The host at this IP address is being (ab)used to «listbomb» email addresses: From: mattzuziks@outlook.com Subject: driving traffic to your website Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

Resolving amonge-japanes-amz.cintaku-diatasbalkon.com (amonge-japanes-amz.cintaku-diatasbalkon.com)… 40.117.34.42 <—————- here. 40.117.34.42 dj8aso.com 40.117.34.42 accountsupportalert-amazon-com.dj8aso.com 40.117.34.42 acccountsupportalert-amazon-com.dj8aso.com 40.117.34.42 asukoecok.com 40.117.34.42 service-mailapp-supportid-32882r.hahipglow.com 40.117.34.42 camonis.com 40.117.34.42 csi.myvnc.com Received: from smtp189.octdeliver.in (smtp189.octdeliver.in [199.166.36.189]) (using TLSv1.2 Date: Sat, 3 Oct 2020 x +0530 To: «x» <x> From: アカウントアラート <support@yahoo.jp> Subject: * 【アラート】確認してください Message-ID: <x@tcmail15.in> Received: from Zioalfino (172.31.3.82) (wait, is this yahoo or amazon… Читать далее Chinese phisher trying to phish Amazon JP (landing site.)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: info@schulman.nl Subject: Online veiling 2, veiling 364 & jubileumveiling 365 — E-Auction 2, auction 364 & Jubilee auction 365 Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is… Читать далее Abused / misconfigured newsletter service (listbombing)

Received: from liandzvqtm.edu (52.161.146.95 [52.161.146.95]) From: Get Your Latest Credit Score <contact.[]@zz0.dvckpoxcsj.com> Subject: [], Get Your Latest Credit Score Date: Mon, 05 Oct 2020 22:0x:xx +0100 Location: https://lucamenrtaprodirect.sfo2.digitaloceanspaces.com/[] Server IP address is 138.68.32.225 => Location: http://r3.astate.space/rdt/[] Server IP address is 159.203.56.19 => Location: https://www.airtaryo.com/o[] Server IP address is 173.82.12.99 => Location: http://novatrk.com/?a=5513&c=1098&s1=[]&s2=[] Server IP address… Читать далее spam emitter @52.161.146.95

Received: from aimqrezcrs.edu (52.231.199.25 [52.231.199.25]) From: Walk-in Bathtub Quotes <contact.[]@QJv.hpmrsesnmo.com> Subject: [], Safe Bathing For Your Loved Ones Date: Wed, 07 Oct 2020 12:1x:xx +0100 URL: https://lucamenrtaprodirect.sfo2.digitaloceanspaces.com/[] Server IP address is 138.68.32.225 => Location: http://r3.astate.space/rdt/[] Server IP address is 159.203.56.19 => Location: https://www.airtaryo.com/[] Server IP address is 185.175.56.216 => Location: https://emclk.com/?a=5356&c=2243&s1=[]&s2=[] Server IP address is… Читать далее spam emitter @52.231.199.25

Spam source ==================================================================== Received: from small-2-8.francecentral.cloudapp.azure.com ([51.103.87.78]) by X id X; Thu, 08 Oct 2020 X X-Mailer: PHPMailer 5.2.26 (https://github.com/PHPMailer/PHPMailer) Subject:=?UTF-8?B?V2lyIGhhYmVuIGVpbmUgw5xiZXJyYXNjaHVuZyBmw7xyIFNQQVIgU2hvcHBlciE=?= Content-Transfer-Encoding: 8bit X-PHP-Originating-Script: 10:class.phpmailer.php To: X Date: Mon, 11 Jun 2018 X Message-ID: <X@sedo.com> Reply-To: contact@sedo.com Content-Type: text/html; charset=»ascii» MIME-Version: 1.0 From: Spar <contact@sedo.com> […] ====================================================================

Spam source ==================================================================== Received: from xcwjp.semrush.com ([51.103.158.166]) by X id X; Thu, 08 Oct 2020 X X-Mailer: PHPMailer 5.2.26 (https://github.com/PHPMailer/PHPMailer) Subject: ***SPAM*** Ihres Umsatzes zu erzieen Content-Transfer-Encoding: 8bit X-PHP-Originating-Script: 10:class.phpmailer.php To: X Date: Mon, 11 Jun 2018 X Message-ID: <X@sedo.com> Reply-To: contact@sedo.com Content-Type: text/html; charset=»ascii» MIME-Version: 1.0 […] ====================================================================

Spam source ==================================================================== Received: from rtj.hotmail.com ([52.232.44.164]) by X id X; Thu, 08 Oct 2020 X To: X Subject: — 14 Kg in 1 Monat ohne Fasten, ohne Bewegung X-PHP-Originating-Script: 100000:class.phpmailer.php Date: Thu, 08 Oct 2020 X From: Gewichtsverlust Deal <contact893@sedo.com> Reply-To: contact@sedo.com Message-ID: <X@sedo.com> X-Mailer: PHPMailer 5.2.26 (https://github.com/PHPMailer/PHPMailer) MIME-Version: 1.0 Content-Type: text/html; charset=»ascii» Content-Transfer-Encoding:… Читать далее Spam source @52.232.44.164

Received: from o0tw.hwsqergjnxqivtg.com (ghufd-ukwest3.ukwest.cloudapp.azure.com [51.141.76.77]) by xxx; Thu, 8 Oct 2020 06:22:15 -0400 (EDT) To: xxx MIME-Version: 1.0 Date: Thu, 08 Oct 2020 12:22:05 +0200 Message-ID: <xxx@s01.news.newsletter2go.com> From: SumBitcoin <vVSzm@uhnresearch.ca> Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=»UTF-8″ Subject: Your chance has arrived! ID:078781 https://storage.googleapis.com/uxyihosbxzxduklakaemhm/-__-ugzankzgtqzbwmcgxuta-__-/SUMyfxvxlaeajelemsgvkql_offer.html#5378101551703586562032634781044u0NAkkdTZ4CasFXjwLsVSXzAj1BWt6zqCUmXhcq1DaoPi91719451416144333604896210913939262929283567965289509372352503514274168499624849822929026860439233p06o7QI >>> https://rewardspa.com/?xxx

The host at this IP address is being (ab)used to «listbomb» email addresses: From: ankitdjje@outlook.com Subject: Re: Mobile Apps Development Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================ In… Читать далее Abused / misconfigured newsletter service (listbombing)