Network Abuse Incident Log


Email spam abuse incident from 103.244.251.6

Posted April 15, 2019 04:26 by abuse

The following Email spam abuse incident from 103.244.251.6 was logged at 2019-04-15 04:26:05:

Apr 15 04:26:05 mailman postfix/smtpd[1963]: NOQUEUE: reject: RCPT from
unknown[103.244.251.6]: 554 5.7.1 Service unavailable; Client host
[103.244.251.6] blocked using dnsbl.dronebl.org; Compromised router / gateway;
from=<kmsbu[at]mailmeasap.com> to=<[munged][at][munged]> proto=ESMTP
helo=<ASPMX.L.GOOGLE.com>
Apr 15 04:26:06 mailman postfix/smtpd[1963]: NOQUEUE: reject: RCPT from
unknown[103.244.251.6]: 554 5.7.1 Service unavailable; Client host
[103.244.251.6] blocked using dnsbl.dronebl.org; Compromised router / gateway;
from=<yttuewtphv[at]krameria.net> to=<[munged][at][munged]> proto=ESMTP
helo=<ASPMX.L.GOOGLE.com>



Worst offender ASNs

🚽 AS4134 (14,978 events)

🚽 AS4837 (2,894 events)

🚽 AS14061 (1,676 events)

🚽 AS28202 (1,405 events)

🚽 AS16276 (1,343 events)

🚽 AS45899 (1,168 events)

🚽 AS18881 (985 events)

🚽 AS4766 (921 events)

🚽 AS45090 (834 events)

🚽 AS9808 (832 events)

Worst offender IPs

💩 145.249.105.210 (34 events)

💩 5.101.40.81 (30 events)

💩 51.254.47.198 (30 events)

💩 189.254.33.157 (29 events)

💩 103.207.37.40 (28 events)

💩 80.82.67.118 (27 events)

💩 188.166.216.84 (24 events)

💩 51.255.166.189 (22 events)

💩 115.84.112.138 (22 events)

💩 124.158.5.112 (21 events)

▲ Back to top | Permalink to this page