Received a spoofed phishing email on February 23, 2026, originating from IP 192.3.183.94 (PTR: 192-3 ...
show moreReceived a spoofed phishing email on February 23, 2026, originating from IP 192.3.183.94 (PTR: 192-3-183-94-host.colocrossing.com).
The email impersonates (failed SPF, no DKIM, DMARC fail) and contains malicious SVG attachments with embedded JavaScript payload designed as an infostealer script. Payload attempts to exfiltrate sensitive data upon execution. Email headers indicate use of Amazon SES for delivery, with obfuscated subject mimicking a voicemail preview.
show less
Multiple automated requests for /wpad.dat from this IP over a short period. This is a known vector f ...
show moreMultiple automated requests for /wpad.dat from this IP over a short period. This is a known vector for proxy auto-discovery abuse or reconnaissance.
show less
Bad Web BotWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.