AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User swannmech joined AbuseIPDB in September 2026 and has reported 3 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇨🇦 15.222.110.90	08 Sep 2026	Source IP 15.222.110.90 (AWS ca-central-1) sent spoofed email with forged From: header of swannmech ... show more Source IP 15.222.110.90 (AWS ca-central-1) sent spoofed email with forged From: header of swannmechanical.com to alairhomes.com. 6 attempts observed: 4 on Sep 3 and 2 on Sep 6, 2026 (UTC). First batch used forged envelope-from em4666.swannmechanical.com to impersonate our SendGrid subdomain; second batch used direct swannmechanical.com envelope-from. All failed SPF and DKIM alignment and were quarantined by Microsoft 365 DMARC. Part of a broader phishing campaign impersonating our company. FBI IC3 report filed: 40965d1f2a7f4625ae0b1fe866c9994a. AWS abuse report already filed on primary attacker IP 35.174.145.124. show less	Spoofing Email Spam Phishing
🇳🇱 45.82.13.151	08 Sep 2026	Source IP 45.82.13.151 sent spoofed email with forged From: header of swannmechanical.com (our doma ... show more Source IP 45.82.13.151 sent spoofed email with forged From: header of swannmechanical.com (our domain) to [email protected]. 2 attempts observed: Aug 31 and Sep 1, 2026 (UTC). Both failed SPF alignment for swannmechanical.com and were quarantined by Microsoft 365 DMARC (p=quarantine policy). Part of a broader phishing campaign impersonating our company. FBI IC3 report filed: 40965d1f2a7f4625ae0b1fe866c9994a. IP is on RIPE/IPXO-managed infrastructure (ISP: Global Connectivity Solutions LLP, PTR 117646.ip-ptr.tech) — same leasing chain as another attacker IP 154.127.53.78, suggesting a single actor. show less	Spoofing Email Spam Phishing
🇺🇸 154.127.53.78	08 Sep 2026	Source IP 154.127.53.78 sent spoofed email with forged From: header of swannmechanical.com (our dom ... show more Source IP 154.127.53.78 sent spoofed email with forged From: header of swannmechanical.com (our domain) to [email protected]. 3 attempts observed: Aug 31 and Sep 2, 2026 (UTC), 1 message and 2 messages respectively. All failed SPF alignment for swannmechanical.com and were quarantined by Microsoft 365 DMARC (p=quarantine policy). Part of a broader phishing campaign impersonating our company that has victimized real customers. FBI IC3 report filed: 40965d1f2a7f4625ae0b1fe866c9994a. IP is IPXO-leased to Digital Energy Technologies Ltd (AFRINIC block). show less	Spoofing Email Spam Phishing