Issue 3936839 Server involved in fraud at 23.237.100.152

Hello,

We have discovered an email server on your network that is sending fraudulent
e-mail messages.

The server has the IP address at 23.237.100.152

This attack targets our customer, WPP, website URL  https://www.microsoft.com

We have attached an example fraudulent e-mail demonstrating the e-mail server's
involvement. Please close down this attack as soon as possible.

More information about the detected issue is provided at
https://incident.netcraft.com/JDGDY73THY/

Many thanks,

Netcraft

Phone:  +44(0)1225 447500
Fax:  +44(0)1225 448600
Netcraft  Issue Number: 3936839

To contact us about updates regarding this attack, please respond to this email.
Please note: replies to this address will be logged, but aren't always read. If
you believe you have received this email in error, or you require further
support, please contact:  takedown@netcraft.com.

This message follows the Abuse Reporting Format (ARF) so can be processed
automatically. See  http://www.mipassoc.org/arf/  for more information.
Attachments:
   report.txt         (188 bytes)
   email-1.txt         (15.7 KB)

ablog1951.7days Undeliverable E-Mail - SMTP error from remote mail server host

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

 
    host mail.hivelocity.net [172.67.23.149]
    SMTP error from remote mail server after 
    550 5.1.1 <> recipient domain rejected - invalid DNS
Reporting-MTA: dns; box2241.hivelocity.net

Action: failed
Final-Recipient: rfc822;
Status: 5.0.0
Remote-MTA: dns; .mail.hivelocity.net
Diagnostic-Code: smtp; 550 5.1.1 <> recipient domain rejected - invalid DNS

Issue 463890 Server involved in fraud at 77.83.244.158

Hello,

We have discovered an email server on your network that is sending fraudulent
e-mail messages.

The server has the IP address at 77.83.244.158

This attack targets our customer, microsoft website URL   https://www.microsoft.com

We have attached an example fraudulent e-mail demonstrating the e-mail server's
involvement. Please close down this attack as soon as possible.

More information about the detected issue is provided at
https://incident.netcraft.com/

Many thanks,

Netcraft

Phone:    +44(0)1225 447500
Fax:    +44(0)1225 448600
Netcraft    Issue Number: 463890

To contact us about updates regarding this attack, please respond to this email.
Please note: replies to this address will be logged, but aren't always read. If
you believe you have received this email in error, or you require further
support, please contact:    takedown@netcraft.com.

This message follows the Abuse Reporting Format (ARF) so can be processed
automatically. See    http://www.mipassoc.org/arf/    for more information.
Attachments

Undeliverable E-Mail - SMTP error from remote mail server host

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

 
    host mail.ipxo.com[104.26.4.35]
    SMTP error from remote mail server after 
    550 5.1.1 <> recipient domain rejected - invalid DNS
Reporting-MTA: dns; box2241.mailserver.com

Action: failed
Final-Recipient: rfc822;
Status: 5.0.0
Remote-MTA: dns; .mail.ipxo.com
Diagnostic-Code: smtp; 550 5.1.1 <> recipient domain rejected - invalid DNS

Undeliverable E-Mail - SMTP error from remote mail server host

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

 
    host mail.iaclouds.com[43.248.191.176]
    SMTP error from remote mail server after 
    550 5.1.1 <> recipient domain rejected - invalid DNS
Reporting-MTA: dns; box2241.mailserver.com

Action: failed
Final-Recipient: rfc822;
Status: 5.0.0
Remote-MTA: dns; .mail.iaclouds.com
Diagnostic-Code: smtp; 550 5.1.1 <> recipient domain rejected - invalid DNS

Issue 3179650 Server involved in fraud at 23.237.17.122

Hello,

We have discovered an email server on your network that is sending fraudulent
e-mail messages.

The server has the IP address at 23.237.17.122

This attack targets our customer, WPP, website URL  https://www.microsoft.com

We have attached an example fraudulent e-mail demonstrating the e-mail server's
involvement. Please close down this attack as soon as possible.

More information about the detected issue is provided at
https://incident.netcraft.com/JDGDY73THY/

Many thanks,

Netcraft

Phone:  +44(0)1225 447500
Fax:  +44(0)1225 448600
Netcraft  Issue Number: 3179650

To contact us about updates regarding this attack, please respond to this email.
Please note: replies to this address will be logged, but aren't always read. If
you believe you have received this email in error, or you require further
support, please contact:  takedown@netcraft.com.

This message follows the Abuse Reporting Format (ARF) so can be processed
automatically. See  http://www.mipassoc.org/arf/  for more information.
Attachments:
   report.txt         (188 bytes)
   email-1.txt         (15.7 KB)