A phish operation is sending phish from a number of Linode IP addresses.
SENDING IPs:
139.177.202.32
139.177.202.85
139.177.202.14
170.187.144.35
170.187.155.146
194.195.214.65
194.195.214.86
SPAM SAMPLE:
Received: from omaik.com (170-187-155-146.ip.linodeusercontent.com [170.187.155.146])
Date: Fri, 8 Apr 2022 13:##:## +0000 (UTC)
From: Danske Bank <support@omaik.com>
Reply-To: support@omaik.com
Subject: ? Sinulla on uusi viestie
<snip>
Sinulla on (1) tärkeä viesti suojatussa
postilaatikossasi.
Katsoaksesi sen, napsauta alla olevaa linkkiä:Lisää tietoaKirjaudu Ystävällisin terveisin,Danske Bank
[ Kirjaudu ]
[[ http://palikioeks.com/ ]
<snip>
NetRange: 139.177.176.0 — 139.177.207.255
CIDR: 139.177.176.0/20, 139.177.192.0/20
NetName: LINODE-US
NetHandle: NET-139-177-176-0-1
Parent: NET139 (NET-139-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Linode (LINOD)
RegDate: 2021-03-24
Updated: 2021-03-30
Ref: https://rdap.arin.net/registry/ip/139.177.176.0
OrgName: Linode
OrgId: LINOD
Address: 249 Arch St
City: Philadelphia
StateProv: PA
PostalCode: 19106
Country: US
RegDate: 2008-04-24
Updated: 2019-06-28
Comment: http://www.linode.com
Ref: https://rdap.arin.net/registry/entity/LINOD
OrgNOCHandle: LNO21-ARIN
OrgNOCName: Linode Network Operations
OrgNOCPhone: +1-609-380-7304
OrgNOCEmail: support@linode.com
OrgNOCRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
OrgAbuseHandle: LAS12-ARIN
OrgAbuseName: Linode Abuse Support
OrgAbusePhone: +1-609-380-7100
OrgAbuseEmail: abuse@linode.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/LAS12-ARIN
OrgTechHandle: LNO21-ARIN
OrgTechName: Linode Network Operations
OrgTechPhone: +1-609-380-7304
OrgTechEmail: support@linode.com
OrgTechRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
NetRange: 170.187.128.0 — 170.187.255.255
CIDR: 170.187.128.0/17
NetName: LINODE-US
NetHandle: NET-170-187-128-0-1
Parent: NET170 (NET-170-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Linode (LINOD)
RegDate: 2021-05-05
Updated: 2021-05-05
Ref: https://rdap.arin.net/registry/ip/170.187.128.0
OrgName: Linode
OrgId: LINOD
Address: 249 Arch St
City: Philadelphia
StateProv: PA
PostalCode: 19106
Country: US
RegDate: 2008-04-24
Updated: 2019-06-28
Comment: http://www.linode.com
Ref: https://rdap.arin.net/registry/entity/LINOD
OrgAbuseHandle: LAS12-ARIN
OrgAbuseName: Linode Abuse Support
OrgAbusePhone: +1-609-380-7100
OrgAbuseEmail: abuse@linode.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/LAS12-ARIN
OrgTechHandle: LNO21-ARIN
OrgTechName: Linode Network Operations
OrgTechPhone: +1-609-380-7304
OrgTechEmail: support@linode.com
OrgTechRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
OrgNOCHandle: LNO21-ARIN
OrgNOCName: Linode Network Operations
OrgNOCPhone: +1-609-380-7304
OrgNOCEmail: support@linode.com
OrgNOCRef: https://rdap.arin.net/registry/entity/LNO21-ARIN
% Information related to ‘194.195.208.0 — 194.195.223.255’
% Abuse contact for ‘194.195.208.0 — 194.195.223.255’ is ‘abuse@linode.com’
inetnum: 194.195.208.0 — 194.195.223.255
netname: US-LINODE-19950914
country: GB
org: ORG-LL72-RIPE
admin-c: TA2589-RIPE
tech-c: AF11785-RIPE
status: ALLOCATED PA
mnt-by: linode-mnt
mnt-by: RIPE-NCC-HM-MNT
created: 2021-03-25T09:14:37Z
last-modified: 2021-03-25T09:14:37Z
source: RIPE
organisation: ORG-LL72-RIPE
org-name: Linode, LLC
country: US
org-type: LIR
address: 249 Arch Street
address: 19106
address: Philadelphia
address: UNITED STATES
phone: +16093807100
fax-no: +16093807200
admin-c: AF11785-RIPE
admin-c: TA2589-RIPE
tech-c: AF11785-RIPE
abuse-c: LAS85-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: linode-mnt
mnt-by: RIPE-NCC-HM-MNT
mnt-by: linode-mnt
created: 2009-11-02T13:42:45Z
last-modified: 2020-12-16T13:00:31Z
source: RIPE # Filtered
person: Thomas Asaro
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205, USA
phone: +1 609 380-7100
nic-hdl: AF11785-RIPE
mnt-by: Linode-mnt
created: 2014-08-14T14:54:46Z
last-modified: 2018-03-22T15:57:36Z
source: RIPE
person: Thomas Asaro
address: 329 E. Jimmie Leeds Road, Suite A, Galloway, NJ 08205, USA
phone: +16093807504
nic-hdl: TA2589-RIPE
mnt-by: Linode-mnt
created: 2009-11-02T17:17:56Z
last-modified: 2014-11-20T18:51:15Z
source: RIPE