| 209.239.119.210 |
spam |
SPAM:
============================================================
X-From_: ubcoszj@hot-sorect.it Wed Mar 24 23:35:23 2021
Return-Path:
Received: from mail.hot-sorect.it (mail.hot-sorect.it [209.239.119.210])
Received: from hot-sorect.it (unknown [185.95.85.156])
by mail.hot-sorect.it (Postfix) with ESMTPA id CCDA0100B8612;
Wed, 24 Mar 2021 23:18:48 +0200 (EET)
Message-ID: <5d6901d7210c$72df4d00$13422503@ubcoszj>
From: "=?windows-1251?B?b3J4YWNqcA==?="
To:
Subject: =?windows-1251?B?eXljb21scyB1YmZ1eWRj?=
Date: Thu, 25 Mar 2021 00:18:58 +0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
invezqc otwamnm eqcadqp |
2021-03-27 11:08:17 |
| 134.73.142.214 |
spamattack |
PHISHING AND SPAM ATTACK
FROM "Costco Shopper Feedback " :
SUBJECT "Your Opinion is Important! Take This Survey to Claim Your $50 Costco Reward" :
RECEIVED "rom [134.73.142.211] (port=54419 helo=stack.medicarespro.buzz)" :
DATE/TIMESENT "Sun, 04 Apr 2021 20:57:11"
IP ADDRESS "inetnum: 134.73.0.0 - 134.73.255.255 OrgName: LayerHost" |
2021-04-05 06:44:56 |
| 95.172.59.182 |
attack |
via dude login failure for user admin from 95.172.59.182 |
2021-04-23 08:37:17 |
| 156.146.63.13 |
spam |
Mail contains an email address reference in the text belonging to a legitimate website. |
2021-04-25 09:17:27 |
| 183.63.253.200 |
proxy |
183.63.253.200 |
2021-04-07 17:32:49 |
| 168.194.109.4 |
normal |
DiosEnTiConfioC.A Network |
2021-04-09 06:35:28 |
| 91.214.71.117 |
spamattack |
org-name: ArtPlanet LLC
country: RU
inetnum: 91.214.68.0 - 91.214.71.255
91.214.71.117 Auto-trading program - etbodyb@belgum-hotel.be - New cryptocurrency auto-trading program, Mon, 19 Apr 2021 |
2021-04-19 12:01:09 |
| 103.105.35.89 |
normal |
HP YANG ADA IP TERSEBUT TELAH DICURI,MOHON BANTUANNYA UNTUK MELACAK |
2021-03-23 08:05:08 |
| 102.52.153.39 |
attack |
102.52.153.39 |
2021-04-11 01:12:39 |
| 111.119.185.25 |
spam |
Provide him my personal gmail mrfaisal14023@gmail.com for contact me |
2021-03-23 22:49:33 |
| 150.17.75.146 |
spamattack |
PHISHING AND SPAM ATTACK
FROM "OfficeDepotOrders@officedepot.com" :
SUBJECT "Office Depot Store Receipt #725636500-001" :
RECEIVED "from ( [150.17.75.146]) by host-88-57-55-218.business.telecomitalia.it with SMTP id 79A925EE" :
DATE/TIMESENT "Wed, 24 Mar 2021 17:10:11 ":
IP ADDRESS "inetnum: 150.11.0.0 - 150.24.255.255 address: Chiyoda-ku, Tokyo 101-0047, Japan" :
NOTE "DO NOT open virus laden Receipt for Payment" |
2021-03-25 04:51:22 |
| 40.68.5.25 |
spamattack |
40.68.5.25 Show off Your Body Again -info.48098@207-deutschhomes.club- Welcome to The Keto Lifestyle, Thu, 15 Apr 2021
Refer Also to Other emails from same group
Organization: Microsoft Corporation (MSFT)
NetRange: 40.64.0.0 - 40.71.255.255
23.102.8.242 Show off Your Body Again - info.98946@077-deutschclan.club- Welcome to The Keto Lifestyle, Tue, 13 Apr 2021
52.169.184.93 Show off Your Body Again - info.39200@764-deutschstore.club- Welcome to The Keto Lifestyle, Wed, 14 Apr 2021
52.170.130.95 Health Tips -info.10715@136-deutschco.club- Welcome to The Keto Lifestyle Sat, 10 Apr 2021 |
2021-04-16 06:47:13 |
| 45.5.37.122 |
spambotsattackproxynormal |
teste |
2021-04-17 02:24:03 |
| 69.65.62.87 |
spamattack |
69.65.62.87 123Greetings - specials@123g.biz - Deadly Brain Disease That Can Happen To Anyone, Tue, 20 Apr 2021
Refer to previous related messages.
OrgName: GigeNET
NetRange: 69.65.0.0 - 69.65.63.255
69.65.59.71 123 Greetings, 123g
69.65.62.93 123 Greetings, 123g
69.65.62.75 123Greetings - specials@123g.biz - This Firefighter's Secret Relaxes Blood Pressure, Wed, 21 Apr 2021
69.65.62.80 123Greetings - specials@123g.biz - Miracle Ingredients Reverse Type II Diabetes, Wed, 14 Apr 2021
69.65.62.112 123Greetings - specials@123g.biz - This Firefighter's Secret Relaxes Blood Pressure, Sat, 17 Apr 2021 |
2021-04-22 07:23:08 |
| 190.95.184.58 |
spambotsattackproxynormal |
I don't know why my IP publishes it on blacklists |
2021-04-22 23:24:51 |