The host at this IP address is being (ab)used to «listbomb» email addresses: From: jeannine@dailyplanetltd.com Subject: It’s COLD outside…. Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================ In order… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: brad@dailyplanetltd.com Subject: February Shirts of the Month Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: jeannine@dailyplanetltd.com Subject: March Shirt of the Month Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

4/01/2019: Spamming again, through mostly the same groups. Google Abuse does not appear to have acted against this spam operation at all. Received: from mail-oi1-f189.google.com (mail-oi1-f189.google.com [209.85.167.189]) Sender: dispatchesfromheaven10@googlegroups.com Date: Mon, 1 Apr 2019 08:##:## -0700 (PDT) From: spiritualisrael4@gmail.com Subject: [Christian Media] ChristianMediaDaily News — The Week In Review — 04/01/2019 [Content as below] 3/25/2019:… Читать далее Google Groups Spam Groups (ChristianMediaDaily)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: jeannine@dailyplanetltd.com Subject: April Shirt of the Month Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

Spammer hosting located here: $ dig +short www.migros.com-giftme.com c.storage.googleapis.com. storage.l.googleusercontent.com. 172.217.168.16

The host at this IP address is being (ab)used to «listbomb» email addresses: From: jeannine@dailyplanetltd.com Subject: May Shirts of the Month Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address (172.217.17.144) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://storage.googleapis.com/ultramaker/06/v.txt https://storage.googleapis.com/ultramaker/06/vv.txt https://storage.googleapis.com/ultramaker/07/v.txt https://storage.googleapis.com/ultramaker/07/vv.txt https://storage.googleapis.com/ultramaker/08/v.txt https://storage.googleapis.com/ultramaker/08/vv.txt AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: ams15s30-in-f144.1e100.net

The host at this IP address (35.189.74.201) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://instrukcja-ppoz.pl/wordpress/bkrp50n6ykdygn3s_kqboj-845329891893/ https://instrukcja-ppoz.pl/wordpress/Scan/uZolOcYDvVxeBfUFpHBlIogckNCiE/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 201.74.189.35.bc.googleusercontent.com

Spam source ==================================================================== Received: from mail-pf1-f194.google.com (HELO mail-pf1-f194.google.com) (209.85.210.194) by X (qpsmtpd/0.80) with (AES128-SHA encrypted) ESMTPS; Tue, 11 Jun 2019 X Received: by mail-pf1-f194.google.com with SMTP id X for <X>; Tue, 11 Jun 2019 X DKIM-Signature: X X-Google-DKIM-Signature: X X-Gm-Message-State: X X-Google-Smtp-Source: X X-Received: by 2002:a63:e317:: with SMTP id X; Tue, 11 Jun 2019 05:17:15… Читать далее Spam source @209.85.210.194