Near: United States
IP Lookup Details:
IP Information - 54.240.48.111
Host name: a48-111.smtp-out.amazonses.com
Country: United States
Country Code: US
Region:
City:
Latitude: 37.751
Longitude: -97.822
Whois information
CIDR: 54.224.0.0/11
NetName: AMAZON-2011L
NetHandle: NET-54-224-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16509
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2012-03-01
Updated: 2021-02-10
Comment: -----BEGIN CERTIFICATE-----MIICljCCAX4CCQDvS1je1Bd4uzANBgkqhkiG9w0BAQsFADANMQswCQYDVQQGEwJVUzAeFw0yMDA4MjYxODQ1NThaFw0yMTA4MjYxODQ1NThaMA0xCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5geQJL7KoQhQLaTteXnFj0xsze15HgB9cpHPoL6khWVUthOg6AYCBHCcVJWeuEHuYGJcnrtW1tyLWpgfrxaw5E4ZtunSHElzO6BIp2u0215mbSGPQUt3TMR64nvXvEAY4qBP/p2+j0ud2eI47eA3s2ykFztEJPb7eZh8lVCGj5n2msRxeFiYwoB7/u3TDnW0/BwNLnJgyGkAWYUlk68hR10LHoBqGPezn7mPuiLHNa6JQP0WTYBz/80kS3m/4oZ7NS20PMieXqFjfYEgW6fPg7uJKhH3aYVVveZpBS5cRzm360HyT5hj1rUJh34nVCLMlvP+400w1wxr9buLnQzVlwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQCZD7ERFb2LpeLdQgyji/ZqZ7lDXR8wq4m+ihMiqpPcwTVs1dfBfKDvZ4K6Ddyzkfd1NQYPWiV47nvqgJxwdISa7vN011RxBEGkYdJ8cNaRXW7aCGfQ8ZSQL6mbXsm4sbvDQNHiWJcdUB0KTzR/wpbXf9+24TbPGaOsZvfnKtd1lZhY5xFiOVCOdI59c/XyDH9aqOKNE0pOeATX55I3bU5PKeK5CM8oAtD2sFAQ956Uvj7/vFDs8QP3upzf53R+erSU10L1fTQBWHjNUCcf9wviS+U4hsaCcBZMlw6d5Q84GYX1tS+YwtA0Fv/NQcOWr9RJT+JVnpbyAxEyjI37XOqH-----END CERTIFICATE-----
Ref: https://rdap.arin.net/registry/ip/54.224.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
NetRange: 54.240.0.0 - 54.240.63.255
CIDR: 54.240.0.0/18
NetName: AWSEMAIL-Z
NetHandle: NET-54-240-0-0-2
Parent: AMAZON-2011L (NET-54-224-0-0-1)
NetType: Reallocated
OriginAS: AS16509
Organization: Amazon Web Services, Inc. (AMAZO-22)
RegDate: 2012-01-03
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.240.0.0
OrgName: Amazon Web Services, Inc.
OrgId: AMAZO-22
Address: Amazon Web Services
Address: 1200 12th Avenue South
City: Seattle
StateProv: WA
PostalCode: 98144
Country: US
RegDate: 2010-03-08
Updated: 2021-07-22
Ref: https://rdap.arin.net/registry/entity/AMAZO-22
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgAbuseHandle: ASA152-ARIN
OrgAbuseName: Amazon SES Abuse
OrgAbusePhone: +1-206-741-3696
OrgAbuseEmail: email-abuse@amazon.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ASA152-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
Reçu mail escroc Fausse prime carburant en usurpant le LOGO Impots.Gouv.fr Venant d’une adresse mail du Brésil : loja@useroots.com.br From : Aide Carburant 2024 <loja@useroots.com.br> Mais utilisant des boites mails Amazonses.com Et adresse IP : 54.240.48.111 Received : from a48-111.smtp-out.amazonses.com (a48-111.smtp-out.amazonses.com [54.240.48.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by mlpnf0116.laposte.net (SMTP Server) with ESMTPS id 4VG4zp3WRFz1GBw5 for <@laposte.net>; Fri, 12 Apr 2024 07:36:06 +0200 (CEST) DKIM-Signature : v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; ****************** Contenu du mail des escrocs ************** Attention phishing profiter de la prime • Aujourd'hui, à 07:36 (il y a 2 heures) 9Ko • • • A2 De : Aide Carburant 2024
FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your servers IP and accounts and mails boxes ! Recu Mardi 27 Mai 2025 après 15h36 ( envoyés aussi les nuits, les week-ends, la veille au soir) 9 èmes mails escrocs usurpant MONDIAL RELAY venant de l’adresse mail escroc IjKXgH@compliancebox.com.br gérée par cert@cert.br et mail-abuse@cert.br et utilisant encore des boites mails amazonses.com et adresse IP 54.240.48.111 gérée par email-abuse@amazon.com Received : from a48-111.smtp-out.amazonses.com (a48-111.smtp-out.amazonses.com [54.240.48.111]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mlpnf0118.laposte.net (SMTP Server) with ESMTPS id 4b6DDv0yJSz12LCX JE N’AI RIEN COMMANDé = mails escrocs. ********************* Codes HTML des hackers ci-dessous *************** Return-Path : <0100019711f57dfb-2cacbf5f-e3d4-4893-8f7e-939887ae6d0e-000000@amazonses.com> Received : from mlpnf0118.laposte.net (mlpnf0118.sys.meshcore.net [10.94.128.97]) by mlpnb0108 with LMTPA; Tue, 27 May 2025 15:36:31 +0200 X-Cyrus-Session-Id : cyrus-1748352991-199539-1-13104765522450645164 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=1; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1748352991; cv=none; b=beGrNVx1j05p2K4rsI+Z33pXF2BbvGVzNtB8NwPNJSbfchKVofYEdcxB/7IuF4OJzE2Kt/n0AUf 7DBKPglr5lIgR2rVZTlu1Ybh3Lw0wbX5c5GpMxVDYuh35qEeAxptZ+Sjy3WmP3ohPt6Q+qLxTyU3 qP6WjN61MDsa5Uu0xv+Adn9VlttYPCdWZfJJ5CwCA2VDPtyFc8Cnszsy9WAztib2PvJ26dCCz7B0 C0xPMh6NJBMEEOG7/yxTe2dTRHr4J6ag/EG7HGhyhYIwcIF9mCRxFcd1yCLHk+4sgsQCT9xjeoJY A8Y58KcE5jMDEEmgGMRo8NhrhMUJGmmTGRkC1Sw== ARC-Message-Signature : i=1; a=rsa-sha256; c=relaxed/relaxed; d=laposte.net; s=lpn-wlmd; t=1748352991; h=DKIM-Signature:From:To:Subject:Date; bh=D6lxEQXlE //ZgjaBpdVNCMGI2YXr0QJwmv5CXHlbsMQ=; b=U0/TuWhDd9MPRbWh3oetf/KIIZcDTFauV9tsm j2OkaAX3kA+tvc5FeBuriTOk0sKiT/pxIv1hT5CX83NB/0OLBLpe8vJ6rKhcGjb7IVnXA2+W0DDQ d89YMd+fxgcuXQOOAmWxyYtlZJFagYBVq4YcmxPD86uA76RhUF0fvXGCzYfKgHCXyWDL84fcFVKE 6+OM0e4dfnBwLbK5jbu7t+jxG2eYEJu4bF0LVzWId4tVgtIZYdzyeg9wRKS3550HXjLJb+kvMKS/ dwnBsjJqqx0NhjvbDT5dM/WmNEZjv6k+eBdNcUdhVCFXdAJeZrifjDSBP2nza+70vPW3o8zkT1l9 A== ARC-Authentication-Results : i=1; laposte.net; spf=pass smtp.helo=a48-111.smtp-out.amazonses.com smtp.mailfrom=0100019711f57dfb-2cacbf5f-e3d4-4893-8f7e-939887ae6d0e-000000@amazonses.com; dkim=pass reason="good signature" header.b=Ngm53S header.d=amazonses.com header.s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; dmarc=fail reason="SPF is not aligned, DKIM is not aligned"; arc=none smtp.remote-ip=54.240.48.111; bimi=skipped reason="non-pass DMARC" X-mail-filterd : {"version":"1.9.1","queueID":"4b6DDv2Kx3z12LCp","contextId": "717a808a-fb72-400c-bd3f-772b013f5135"} X-ppbforward : {"queueID":"4b6DDv2Kx3z12LCp","server":"mlpnf0118"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0118.laposte.net (SMTP Server) with ESMTP id 4b6DDv2Kx3z12LCp for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Tue, 27 May 2025 15:36:31 +0200 (CEST) X-mail-filterd : {"version":"1.9.1","queueID":"4b6DDv0yJSz12LCX","contextId": "7b4fcd2e-3cbf-49bf-a0ab-efa419946e23"} X-lpn-mailing : WHITELISTED X-lpn-spamrating : 0 X-lpn-spamlevel : not-spam Authentication-Results : laposte.net; spf=pass smtp.mailfrom=0100019711f57dfb-2cacbf5f-e3d4-4893-8f7e-939887ae6d0e-000000@amazonses.com smtp.helo=a48-111.smtp-out.amazonses.com; dkim=pass reason="good signature" header.d=amazonses.com header.s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw header.b=Ngm53S; dmarc=fail reason="SPF is not aligned, DKIM is not aligned"; arc=none smtp.remote-ip=54.240.48.111; bimi=skipped reason="non-pass DMARC" Received : from a48-111.smtp-out.amazonses.com (a48-111.smtp-out.amazonses.com [54.240.48.111])
