Authentication-Results: spf=pass (sender IP is 20.240.240.237) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: Audien Atom 2<[email protected]> Subject: Struggling to hear? This is for you! Date: Mon, 17 Feb 2025 17:52:34 +0100 Return-Path: [email protected] show less	Phishing Email Spam Hacking Spoofing Exploited Host
🇮🇪 52.169.85.53	16 Feb 2025	Fraudster on this IP address (Phishing, scams, fraud). Authentication-Results: spf=pass (sender IP ... show more Fraudster on this IP address (Phishing, scams, fraud). Authentication-Results: spf=pass (sender IP is 52.169.85.53) smtp.mailfrom=weinlove.de; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=weinlove.de;compauth=pass reason=100 From: "EnergyBillCalculation! " <[email protected]> Subject: Unlock Big Solar Savings with Government Assistance Date: Sun, 16 Feb 2025 21:29:54 +0100 Return-Path: [email protected] show less	Phishing Email Spam Spoofing Exploited Host
🇷🇴 195.254.134.198	14 Feb 2025	Authentication-Results: spf=pass (sender IP is 195.254.134.198) smtp.mailfrom=concogeny.com; dkim= ... show more Authentication-Results: spf=pass (sender IP is 195.254.134.198) smtp.mailfrom=concogeny.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=concogeny.com;compauth=pass reason=100 From: .SonoBello!!<[email protected]> Sender: .SonoBello!!<[email protected]> Subject: .Look Great and Save $250!! Date: Fri, 14 Feb 2025 15:29:43 +0100 Return-Path: [email protected] show less	Phishing Email Spam Hacking Spoofing Exploited Host