Near: Columbus, Ohio, United States
IP Lookup Details:
IP Information - 103.182.39.227
Host name: 103.182.39.227
Country:
Country Code:
Region:
City:
Latitude:
Longitude:
Whois information
CIDR: 103.0.0.0/8
NetName: APNIC-103
NetHandle: NET-103-0-0-0-1
Parent: ()
NetType: Allocated to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2011-01-09
Updated: 2011-02-10
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref: https://rdap.arin.net/registry/ip/103.0.0.0
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
ENGLISH VERSION : RECEIPT again these same emails stolen French LA POSTE using mails boxes and IP Address of 5 many Society: booksswappers.com and dpicegypt.com and windstream.net and acemserv.com and ixtem-moto.com FRANÇAIS : Reçu 7ème mêmes emails d'escroqueries aux FAUX COLIS usurpant ENCORE LA POSTE en France avec adresse(s) email(s) bidon(s) en Orange.fr et ixtem-moto.com Bonjour Webmasters de LAPOSTE.net, et SIGNAL SPAM, Signal-Arnaques.com, et abuse@laposte.net et alertespam@labanquepostale.fr et abuse@ripe.net et hostmaster@ripe.net et abuse@google.com et abuse@gmail.com et network-abuse@google.com et arin-contact@google.com et fraude-bretic@interieur.gouv.fr Et abuse@orange.fr et abuse@acemserv.com Et search-apnic-not-arin@apnic.net et http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming and F.B.I. Services in U.S.A ( for Google ) in hidden copy for Adress IP in U.S.A ( https://complaint.ic3.gov/default.aspx ) Et celà continue toujours mi-Juin 2022 et ceci depuis au moins +16 années ( emails tous archivés complets avec tous leurs codes HTML depuis 2007 )( il y a forcément des complicités, du laxisme, des incompétents d’Etats et Services Administratifs chez des fournisseurs d’accès, depuis toutes ces +16 années que celà dure ! Ces escrocs ont vraiment la belle vie pour sévir en France ! Ce Mercredi 22 Juin 2022 après 11h15 ( et très souvent les week-ends, ou très souvent les nuits, avant ou après les horaires des Bureaux et Administrations en France, méthodes de faux-culs et d’escrocs ) j'ai encore reçu sur ma boite email ce même email d’escroqueries avec faux contenu de LAPOSTE et venant des adresses mails bidons ou usurpées,volées : yboegnlc@orange.fr Mais vraie adresse email emettrice : From : <contact@ixtem-moto.com> Les adresses IP utilisées par le PC de ce(s) batards de hackers fous, débiles, têtus, butés, et analphabètes ( incapables d’écrire correctement le Français ) et ces mails sont préparés, envoyés en différés qqs heures avant ou qqs jours avant ( ici ce Mercredi 22 Juin à 04h27 ! ) pour ne pas être tracés par un logiciel Sniffer sur leurs adresses Mac de cartes réseaux, ou par des commandes Traceroute sur leurs adresses IP en direct ( bandes de poules mouillées, fumiers, trouillards ! ): 103.182.39.227 Received : from dpicegypt.com (clark.booksswappers.com [103.182.39.227]) by mlpnf0119.laposte.net (SMTP Server) with ESMTP id 4LSd5b18r0zKm4k for <ele.lemoine@laposte.net>; Wed, 22 Jun 2022 11:15:31 +0200 (CEST) Received : from mx06.aqua.bos.sync.lan (LHLO mx.windstream.net) (10.80.44.46) by md43.aqua.sync.lan with LMTP; Wed, 22 Jun 2022 04:27:18 -0400 (EDT) X-Received-HELO : from [52.128.40.66] (helo=s6.csa1.acemsc1.com) Authentication-Results : mx06.aqua.bos.sync.lan smtp.mail=bounce-480673-302-84501-airhandlers=windstream.net@s6.csa1.acemsa1.com; spf=pass Authentication-Results : mx06.aqua.bos.sync.lan header.DKIM-Signature=ixtem-moto.activehosted.com@s6.csa1.acemsa1.com; dkim=pass Received-SPF : pass (mx06.aqua.bos.sync.lan: domain s6.csa1.acemsa1.com designates 52.128.40.66 as permitted sender) Received : from [52.128.40.66] ([52.128.40.66:44769] helo=s6.csa1.acemsc1.com) by mx.windstream.net (envelope-from <bounce-480673-302-84501-airhandlers=windstream.net@s6.csa1.acemsa1.com>) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 34/B4-08852-662D2B26; Wed, 22 Jun 2022 04:27:18 -0400 Received : by s6.csa1.acemsa1.com id hmb96c2t56g3 for <airhandlers@windstream.net>; Wed, 22 Jun 2022 08:27:18 +0000 (envelope-from <bounce-480673-302-84501-airhandlers=windstream.net@s6.csa1.acemsa1.com>) IP Lookup Details: IP Information - 103.182.39.227 Host name: clark.booksswappers.com Country: Country Code: Region: City: Latitude: Longitude: utilisant des boites mails booksswappers.com et dpicegypt.com et windstream.net et acemserv.com et ixtem-moto.com ( gros problèmes de sécurité ). C'est visiblement et clairement une tentative de phishing et fraude ( fautes de grammaire multiples ) Ci-dessous cet email d’escroquerie avec ces en-têtes complets : ***************** CONTENU du mail d’escroquerie ******************* VoTre colis- • Aujourd'hui, à 11:15 (il y a 15 minutes) 60Ko • • • De : • A : @laposte.net • ************** Codes HTML complets ci-dessous *********************** Return-Path : <yboegnlc@orange.fr> Received : from mlpnf0119.laposte.net (mlpnf0119.sys.meshcore.net [10.94.128.98]) by mlpnb0108 with LMTPA; Wed, 22 Jun 2022 11:15:31 +0200 X-Cyrus-Session-Id : cyrus-214413-1655889331-1-4124968815392848282 X-Sieve : CMU Sieve 3.0 X-mail-filterd : {"version":"1.4.3","queueID":"4LSd5b3xBWzKm4P","contextId":"692fd0dc-1fc6-4cce-bf71-227eec864b72"} X-ppbforward : {"queueID":"4LSd5b3xBWzKm4P","server":"mlpnf0119"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0119.laposte.net (SMTP Server) with ESMTP id 4LSd5b3xBWzKm4P for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Wed, 22 Jun 2022 11:15:31 +0200 (CEST) X-mail-filterd : {"version":"1.4.3","queueID":"4LSd5b18r0zKm4k","contextId":"32279da4-13f8-4cca-ad84-2a9b26ece0ce"} X-lpn-mailing : MCE X-lpn-spamrating : 43 X-lpn-spamlevel : not-spam Authentication-Results : laposte.net; spf=neutral smtp.mailfrom=yboegnlc@orange.fr smtp.helo=dpicegypt.com; dkim=none; dmarc=fail reason="SPF is not aligned, DKIM is not aligned"; bimi=skipped reason="non-pass DMARC" X-List-Unsubscribe : <http://ixtem-moto.activehosted.com/proc.php?nl=2&c=302&m=358&s=156f44d8a741a56c1761b88110f0e990&act=unsub>, <http://ixtem-moto.activehosted.com/proc.php?nl=2&c=302&m=358&s=156f44d8a741a56c1761b88110f0e990&act=unsub> X-lpn-spamcause : OK, (17)(11000)gggruggvucftvghtrhhoucdtuddrgedvfedrudefhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecunfetrffquffvgfdpggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucdnofetkffnkffpifculddujedmnecujfgurhepoffvhffuffggtgfgshigkfesrgejuhhuredtjeenucfhrhhomhepfdfglhgvlhgvmhhoihhnvgdfuceotghonhhtrggtthesihigthgvmhdqmhhothhordgtohhmqeenucggtffrrghtthgvrhhnpeejveeggeejveelveffueeuiedvgfdvteejudfgjeejvdeggedtkedtvdduledtkeenucffohhmrghinheprggtvghmlhhnsgdrtghomhdprggtthhivhgvhhhoshhtvggurdgtohhmpdhigihtvghmqdhmohhtohdrtghomhdpjhgvrhhouhhlvggrmhhothhordgtohhmpdgrugguthhhihhsrdgtohhmpdhsnhgrphgthhgrthdrtghomhdpthhikhhtohhkrdgtohhmpdhlihhnkhgvughinhdrtghomhdphihouhhtuhgsvgdrtghomhdpthifihhtthgvrhdrtghomhdpihhnshhtrghgrhgrmhdrtghomhdpfhgrtggvsghoohhkrdgtohhmpdhmohhtrghrughsqdhigihtvghmqdhmohhtohdrtghomhenucfkphepuddtfedrudekvddrfeelrddvvdejpdehvddruddvkedrgedtrdeiieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpedutdefrddukedvrdefledrvddvjedphhgvlhhopeguph hitggvghihphhtrdgtohhmpdhmrghilhhfrhhomhephigsohgvghhnlhgtsehorhgrnhhgvgdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepvghlvgdrlhgvmhhoihhnvgeslhgrphhoshhtvgdrnhgvthdpughkihhmpehnohhnvg Received : from dpicegypt.com (clark.booksswappers.com [103.182.39.227]) by mlpnf0119.laposte.net (SMTP Server) with ESMTP id 4LSd5b18r0zKm4k for <@laposte.net>; Wed, 22 Jun 2022 11:15:31 +0200 (CEST) Received : from mx06.aqua.bos.sync.lan (LHLO mx.windstream.net) (10.80.44.46) by md43.aqua.sync.lan with LMTP; Wed, 22 Jun 2022 04:27:18 -0400 (EDT) X-Received-HELO : from [52.128.40.66] (helo=s6.csa1.acemsc1.com) Authentication-Results : mx06.aqua.bos.sync.lan smtp.mail=bounce-480673-302-84501-airhandlers=windstream.net@s6.csa1.acemsa1.com; spf=pass Authentication-Results : mx06.aqua.bos.sync.lan header.DKIM-Signature=ixtem-moto.activehosted.com@s6.csa1.acemsa1.com; dkim=pass Received-SPF : pass (mx06.aqua.bos.sync.lan: domain s6.csa1.acemsa1.com designates 52.128.40.66 as permitted sender) Received : from [52.128.40.66] ([52.128.40.66:44769] helo=s6.csa1.acemsc1.com) by mx.windstream.net (envelope-from <bounce-480673-302-84501-airhandlers=windstream.net@s6.csa1.acemsa1.com>) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 34/B4-08852-662D2B26; Wed, 22 Jun 2022 04:27:18 -0400 Received : by s6.csa1.acemsa1.com id hmb96c2t56g3 for <airhandlers@windstream.net>; Wed, 22 Jun 2022 08:27:18 +0000 (envelope-from <bounce-480673-302-84501-airhandlers=windstream.net@s6.csa1.acemsa1.com>) X-Mailer : ActiveCampaign Mailer To : ele.lemoine@laposte.net From : "Elelemoine" <contact@ixtem-moto.com> Subject : VoTre colis- Date : Wed, 22 Jun 2022 03:17:02 -0500 MIME-Version : 1.0 Content-Type : multipart/alternative; boundary="_=_swift-197963654462b2cffee4e7f2.19239117_=_" Content-Transfer-Encoding : 7bit Sender : <ixtem-moto.activehosted.com@s6.csa1.acemsa1.com> X-Sender : <ixtem-moto.activehosted.com@s6.csa1.acemsa1.com> X-Report-Abuse : Please report abuse here: abuse@acemserv.com X-mid : YWlyaGFuZGxlcnNAd2luZHN0cmVhbS5uZXQgLCBjMzAyICwgbTM1OCAsIHMxNTQwOA Feedback-ID : 480673:activecampaign X-250ok-CID : 480673-302 List-Unsubscribe-Post : List-Unsubscribe=One-Click Message-ID : <20220622082718.19322.529746218.swift@ixtem-moto.activehosted.com> X-Vade-Verdict : commercial:mce X-Vade-Analysis-1 : gggruggvucftvghtrhhoucdtuddrgedvfedrudefhedgtdefucetufdoteggodetrfdotffvucfrrhho X-Vade-Analysis-2 : fhhilhgvmecuufgjpfetvefqtfdphgfkpfffuffvtffgtefopdfgpfggqdghkffpfffuvfftgfetofen X-Vade-Analysis-3 : uceurghilhhouhhtmecufedtudenucdnofetkffnkffpifculddujedmnecujfgurhepoffvhffuffgg X-Vade-Analysis-4 : tgfgshigjffksegrjehuuhertdejnecuhfhrohhmpedfvfgvrghmucfkgihtvghmucfoohhtohdfuceo X-Vade-Analysis-5 : tghonhhtrggtthesihigthgvmhdqmhhothhordgtohhmqeenucggtffrrghtthgvrhhnpeehtdffveev X-Vade-Analysis-6 : feelkeeltdefieejleehjeffvefffeevgeeuvdffudffheeuvdevffenucffohhmrghinheprggtvghm X-Vade-Analysis-7 : lhhnsgdrtghomhdprggtthhivhgvhhhoshhtvggurdgtohhmpdhigihtvghmqdhmohhtohdrtghomhdp X-Vade-Analysis-8 : jhgvrhhouhhlvggrmhhothhordgtohhmpdhsnhgrphgthhgrthdrtghomhdpthhikhhtohhkrdgtohhm X-Vade-Analysis-9 : pdhlihhnkhgvughinhdrtghomhdphihouhhtuhgsvgdrtghomhdpthifihhtthgvrhdrtghomhdpihhn X-Vade-Analysis-10 : shhtrghgrhgrmhdrtghomhdpfhgrtggvsghoohhkrdgtohhmpdhmohhtrghrughsqdhigihtvghmqdhm X-Vade-Analysis-11 : ohhtohdrtghomhenucfkphephedvrdduvdekrdegtddrieeinecuvehluhhsthgvrhfuihiivgeptden X-Vade-Analysis-12 : ucfrrghrrghmpehinhgvthephedvrdduvdekrdegtddrieeipdhhvghlohepsheirdgtshgruddrrggt X-Vade-Analysis-13 : vghmshgtuddrtghomhdpmhgrihhlfhhrohhmpegsohhunhgtvgdqgeektdeijeefqdeftddvqdekgeeh X-Vade-Analysis-14 : tdduqdgrihhrhhgrnhgulhgvrhhspeifihhnughsthhrvggrmhdrnhgvthessheirdgtshgruddrrggt X-Vade-Analysis-15 : vghmshgruddrtghomhdprhgtphhtthhopegrihhrhhgrnhgulhgvrhhsseifihhnughsthhrvggrmhdr X-Vade-Analysis-16 : nhgvthdpmhhtrghhohhsthepmhigrdgrqhhurgdrsghoshdrshihnhgtrdhlrghnpdhsphhfpehprghs X-Vade-Analysis-17 : shdpughkihhmpehprghsshdpnhgspghrtghpthhtohepud X-Vade-Client : AQUA
