AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User JSmith29433 joined AbuseIPDB in October 2026 and has reported 121 IP addresses.

Standing (weight) is Unknown.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇱 4.180.73.111	26 Oct 2026	Mail server weituodan.com (A and MX, own SPF) sending fake Mitsubishi UFJ eSmart Securities phishing ... show more Mail server weituodan.com (A and MX, own SPF) sending fake Mitsubishi UFJ eSmart Securities phishing emails to users in Japan ([email protected], 2026-10-22): https://x.com/yamasanman/status/2113287373010375124 . I did not open any link. show less	Email Spam Phishing
🇳🇱 20.71.209.28	26 Oct 2026	Mail server henanchifanwang.com (A and MX, own SPF) sending fake Mitsubishi UFJ eSmart Securities "p ... show more Mail server henanchifanwang.com (A and MX, own SPF) sending fake Mitsubishi UFJ eSmart Securities "passkey" phishing emails to users in Japan ([email protected], 2026-10-22/23): https://x.com/yamasanman/status/2113287373010375124 . I did not open any link. show less	Email Spam Phishing
🇺🇸 20.42.95.226	26 Oct 2026	Mail server reluctant.gxncgc.com (A and MX, own SPF) sending fake National Tax Agency of Japan phish ... show more Mail server reluctant.gxncgc.com (A and MX, own SPF) sending fake National Tax Agency of Japan phishing emails to users in Japan (2026-10-22): https://x.com/yamasanman/status/2113287373010375124 . I did not open any link. show less	Email Spam Phishing
🇸🇬 4.194.5.134	26 Oct 2026	Mail server mail37.vodwo.com (A and MX; SPF ip4:4.194.5.0/24) sending fake AEON CARD "10,000 points" ... show more Mail server mail37.vodwo.com (A and MX; SPF ip4:4.194.5.0/24) sending fake AEON CARD "10,000 points" phishing emails to users in Japan (2026-10-26 13:34 JST): https://meiwakumail.jp/mail/96581/ . I did not open any link. show less	Email Spam Phishing
🇺🇸 20.228.73.152	26 Oct 2026	Mail server prudent.xthaiyun.com (A and MX, own SPF), same fake e-Tax mail group as persevere.xthaiy ... show more Mail server prudent.xthaiyun.com (A and MX, own SPF), same fake e-Tax mail group as persevere.xthaiyun.com targeting users in Japan (October 2026). I did not open any link. show less	Email Spam Phishing
🇯🇵 43.165.135.154	26 Oct 2026	Hosts fake SAISON CARD Net Answer / SAISON ID login pages for users in Japan: saisnojpplogion.zqlaoj ... show more Hosts fake SAISON CARD Net Answer / SAISON ID login pages for users in Japan: saisnojpplogion.zqlaoja.info (https://x.com/ytakahashiprvt1/status/2114593036160430327), asoiasonc.bdjxnasj.info and stanni3or.iuiva.info (https://meiwakumail.jp/mail/96590/), 2026-10-26. I did not open any link. show less	Phishing
🇰🇷 52.231.220.79	26 Oct 2026	Mail server persevere.xthaiyun.com (A and MX, own SPF) sending fake e-Tax support phishing emails to ... show more Mail server persevere.xthaiyun.com (A and MX, own SPF) sending fake e-Tax support phishing emails to users in Japan (2026-10-22): https://x.com/yamasanman/status/2113287373010375124 . I did not open any link. show less	Email Spam Phishing
🇰🇷 20.214.63.23	26 Oct 2026	Mail server scrutinize.tangull.com (A and MX, own SPF) sending fake e-Tax refund phishing emails to ... show more Mail server scrutinize.tangull.com (A and MX, own SPF) sending fake e-Tax refund phishing emails to users in Japan (2026-10-21 09:05 JST), shown by the recipient: https://ameblo.jp/ashitano-kioku-4/entry-12982249333.html . I did not open any link. show less	Email Spam Phishing
🇰🇷 20.194.6.248	26 Oct 2026	Mail server diligent.hzlbjs.com (A and MX, own SPF) sending fake National Tax Agency of Japan emails ... show more Mail server diligent.hzlbjs.com (A and MX, own SPF) sending fake National Tax Agency of Japan emails to users in Japan (2026-10-21): https://x.com/TY1kQS10ZFpje28/status/2112669166935412818 . I did not open any link. show less	Email Spam Phishing
🇦🇺 20.36.47.163	26 Oct 2026	Mail server abundant.hzlbjs.com (A and MX, own SPF), part of the same fake e-Tax mail group as versa ... show more Mail server abundant.hzlbjs.com (A and MX, own SPF), part of the same fake e-Tax mail group as versatile/persevere/diligent.hzlbjs.com targeting users in Japan (October 2026). I did not open any link. show less	Email Spam Phishing
🇲🇽 158.23.21.32	26 Oct 2026	Mail server ownsr.gj-lz.com (A and MX; SPF ip4:158.23.21.0/24) sending fake National Tax Agency of J ... show more Mail server ownsr.gj-lz.com (A and MX; SPF ip4:158.23.21.0/24) sending fake National Tax Agency of Japan phishing emails to users in Japan (2026-10-23): https://x.com/yamasanman/status/2114315005814514012 . I did not open any link. show less	Email Spam Phishing
🇯🇵 13.78.38.9	26 Oct 2026	Mail server persevere.hzlbjs.com (A and MX, own SPF) sending fake e-Tax phishing emails to users in ... show more Mail server persevere.hzlbjs.com (A and MX, own SPF) sending fake e-Tax phishing emails to users in Japan (2026-10-20): https://x.com/yamasanman/status/2112561541681934758 . I did not open any link. show less	Email Spam Phishing
🇰🇷 74.227.129.231	26 Oct 2026	Mail server versatile.hzlbjs.com (A and MX, own SPF) sending fake National Tax Agency of Japan e-Tax ... show more Mail server versatile.hzlbjs.com (A and MX, own SPF) sending fake National Tax Agency of Japan e-Tax phishing emails to users in Japan (2026-10-20): https://x.com/hyokocho/status/2112329829081321648 . I did not open any link. show less	Email Spam Phishing
🇯🇵 163.43.29.30	26 Oct 2026	Authoritative DNS (ns1/ns2.vit1-x1ps.tokyo, also ns1/ns2.equity-sprint.com) of the spam domain vit1- ... show more Authoritative DNS (ns1/ns2.vit1-x1ps.tokyo, also ns1/ns2.equity-sprint.com) of the spam domain vit1-x1ps.tokyo, which sends unsolicited fortune-telling spam to users in Japan and moves its A records to a new AWS EC2 IP about every 10 minutes (49 IPs on 2026-10-26). https://x.com/ENyxSJHIFwhR2Oe/status/2114473152512418248 I did not open any link. show less	Email Spam
🇹🇼 103.246.177.235	26 Oct 2026	Hosts xkn31.com (registered 2026-10-17), the link of dating spam emails sent to users in Japan on 20 ... show more Hosts xkn31.com (registered 2026-10-17), the link of dating spam emails sent to users in Japan on 2026-10-26: https://x.com/oxazolineC3H5NO/status/2114674259717165191 . /log_index.php serves a dating site member page. I did not open any link. show less	Email Spam
🇯🇵 34.97.110.33	26 Oct 2026	Website of franchiseinks.com, the sender domain of fake National Tax Agency of Japan (e-Tax) refund ... show more Website of franchiseinks.com, the sender domain of fake National Tax Agency of Japan (e-Tax) refund emails ([email protected], 2026-10-18): https://x.com/machuco_DX/status/2114675621909692785 . Shows decoy blog pages; urlscan.io saw a phishing path redirect to the real e-Tax site on 2026-10-23. I did not open any link. show less	Phishing
🇭🇰 45.91.226.53	26 Oct 2026	Hosts the link pages of fake AEON CARD / Amazon Prime phishing emails to users in Japan: www.hqmuvi. ... show more Hosts the link pages of fake AEON CARD / Amazon Prime phishing emails to users in Japan: www.hqmuvi.com (https://meiwakumail.jp/mail/96591/), www.lbmstea.com (https://meiwakumail.jp/mail/96583/), www.xinhedp.com (https://meiwakumail.jp/mail/96572/), gpmedhk.com, snfmxh.com and more. The email path on hqmuvi.com returned 302 from JP/DE/US on 2026-10-26 (check-host.net 53928888k44e). I did not open any link. show less	Phishing
🇸🇬 20.205.188.151	26 Oct 2026	Mail server mail24.sddbs.com (A and MX; SPF ip4:20.205.188.0/24) sending fake AEON CARD "10,000 poin ... show more Mail server mail24.sddbs.com (A and MX; SPF ip4:20.205.188.0/24) sending fake AEON CARD "10,000 points" phishing emails to users in Japan (2026-10-26 18:52 JST): https://meiwakumail.jp/mail/96591/ . I did not open any link. show less	Email Spam Phishing
🇳🇱 40.114.192.202	26 Oct 2026	Mail server 6b8hd3.shfenxinbz.com (A and MX; SPF ip4:40.114.192.0/24) sending fake Lawson Ticket (L- ... show more Mail server 6b8hd3.shfenxinbz.com (A and MX; SPF ip4:40.114.192.0/24) sending fake Lawson Ticket (L-tike) "system fee" phishing emails to users in Japan (2026-10-26 19:16 JST). Posted by a recipient: https://x.com/taka_taka_4631/status/2114670042675826917 . I did not open any link. show less	Email Spam Phishing
🇯🇵 4.241.72.115	26 Oct 2026	Mail server mail.dyxcwy.com (A and MX; SPF ip4:4.241.72.115 -all) sending fake American Express "18, ... show more Mail server mail.dyxcwy.com (A and MX; SPF ip4:4.241.72.115 -all) sending fake American Express "18,888 points" phishing emails to users in Japan ([email protected], 2026-10-23 and 2026-10-26). Posted by a recipient: https://x.com/nao_m_o/status/2113485981404016926 . I did not open any link. show less	Email Spam Phishing
🇯🇵 43.165.175.126	25 Oct 2026	Still hosts fake UC CARD / American Express / SAISON CARD login pages for users in Japan: uccafuo.d7 ... show more Still hosts fake UC CARD / American Express / SAISON CARD login pages for users in Japan: uccafuo.d7tzk1d.asia/VNPTRLl, americanedsdfexpress.yy21sh.info/yxhZxla, saisoncntdfard.74g638.info/BRFApX and uccagtu.2q69ib.info/VNPTRLl. All four returned 403 from Japan, Germany and the US on 2026-10-25 18:34 JST (check-host.net 535048c3k78c). Posted on X: https://x.com/delicious_unaju/status/2114264284545032535 . I did not open the links. show less	Phishing
🇯🇵 47.79.90.89	25 Oct 2026	Hosts a fake Amazon.co.jp sign-in page at 6dd56b.jl0001-ph.net, reached from dashu365.net; it return ... show more Hosts a fake Amazon.co.jp sign-in page at 6dd56b.jl0001-ph.net, reached from dashu365.net; it returned 200 from Japan, Germany and the US on 2026-10-25 19:11 JST (check-host.net 5351e422k540). Posted on X: https://x.com/delicious_unaju/status/2114296321826033707 . The same IP hosted another fake Amazon domain (2c2a9c.jackpot-deluxe.net) on 2026-10-23. I did not open the links. show less	Phishing
🇯🇵 152.32.201.55	25 Oct 2026	Hosts centercbl.com, the "log in to receive the reward" link of a fake Pokemon Card Game 30th annive ... show more Hosts centercbl.com, the "log in to receive the reward" link of a fake Pokemon Card Game 30th anniversary email to users in Japan (received 2026-10-25 17:41 JST). Posted on X: https://x.com/Doz_return/status/2114285517831639406 . The top page returned 404 from Japan, Germany and the US (check-host.net 5350cf7bkad8). I did not open the link. show less	Phishing
🇸🇬 34.126.154.132	25 Oct 2026	Mail server mail13.zzsfjc.com (SPF ip4:34.126.154.0/24) that sent a fake Amazon Prime payment-failur ... show more Mail server mail13.zzsfjc.com (SPF ip4:34.126.154.0/24) that sent a fake Amazon Prime payment-failure email to a user in Japan on 2026-10-25 17:30 JST, linking to www.snfmxh.com. Public post: https://meiwakumail.jp/mail/96548/ . I did not open any link. show less	Email Spam Phishing
🇸🇪 4.223.225.213	25 Oct 2026	Mail server uvpamm.lethbridgehog.com (A and MX; SPF ip4:4.223.225.0/24) sending phishing emails that ... show more Mail server uvpamm.lethbridgehog.com (A and MX; SPF ip4:4.223.225.0/24) sending phishing emails that impersonate Apple iCloud+ billing to users in Japan: six emails on 2026-10-25 17:08-18:09 JST, subject "[Important] Update your payment method". Posted on X: https://x.com/cool_0099/status/2114284673996361827 . I did not open any link. show less	Email Spam Phishing