Network Abuse Incident Log


Email spam abuse incident from 103.244.251.6

Posted April 15, 2019 04:26 by abuse

The following Email spam abuse incident from 103.244.251.6 was logged at 2019-04-15 04:26:05:

Apr 15 04:26:05 mailman postfix/smtpd[1963]: NOQUEUE: reject: RCPT from
unknown[103.244.251.6]: 554 5.7.1 Service unavailable; Client host
[103.244.251.6] blocked using dnsbl.dronebl.org; Compromised router / gateway;
from=<kmsbu[at]mailmeasap.com> to=<[munged][at][munged]> proto=ESMTP
helo=<ASPMX.L.GOOGLE.com>
Apr 15 04:26:06 mailman postfix/smtpd[1963]: NOQUEUE: reject: RCPT from
unknown[103.244.251.6]: 554 5.7.1 Service unavailable; Client host
[103.244.251.6] blocked using dnsbl.dronebl.org; Compromised router / gateway;
from=<yttuewtphv[at]krameria.net> to=<[munged][at][munged]> proto=ESMTP
helo=<ASPMX.L.GOOGLE.com>



Worst offender ASNs

🚽 AS4134 (12,560 events)

🚽 AS4837 (2,308 events)

🚽 AS16276 (1,136 events)

🚽 AS45899 (1,076 events)

🚽 AS14061 (906 events)

🚽 AS45090 (804 events)

🚽 AS18881 (771 events)

🚽 AS4766 (745 events)

🚽 AS9808 (655 events)

🚽 AS4812 (527 events)

Worst offender IPs

💩 145.249.105.210 (34 events)

💩 5.101.40.81 (30 events)

💩 103.207.37.40 (28 events)

💩 80.82.67.118 (27 events)

💩 51.254.47.198 (25 events)

💩 189.254.33.157 (24 events)

💩 51.255.166.189 (22 events)

💩 175.117.145.239 (19 events)

💩 188.166.216.84 (19 events)

💩 110.10.129.226 (19 events)

▲ Back to top | Permalink to this page