SPAM: Jennifer Woodard (woodardjennifer27@yahoo.com) DOMAIN: darwinistneleridusunmez.com IP: 180.180.146.4 Bankok, THAILAND

DOMAIN:

http://darwinistneleridusunmez.com/

• https://www.virustotal.com/de/url/51ee5532251a6a564ea561ab27211e864beec50df216a0827b1bb1052c369a5a/analysis/1399629448/

http://darwinistneleridusunmez.com/lsy/view.php

• https://www.virustotal.com/de/url/9d8251b452e80791bae691d8eebe0681a092719cf553c5e80c6b1784793c0928/analysis/1399629579/

DOMAIN IP:

http://54.247.100.110/

• https://www.virustotal.com/de/url/e1792fc59ff57735b91d13358c35cf0028ecf8516e36fbe23060b1eb8db96e10/analysis/1399631113/

• https://www.virustotal.com/de/ip-address/54.247.100.110/information/

IP LISTED AT SPAMHAUS (CBL)

• http://www.spamhaus.org/query/bl?ip=54.247.100.110

• http://cbl.abuseat.org/lookup.cgi?ip=54.247.100.110

• http://www.senderbase.org/lookup/?search_string=54.247.100.110

MAIL IPs:
1)

http://180.180.146.4/ (THAILAND)

• https://www.virustotal.com/de/url/dff9af04709b5bc1aec3f2705bafe872a9a57b8a23d9b29f75c117c0a5aba04a/analysis/1399629695/

SPAMMAILSERVER & DICTIONARY ATTACKER:

• https://www.projecthoneypot.org/ip_180.180.146.4

LISTED AT SPAMHAUS (PBL):

• http://www.spamhaus.org/query/bl?ip=180.180.146.4

E-MAIL-REP: POOR

• http://www.senderbase.org/lookup/?search_string=180.180.146.4

2)

http://66.147.244.82/ (UNITED STATES)

• https://www.virustotal.com/de/url/d60b98e987232df8a76c2aadaa8982b3d03a2b4a1a2cc91d829c296f513b13f1/analysis/1399630027/

• https://www.virustotal.com/de/ip-address/66.147.244.82/information/

BHA: 19

• https://www.projecthoneypot.org/ip_66.147.244.82

3)

http://14.4.4.6/ (SOUTH KOREA)

• https://www.virustotal.com/de/url/ea36277fb5e01f8d0713c1937c952433fa0d3e3d11956f161dd989b3a6a07219/analysis/1399630197/

LISTED AT SPAMHAUS (SBL & DROP)

• http://www.spamhaus.org/query/bl?ip=14.4.4.6
• http://www.spamhaus.org/sbl/query/SBL187947
• http://www.senderbase.org/lookup/?search_string=14.4.4.6

4)

http://69.89.23.228/

• https://www.virustotal.com/de/url/f15acfaf6680089b7af8ce6db92c64f2420b0f92e1bcb14af18e2420b2d5de79/analysis/1399631488/

Potentially MALICIOUS IP-VISITOR TO THIS BLOG: 5.228.175.88 (RUSSIAN FEDERATION) Listed at SPAMHAUS (PBL)

POTENTIALLY MALICIOUS IP: (RUSSIAN FEDERATION)

5.228.175.88

• https://www.virustotal.com/de/url/9a5637c8f5e9e879f58b3cfe1543d4e99d2887e934d6c212e93437feac0b22e6/analysis/1392062781/

LISTED AT SPAMHAUS (PBL):

• http://www.spamhaus.org/query/bl?ip=5.228.175.88

Email Reputation: Poor

• http://www.senderbase.org/lookup/?search_string=5.228.175.88

HOSTNAME:

broadband-5-228-175-88.nationalcablenetworks.ru

• https://www.virustotal.com/de/url/a8681b9778da0b6e81f869a1a481143702f0d420c80c3263ead51a3127b03a4b/analysis/1392063552/

DOMAIN:

nationalcablenetworks.ru

• https://www.virustotal.com/de/url/8e8530d88e624479f71553153beb0a55797a2ceb259233b198c47104eb7ce2bd/analysis/1392063734/

NETWORK OWNER:

www.rostelecom.ru

• https://www.virustotal.com/de/url/a1de2b65a0f6c052d2fab4d62d1bd8dc96fbeec821c1d2e94642c5478d353fc5/analysis/1392064034/

• http://www.senderbase.org/lookup/org/?search_string=OJSC%20Rostelecom

rostelecom.ru links either directly or indirectly to the following Domains: 

widgets.twimg.com

• https://www.virustotal.com/de/url/fc8fb130582f32fba6ff856d59a615af1ea1214aeb4283b366d3a1061d5c2a80/analysis/1392064674/

qsoft.ru

• https://www.virustotal.com/de/url/145246976aef9e4f1975b45cbf76fc0aa77660197d2740949a8e670ddf803d8d/analysis/1392064722/