Spammer hosting located here: http://khoskas.duckdns.org/crpto -> http://vlkproyal.info/?target=-X —> http://tracking.jimtedmorris.com/aff_c?offer_id=X —> http://de.the-cryptosoftware.com/?TrackingID=X —-> https://grandefex.com/ $ dig +short grandefex.com 34.98.73.147 Spam sample ================================= Received: from kgtra.minakros.info (17rkrh21.ni.net.tr [95.173.179.17]) by X (Postfix) with ESMTP id X for <Xh>; Fri, 27 Dec 2019 X X-Apparently-To: X Fri, 06 Dec 2019 X Authentication-Results: X Received-SPF: pass (domain of gmail.com designates… Читать далее Spammer hosting @34.98.73.147
Spammer hosting @104.26.7.12
Spammer hosting located here: http://8s4.us/YGHaz -> https://trackyour.delivery/?r=CH —> https://package-tracking.buzz/CH/ —> https://package-tracking.xyz/CH/ —> https://package-tracking.blue/CH/ —> https://www.uppwytracking.com/X —-> http://oinkclick.host/api/tracking/visit-r?cid=X ——> http://app.clickpigs.com/api/tracking/visit-r?cid=X ——> https://pigsmix.com/id/6/?aid=X ——-> https://a.gymtracker.net/v2/?lng=X $ dig +short a.gymtracker.net 104.26.6.12 104.26.7.12
Spam source @209.85.214.194
The host at this IP address is emitting spam emails. Spam sample ========================================= From: emile@designdevelopment.in Subject: Professional Website Design =========================================
Spam source @209.85.167.52
Spam source ==================================================================== Received: from mail-lf1-f52.google.com (mail-lf1-f52.google.com [209.85.167.xxx]) by X (Postfix) with ESMTPS id X for X; Wed, 8 Jan 2020 X Received: by mail-lf1-f52.google.com with SMTP id X for X; Wed, 08 Jan 2020 X DKIM-Signature: X X-Google-DKIM-Signature: X X-Gm-Message-State: X X-Google-Smtp-Source: X X-Received: by 2002:ac2:5549:: with SMTP id X; Wed, 08 Jan 2020… Читать далее Spam source @209.85.167.52
Spam source @209.85.128.49
Spam source ==================================================================== Received: from mail-wm1-f49.google.com (mail-wm1-f49.google.com [209.85.128.49]) by X (Postfix) with ESMTPS id X for X; Thu, 9 Jan 2020 X Received: by mail-wm1-f49.google.com with SMTP id X for X; Wed, 08 Jan 2020 X DKIM-Signature: X X-Google-DKIM-Signature:X X-Gm-Message-State: X X-Google-Smtp-Source: X X-Received: by 2002:a1c:f008:: with SMTP id X; Wed, 08 Jan 2020 X… Читать далее Spam source @209.85.128.49
Malware distribution @172.217.17.33
The host at this IP address (172.217.17.33) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://doc-04-20-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/kcrsb8ta0ich4pl4bjvd4vlqnh3jmhes/1579867200000/11672958702152593011/*/1pJL9JqLnhChf0_wz-A72ZnrW9J2SXklg?e=download https://doc-0s-20-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/s6c1hnfer69ekjfjpheb7vhag3b9ig5v/1579867200000/11672958702152593011/*/11q80LulE_WBjLvit6ieS4gSSjkmfdIPE?e=download https://doc-0c-98-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/28f3r7uj98ep4rd92jia43delsp62a6q/1579867200000/12338630236876107192/*/1tpzEXF50rJdTPspxRmoqMGhly98l63Qx?e=download https://doc-10-6g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/baa0e56a23j9i05l8bd4emep1hubqb18/1579852800000/05196405223843836274/*/131EWK0qLfXyiCalH_E68fb_76tUCKYFo?e=download https://doc-04-98-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/r5lcdfs233114bb0tqd0jbrvmc3otbs0/1579852800000/12338630236876107192/*/1eiWnZw22f9K6BYScoqDq_RWLvv278HrT?e=download https://doc-04-98-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/khg6m6nj64sdpc0oashe08bl4dmpfboa/1579852800000/12338630236876107192/*/15Nq8Z7nCCOZe5HOR0uRkTN9XAaxEU_oj?e=download AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: ams16s29-in-f33.1e100.net
Malware distribution @35.240.229.162
The host at this IP address (35.240.229.162) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://peekaboobubba.com.au/wp-admin/open-b4o3g518rlba-xm7wbeintyx0h/verifiable-space/QCjeA-7qetota2u/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 162.229.240.35.bc.googleusercontent.com
Malware distribution @35.204.119.129
The host at this IP address (35.204.119.129) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://bedrijfskleding038.nl/forum_mail/personal_8ct_x7hfxws8x0r/external_cloud/nyshq_9z78z12x5/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 129.119.204.35.bc.googleusercontent.com
Malware distribution @34.87.59.158
The host at this IP address (34.87.59.158) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://beautifulnagtipunan.com/xgx5j/swift/74iub-731-951626-50fb-agvv54rasu/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 158.59.87.34.bc.googleusercontent.com
Malware distribution @35.245.146.102
The host at this IP address (35.245.146.102) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://mapleleafinfo.com/wp-content/available-disk/individual-CKUQhRjwS-UlqSE0MWSg0/4375990192-Hs5Z3VIl38uj/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 102.146.245.35.bc.googleusercontent.com