| 2.58.148.71 |
spamattack |
PHISHING AND SPAM ATTACK
GROUP USES LayerHost, IP SERVER LLC, Root Networks LLC, Serverion BV, XSServer GmbH, Xervers, Colocrossing
104.148.18.18 Bitcoin Select arianna.lavoi@boschbuy.club, Dividends Paid Every 60 Minutes - New underground DeFi crypto, 05 Jul 2021
2.58.148.71 Save on the Cost of Gas - Effuel@shofybox.us, This Simple Device Saves You 25% on Your Car's Fuel Consumption, Wed, 7 Jul
inetnum: 2.58.148.0 - 2.58.149.255 org-name: Serverion BV
inetnum: 5.252.192.0 - 5.252.195.255 org-name: IP SERVER LLC
NetRange: 23.247.0.0 - 23.247.127.255 OrgName: LayerHost
NetRange: 31.210.22.0 - 31.210.23.255 org-name: Serverion BV
NetRange: 103.73.156.0 - 103.73.156.255 OrgName: LayerHost
NetRange: 104.148.0.0 - 104.148.127.255 OrgName: LayerHost
NetRange: 104.223.128.0 - 104.223.255.255 OrgName: LayerHost
NetRange: 107.179.0.0 - 107.179.127.255 OrgName: LayerHost
NetRange: 134.73.0.0 - 134.73.255.255 CustName: Root Networks LLC
NetRange: 157.52.128.0 - 157.52.255.255 OrgName: LayerHost
NetRange: 185.239.242.0 - 185.239.242.255 org-name: Serverion BV
inetnum: 194.59.216.0 - 194.59.217.255 org-name: Serverion BV
inetnum: 195.62.32.0 - 195.62.33.255 org-name: XSServer GmbH
inetnum: 195.133.12.0 - 195.133.15.255 netname: Xervers
inetnum: 195.133.39.0 - 195.133.39.255 org-name: Serverion BV
NetRange: 198.12.64.0 - 198.12.127.255 OrgName: ColoCrossing
Some similar emails from same group
5.252.194.15 Plansforsheds - EasyShedPlans@ultraboostz.co, Discover The Easiest Way To Build Beautiful Sheds..., 15 Jun 2021
31.210.22.9 Fat belly - info@bloodpressure.buzz, Japanese “Fix” for Belly Fat?, 17 Jun 2021
31.210.22.106 On Hold - OnHold@ecobuds.us, Your FREE Red Laser Targeting System, 21 Jun 2021 |
2021-07-08 06:00:22 |
| 192.241.136.36 |
spamattack |
PHISHING AND SPAM ATTACK
192.241.136.36 Re: Special Offer - admin@tcwuzi.co.in, Hello xxx@xxxxx.xx,Stand a chance to win a 10 x $100 McDonald's Voucher, Sun, 16 May 2021
inetnum: 192.241.128.0 - 192.241.255.255 org-name: DigitalOcean, LLC City: New York |
2021-07-07 16:50:44 |
| 178.32.105.171 |
attack |
Try to relay to smtpbruter@gmail.com
Jul 20 12:48:01 mail postfix/postscreen[5842]: NOQUEUE: reject: RCPT from [109.237.103.13]:63328: 550 5.7.1 Service unavailable; client [109.237.103.13] blocked using sip-sip24.scty7yjrxsew.invaluement.com; from=, to=, proto=ESMTP, helo=<08aApY>
J |
2021-07-20 19:46:47 |