4/30/18 – New IP’s under Investigation

Scammer Security Spammer

These Networks have showed up more often and looking to be part of a BOTNET.

  • inetnum: 91.209.70.0 – 91.209.70.255
  • netname: PIHLTD
  • country: RU
  • org-name: Private Internet Hosting LTD
  • org-type: OTHER
  • address: 24.5 Old Northern Highway, Titoff Place, Boston Village, Belize
  • created: 2016-07-04T16:31:10Z
  • last-modified: 2017-11-10T13:12:19Z

Offending Address -91.209.70.221 – Attacking SMTP Servers

***********************************

  • inetnum: 89.248.170.8 – 89.248.171.127
  • netname: SC-QUASI38
  • descr: QUASI
  • country: SC
  • org-name: Quasi Networks LTD.
  • org-type: OTHER
  • address: Suite 1, Second Floor
  • address: Sound & Vision House, Francis Rachel Street
  • address: Victoria, Mahe, SEYCHELLES

Offending Address – 89.248.171.89 – Attacking SMTP Servers

Reverses to backupdatasolutions.com <– This is not a good thing, Someones data is compromised, or many peoples data is compromised.

It appears that this domain is not even registered yet. This is going to be an address to watch, Reverse DNS was configured to show this address as if it is an existing owned and held domain. This looks like a SPAMMER.

 

*********************************

inetnum: 27.64.0.0 – 27.79.255.255
netname: VIETTEL-VN
descr: Viettel Group
descr: No 1, Tran Huu Duc street, My Dinh 2 ward, Nam Tu Liem district, Ha Noi City
country: VN

Offending Address: 27.74.252.68 – SMTP ABUSE

 

 

******************************************

Offending Address – 46.71.248.245 <– Spammer

 

*******************************************

Offending Address: 51.38.49.1 – SMTP ABUSE

 

 

 

 

Leave a Reply