Loading threats
SMTP message body contains a structured relay-testing payload including IP address, timestamp, hostname, and a unique marker token. This format is commonly generated by automated open-relay validation tools to confirm successful message submission and identify the responding SMTP host. Presence of a MARKER value and repeated IP/hostname fields strongly indicates scripted probing rather than legitimate email content.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 50.6.250.242 | 98% | 419 | 93 | 🇺🇸 US | AS31898 | 2026-02-20 |
| 80.87.206.253 | 99% | 120 | 120 | 🇷🇺 RU | AS16276 | 2026-03-20 |
| 50.6.231.218 | 96% | 81 | 81 | 🇺🇸 US | AS31898 | 2026-03-09 |