AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User AlphaLevel joined AbuseIPDB in April 2026 and has reported 64 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇳🇱 34.7.204.179	07 May 2026	GCE-hosted spoofing toolkit sending email with header_from spoofed to fuzweb.com, DKIM absent, SPF a ... show more GCE-hosted spoofing toolkit sending email with header_from spoofed to fuzweb.com, DKIM absent, SPF auth on RFC1918 (10.88.0.x Docker bridge), rejected by Google with local_policy 550-5.7.1 — observed in DMARC aggregate report for May 5, 2026 UTC. show less	Email Spam
🇳🇱 34.12.255.29	06 May 2026	Spoofed-sender abuse on GCP europe-west4 (AS396982). er Google's own DMARC aggregate report: - DKI ... show more Spoofed-sender abuse on GCP europe-west4 (AS396982). er Google's own DMARC aggregate report: - DKIM: no signature - SPF auth: 10.88.0.3 (RFC1918 — Docker bridge leak, containerized spam toolkit) - envelope_from: empty - Disposition: quarantine - Reason: local_policy "Sender requirement failed: 550-5.7.1" (Google SMTP also rejected) show less	Email Spam Spoofing
🇳🇱 34.141.156.119	06 May 2026	Spoofed-sender abuse on GCP europe-west4 (AS396982). er Google's own DMARC aggregate report: - DKI ... show more Spoofed-sender abuse on GCP europe-west4 (AS396982). er Google's own DMARC aggregate report: - DKIM: no signature - SPF auth domain: 10.88.0.4 (RFC1918 — Docker bridge IP leaking through) - envelope_from: empty - Disposition: quarantine - Reason: local_policy "Sender requirement failed: 550-5.7.1" show less	Email Spam Spoofing
🇳🇱 34.91.170.143	06 May 2026	Spoofed-sender abuse on GCP europe-west4 (AS396982). Recidivist IP — 4+ months active. Per Google's ... show more Spoofed-sender abuse on GCP europe-west4 (AS396982). Recidivist IP — 4+ months active. Per Google's own DMARC aggregate report: - DKIM: no signature - SPF auth: 10.88.0.4 (RFC1918 Docker bridge leak) - envelope_from: empty - Disposition: quarantine - Reason: local_policy "Sender requirement failed: 550-5.7.1" show less	Email Spam Spoofing
🇳🇱 35.204.46.2	05 May 2026	DMARC-failing mail spoofing fuzweb.com header_from. SPF authenticates against private RFC1918 10.88. ... show more DMARC-failing mail spoofing fuzweb.com header_from. SPF authenticates against private RFC1918 10.88.0.3 (Docker bridge egress without envelope rewrite — toolkit fingerprint). DKIM completely absent. Google's own infrastructure rejects with SMTP 550-5.7.1 (REASON local_policy in DMARC record). show less	Email Spam Spoofing
🇳🇱 34.6.248.222	04 May 2026	DMARC quarantine: spoofing fuzweb.com From: header, no DKIM, empty envelope. SPF domain 10.88.0.4 (R ... show more DMARC quarantine: spoofing fuzweb.com From: header, no DKIM, empty envelope. SPF domain 10.88.0.4 (RFC1918, GCP container). 8th event of tracked GCP phishing toolkit. show less	Phishing Email Spam Spoofing
🇩🇪 45.90.98.108	04 May 2026	DMARC quarantine: spoofing fuzweb.com From: header, no DKIM, empty envelope. Same toolkit signature ... show more DMARC quarantine: spoofing fuzweb.com From: header, no DKIM, empty envelope. Same toolkit signature as 176.100.36.92 (also AS58087) from 24h earlier. show less	Phishing Email Spam Spoofing
🇩🇪 176.100.36.92	04 May 2026	DMARC quarantine: spoofing fuzweb.com From: header, no DKIM, empty envelope. 4 attempts in 24h, all ... show more DMARC quarantine: spoofing fuzweb.com From: header, no DKIM, empty envelope. 4 attempts in 24h, all rejected. Brand-impersonation phishing toolkit. show less	Phishing Email Spam Spoofing
🇵🇱 45.138.16.217	27 Apr 2026	Observed 2026-04-23 sending email forging From: fuzweb.com (domain spoofing). DKIM fail (no signatur ... show more Observed 2026-04-23 sending email forging From: fuzweb.com (domain spoofing). DKIM fail (no signature), SPF softfail, header_from=fuzweb.com. Reported by Google in DMARC aggregate report; correctly quarantined by our p=quarantine policy. Netblock 45.138.16.0/24 belongs to AS210558 (1337 Services GmbH), known bulletproof hosting. Same operator as 185.241.208.173 (reported separately on 2026-04-22) — IP rotation within same allocation to evade enforcement. Subnet hosts multiple Tor exit nodes and brand-impersonating hostnames (powered.by.amazon.com, .ebay.com, mail.adobesiqn.com, coinbase.websupport.ltd). show less	Email Spam Spoofing
🇨🇦 67.69.168.85	24 Apr 2026	DMARC-documented sender spoofing for domain fuzweb.com. Event: Apr 20 2026. DKIM fail + SPF softfail ... show more DMARC-documented sender spoofing for domain fuzweb.com. Event: Apr 20 2026. DKIM fail + SPF softfail. Envelope from forged as @fuzweb.com. Host: Bell Canada BACOM (AS577), Ottawa. First non-cloud/non-hosting IP to attempt spoofing of this domain (consumer/business ISP IP). Abuse report sent to [email protected] on Apr 22 — awaiting response. Quarantined by Google thanks to DMARC p=quarantine policy. show less	Email Spam Spoofing
🇸🇬 128.199.161.39	24 Apr 2026	DMARC-documented sender spoofing for domain fuzweb.com. Event: Apr 10-11 2026. DKIM fail + SPF softf ... show more DMARC-documented sender spoofing for domain fuzweb.com. Event: Apr 10-11 2026. DKIM fail + SPF softfail. Envelope from forged as @fuzweb.com. Host: DigitalOcean, Singapore range (128.199.0.0/16). Abuse report sent to DigitalOcean on Apr 22 — awaiting response. Quarantined by Google thanks to DMARC p=quarantine policy. show less	Email Spam Spoofing
🇺🇸 216.250.253.42	24 Apr 2026	DMARC-documented sender spoofing for domain fuzweb.com. Event: Apr 8 2026. DKIM fail + SPF softfail. ... show more DMARC-documented sender spoofing for domain fuzweb.com. Event: Apr 8 2026. DKIM fail + SPF softfail. Envelope from forged as @fuzweb.com. Host: Spinservers (AS8100). Abuse report filed via Spinservers official form — ticket #175448 opened, reseller escalation in progress. Quarantined by Google thanks to DMARC p=quarantine policy. show less	Email Spam Spoofing
🇵🇱 185.241.208.173	24 Apr 2026	DMARC-documented sender spoofing for domain fuzweb.com. Events: Apr 2 (DMARC p=none, delivered) and ... show more DMARC-documented sender spoofing for domain fuzweb.com. Events: Apr 2 (DMARC p=none, delivered) and Apr 9 2026 (DMARC p=quarantine, blocked). DKIM fail + SPF softfail. Envelope from forged as @fuzweb.com. Host: 1337 Services GmbH (AS210558) bulletproof hosting. IP listed on Spamhaus ZEN, Sender Score, Abusix, MAILSPIKE, UCEPROTECT L1/L2/L3 (12+ blocklists). Abuse report sent to [email protected] on Apr 22 — no response. Recurring attacker. show less	Email Spam Spoofing