Trends in Networks: Spam #14

The last few weeks have been quite interesting for us researchers. Unfortunately that ‘interesting’ stuff delayed a bit of our social media efforts. Digital Ocean abuse is now stronger than ever. We would hope to see a reduction in these patterns of activity, but instead it seems more patterns of abuse are emerging. Perhaps some network providers are more abused than others, but the seemingly lack of effort to at least handle the regularly occurring patterns of abuse are discouraging.

Continued malicious use of .xyz and Freenom TLDs easily identified through the PTR/reverse DNS record:

Nov26
128.199.19.135	x2	srv0.mails201.ml
134.209.230.113	x1	maila.adbcou.xyz
139.59.34.136	x2	srv0.mails200.ml
143.110.167.110	x1	box.polytrs.xyz
143.110.252.139	x2	bizcloud-send.hunclody.xyz
157.230.219.112	x2	box.coupon4you.ml
161.35.117.72	x1	box.coupon4you.ga
165.22.1.62	x1	box.coupon4you.tk
178.128.6.106	x1	betabet.xyz

Nov27
159.203.4.57	x11	ksoftt.gq
159.203.9.209	x1	rttsoft.cf
178.128.6.106	x1	betabet.xyz

Nov28
161.35.116.37	x2	box.orkuttk.tk
165.227.197.236	x1	box.orkuttk.ml

Dec1
104.131.61.212	x40	gdx0.503.gqxio.ml
104.131.72.7	x6	gdx0.521.gqxio.ml
104.248.28.182	x1	box.mavcomd.xyz
134.122.121.66	x2	srv0.mails202.tk
138.197.185.36	x1	cnq1.cmbs.xyz
157.230.104.149	x27	gdx0.517.gqxio.ml
157.230.104.84	x11	gdx0.520.gqxio.ml
159.89.93.143	x1	srv0.mails202.ml
165.22.14.205	x6	gdx0.506.gqxio.ml
167.71.178.194	x42	gdx0.524.gqxio.ml
178.128.175.149	x22	gdx0.525.gqxio.ml
178.128.64.139	x3	gdx0.519.gqxio.ml
198.199.77.39	x3	srv0.mails202.cf
206.189.192.219	x1	srv0.mails101.cf
206.189.222.169	x35	gdx0.505.gqxio.ml

Dec2
138.197.162.177	x2	softfr.ml
138.197.162.222	x24	rttsott.cf
143.110.145.130	x2	mail0.gwbatam.xyz
143.110.230.73	x1	host.truebandwith.xyz
157.230.20.203	x2	xzp0.pxwi.gq
157.245.248.67	x1	srv0.mails202.ga
165.22.237.238	x1	softfr.cf
167.172.135.156	x11	srv0.mails100.cf
167.99.106.56	x2	box.usopticoo.gq
178.128.184.24	x1	viewerslist.xyz
192.241.145.128	x7	srv0.mails100.ga
204.48.23.219	x1	srv0.mails201.ga

Dec3
128.199.117.107	x6	mail0.mailsecurity-system.cf
143.110.210.191	x1	box.tyumber.xyz
143.110.230.73	x1	host.truebandwith.xyz
157.230.184.168	x3	srv0.mails203.tk
159.65.94.184	x2	box.lertysder.xyz
161.35.59.104	x3	srv0.mails203.ml
165.22.189.206	x1	box.rdstyam.xyz
165.22.229.171	x9	rttsott.ga
165.227.195.133	x3	srv0.mails202.gq
68.183.123.207	x14	box.resdafso.xyz

Dec4
104.248.53.155	x2	srv0.mails203.cf
104.248.55.160	x3	srv0.mails203.ga
134.122.42.194	x5	ksoftt.tk
139.59.78.142	x1	mx13.endanger92696.xyz
142.93.1.61	x2	box.digitalonline.gq
157.230.179.97	x1	srv0.us106.cf
157.230.210.233	x4	srv0.us106.gq
157.230.82.145	x2	srv0.us106.ga
165.22.180.225	x1	srv0.mails201.cf
165.22.7.197	x1	mail.bakewithus.xyz
167.172.135.156	x1	srv0.mails100.cf
192.241.145.128	x1	srv0.mails100.ga
206.189.206.50	x4	srv0.us106.ml

Dec5
138.197.204.81	x1	box.dealsoftheday.cf
157.230.233.49	x1	srv0.us116.gq
157.245.139.173	x1	srv0.us116.ga
161.35.126.232	x1	srv0.us116.cf
165.22.7.197	x1	mail.bakewithus.xyz
167.71.20.147	x2	host.billalerts.tk
178.128.184.24	x1	viewerslist.xyz
208.68.39.95	x2	box.timesbuy.cf

Dec6
134.122.120.197	x5	box.buybyclick.gq
157.230.233.49	x2	srv0.us116.gq
157.245.138.14	x1	box.fridaydeals.gq
159.89.82.109	x4	box.timesbuy.tk
165.227.196.222	x2	box.bestby.cf

Dec7
157.245.95.59	x1	box.srkservices.tk
159.89.234.186	x2	box.hellogift.ga
159.89.50.237	x1	box.buybyclick.ga
161.35.102.125	x1	srv0.mails204.ml
165.227.95.51	x2	box.primiumoffers.gq
167.172.138.120	x2	box.hellogift.cf
167.71.24.70	x2	srv0.mails203.gq
167.71.24.81	x3	srv0.mails204.tk
174.138.10.1	x5	bizcloud-gamteyyrjd.cf
192.241.145.81	x2	srv0.usa113.ga
192.81.209.187	x1	srv0.usa113.ml

Dec8
134.209.181.11	x23	mailunique.xyz
139.59.255.97	x1	mail0.mailsecurity-system.tk
142.93.33.252	x1	box.dealsoftheday.ml
207.154.207.96	x9	box.woherds.xyz
46.101.120.204	x3	box.mafersdai.xyz
68.183.119.247	x1	box.time4buy.gq

Dec9
134.209.181.11	x1	mailunique.xyz
143.110.210.207	x2	softic.ml
143.110.210.209	x1	softwater.gq
143.110.210.239	x1	softwater.cf
143.110.210.247	x2	softwater.ga
165.227.36.147	x1	softgk.ga
46.101.120.204	x1	box.mafersdai.xyz
68.183.193.227	x4	soofiexporter.ml

Dec10
104.248.229.3	x1	box.srkservices.ml
142.93.196.63	x1	srv0.mails350.ml
157.230.93.255	x1	box.cloudsrk.tk
159.203.0.168	x1	softtdk.ga
167.172.56.113	x1	box.giresdat.xyz
206.189.191.206	x1	srv0.usa113.cf
64.227.20.164	x1	srv0.usa113.gq

Dec11
134.122.43.62	x1	yitruyoydi.ga
134.122.43.71	x1	softkk.tk
138.197.144.170	x1	yitruyoydi.ml
142.93.149.155	x3	softkk.gq
142.93.6.73	x1	box.cloudsrk.gq
143.110.234.228	x1	server.dailymaily.tk
159.89.126.111	x1	softkk.ml
165.22.227.164	x1	softdk.tk
165.22.228.72	x2	yitruyoydi.tk
165.22.229.57	x1	softkk.ga
67.205.156.71	x1	box.srkservices.ga
68.183.131.104	x1	box.exact-estimation.tk

Dec12
138.197.134.27	x1	softdk.cf
138.197.162.58	x1	softsdk.cf
142.93.145.42	x10	host.pocketskin.xyz
142.93.149.187	x1	yitruyoydi.gq
142.93.153.14	x1	softtdk.ml
67.205.166.159	x1	host.billalert.tk

Dec13
143.110.225.80	x1	deliverydeal.xyz
143.110.226.249	x1	dealsfactor.xyz

The sheer amount of bulk marketing spam is still incredible. When we first began to monitor this, we noticed these ‘older’ domains had the common Registrant Organization of ‘Hosting Magic’. Beginning in December this changes to the Registrant Organization ‘Tech Strike’. Other than that, still the same pattern of activity…

Nov26
104.131.48.101	x4	mail.happilyeverginder.com
104.248.13.88	x4	mail.boredomtree.com
104.248.81.212	x62	mail.goldmicaward.com
134.122.35.116	x80	mail.hydraincome.com
134.209.119.196	x46	mail.motassimthupsee.com
134.209.127.171	x2	mail.radiantartphotography.com
134.209.182.57	x67	mail.vantagepointegroup.com
134.209.196.123	x49	mail.infomodas.com
134.209.226.62	x46	mail.gxtsolutions.com
134.209.228.60	x67	mail.palisadesplumber.com
134.209.228.81	x52	mail.ninjachibiworld.com
134.209.28.184	x66	mail.night-club-sound-system.com
139.59.143.75	x39	mail.guardiantaskforce.com
142.93.154.139	x39	mail.ealingmassage.com
157.230.19.201	x34	mail.glasstilemurals.com
157.230.23.24	x39	mail.friday2monday.com
157.230.31.47	x33	mail.go2babystore.com
159.203.15.202	x5	mail.vqsecurity.com
159.203.59.14	x3	mail.marikinadentist.com
159.65.66.75	x1	mail.voiceofbollywood.com
159.89.53.194	x2	mail.diyskincarekits.com
161.35.3.158	x3	mail.occasioncampingcar.com
161.35.63.137	x5	mail.truviabakery.com
165.22.10.253	x66	mail.pasttwilight.com
165.22.13.111	x44	mail.infofem.com
165.22.13.181	x32	mail.domainsfusion.com
165.22.13.212	x41	mail.vambra.com
165.22.15.210	x49	mail.wireless-os.com
165.22.5.96	x38	mail.mandaluyongdentist.com
167.172.50.246	x50	mail.nauticalcharting.com
167.99.185.236	x39	mail.domesdvr.com
178.128.184.198	x1	mail.netdnetwork.com
178.128.64.196	x44	mail.goldmicawards.com
188.166.98.121	x6	mail.whatisyourpromise.com
206.189.127.126	x35	mail.night-club-sound-systems.com
206.189.221.75	x51	mail.centrelibertedetre.com
206.189.30.8	x54	mail.calviciepedia.com
206.189.71.220	x65	mail.lowinterestdebtconsolidation.com
206.81.22.11	x54	mail.eaglerockplumbing.com
46.101.175.35	x6	mail.ratcheteerwrench.com
64.225.73.54	x27	mail.omnisaur.com
64.227.32.45	x44	mail.vibrakilltape.com
64.227.96.171	x2	mail.hsultimate.com
68.183.192.105	x2	mail.sandiegopianoteacher.com
68.183.197.177	x79	mail.canogaparkplumber.com
68.183.61.66	x60	mail.england-brand.com

Nov27
104.131.12.199	x10	mail.valenzueladentist.com
104.236.4.135	x1	mail.marikinadentist.com
104.236.4.237	x4	mail.mandaluyongdentist.com
134.209.123.20	x2	mail.guardiantaskforce.com
134.209.127.171	x2	mail.radiantartphotography.com
134.209.127.46	x62	mail.voiceofbollywood.com
134.209.185.124	x16	mail.my779.com
134.209.196.123	x6	mail.infomodas.com
134.209.229.213	x69	mail.garotosmag.com
134.209.255.207	x16	mail.vqsecurity.com
138.68.42.128	x4	mail.england-brand.com
142.93.158.86	x37	mail.vibrakilltape.com
142.93.230.80	x17	mail.calviciepedia.com
157.230.184.174	x22	mail.wireless-os.com
157.230.184.70	x57	mail.costumeonlinestore.com
157.230.90.36	x43	mail.goldmicawards.com
157.245.131.215	x7	mail.talentpoolcapability.com
157.245.254.47	x1	mail.night-club-sound-systems.com
157.245.32.147	x1	mail.boredomtree.com
159.203.17.139	x3	mail.goldmicaward.com
159.65.76.161	x5	mail.pasttwilight.com
159.89.136.136	x4	mail.omnisaur.com
159.89.53.194	x3	mail.diyskincarekits.com
161.35.114.21	x39	mail.eaglerockplumbing.com
161.35.3.158	x1	mail.occasioncampingcar.com
161.35.63.137	x5	mail.truviabakery.com
161.35.84.74	x53	mail.palisadesplumber.com
165.227.46.181	x6	mail.radiosolnascente.com
165.227.55.232	x21	mail.ealingmassage.com
167.172.31.9	x28	mail.night-club-sound-system.com
167.71.191.221	x16	mail.infofem.com
167.99.149.56	x22	mail.go2babystore.com
178.128.1.35	x1	mail.vambra.com
178.128.184.198	x3	mail.netdnetwork.com
178.62.199.231	x7	mail.dependableautoinsurance.com
188.166.123.37	x1	mail.artindependentfair.com
188.166.126.97	x9	mail.gxtsolutions.com
192.241.134.195	x2	mail.fortdavistexas.com
206.189.221.52	x21	mail.whatisyourpromise.com
206.189.221.75	x5	mail.centrelibertedetre.com
206.189.70.205	x67	mail.vantagepointegroup.com
208.68.38.89	x6	mail.patentcircuit.com
209.97.178.18	x34	mail.nauticalcharting.com
46.101.214.156	x12	mail.glasstilemurals.com
64.225.30.49	x46	mail.domesdvr.com
64.227.37.201	x41	mail.canogaparkplumber.com
64.227.96.171	x4	mail.hsultimate.com
64.227.99.90	x70	mail.lowinterestdebtconsolidation.com
68.183.192.105	x4	mail.sandiegopianoteacher.com
68.183.59.181	x18	mail.ninjachibiworld.com

Dec1
104.236.4.167	x2	mail.diyskincarekits.com
104.248.81.192	x23	mail.glasstilemurals.com
134.122.39.17	x25	mail.centrelibertedetre.com
134.122.43.227	x16	mail.my779.com
134.122.45.147	x22	mail.night-club-sound-systems.com
134.209.85.148	x23	mail.see-dinos.com
138.197.129.163	x1	mail.whatisyourpromise.com
138.197.129.74	x1	mail.marikinadentist.com
138.197.158.132	x1	mail.kevenbrochu.com
138.197.209.198	x19	mail.killer-recipes.com
138.68.12.206	x1	mail.vambra.com
138.68.31.174	x1	mail.a2zinsulation.com
142.93.159.247	x16	mail.lounge-sound-system.com
142.93.180.21	x21	mail.hydraincome.com
142.93.72.221	x1	mail.guardiantaskforce.com
157.230.31.25	x23	mail.dependableautoinsurance.com
157.230.57.79	x16	mail.goldmicaward.com
157.245.34.191	x2	mail.go2babystore.com
159.65.229.83	x3	mail.happilyeverginder.com
159.65.98.202	x3	mail.infomodas.com
159.89.152.182	x1	mail.occasioncampingcar.com
161.35.232.249	x15	mail.motassimthupsee.com
161.35.42.38	x8	mail.friday2monday.com
161.35.50.104	x21	mail.eaglerockplumbing.com
162.243.161.182	x3	mail.youtuberwgts.com
165.227.11.178	x1	mail.radiantartphotography.com
165.227.35.206	x3	mail.ninjachibiworld.com
165.227.41.121	x2	mail.texasgentlemenclubs.com
167.172.132.250	x17	mail.artindependentfair.com
167.172.33.31	x17	mail.denimdash5k.com
167.71.128.147	x32	mail.bodycarekits.com
167.71.142.49	x16	mail.vibrakilltape.com
167.71.16.195	x12	mail.night-club-sound-system.com
167.71.162.68	x11	mail.infofem.com
167.99.142.242	x19	mail.talentpoolcapability.com
178.128.225.34	x26	mail.ratcheteerwrench.com
178.128.238.6	x17	mail.pasttwilight.com
188.166.100.51	x5	mail.truviabakery.com
188.166.115.158	x1	mail.voiceofbollywood.com
188.166.127.51	x1	mail.goldmicawards.com
188.166.17.50	x23	mail.ealingmassage.com
188.166.90.106	x1	mail.canogaparkplumber.com
198.199.76.59	x5	mail.familyjeffries.com
204.48.20.154	x22	mail.calviciepedia.com
206.189.196.171	x17	mail.westhillsplumber.com
206.189.219.74	x20	mail.omnisaur.com
206.189.60.37	x2	mail.bollywoodvoice.com
206.189.62.185	x25	mail.wireless-os.com
207.154.252.77	x18	mail.sandiegopianoteacher.com
209.97.138.16	x16	mail.patentcircuit.com
46.101.154.214	x2	mail.garotosmag.com
46.101.173.21	x1	mail.england-brand.com
46.101.208.168	x18	mail.masteryijingtimespace.com
46.101.238.88	x1	mail.costumeonlinestore.com
64.225.72.236	x16	mail.mandaluyongdentist.com
64.225.72.69	x23	mail.bar-sound-systems.com
64.227.109.222	x2	mail.carcharohome.com
64.227.4.247	x19	mail.lowinterestdebtconsolidation.com
64.227.75.117	x24	mail.nauticalcharting.com
64.227.99.195	x16	mail.boredomtree.com

Dec3
104.131.165.153	x5	mail.orthoweave.com
104.131.30.242	x5	mail.serviplatiniumrentacar.com
134.209.174.84	x39	mail.ggjmanagement.com
134.209.216.89	x2	mail.longislandmenu.com
134.209.74.166	x32	mail.mysupportflow.com
138.197.156.5	x4	mail.nohidigitalpress.com
138.197.157.188	x4	mail.cottageusa.com
138.68.17.13	x5	mail.atomicsolarwatches.com
138.68.54.189	x6	mail.aldolga.com
138.68.56.211	x7	mail.proximaedicion.com
139.59.209.159	x4	mail.randombn.com
142.93.150.5	x34	mail.hikkaduwabeach.com
142.93.226.11	x40	mail.discountgiftpens.com
157.230.102.241	x31	mail.lumenspeech.com
157.230.110.81	x33	mail.integrizo.com
157.230.21.233	x36	mail.anasfamilydentistry.com
157.245.70.109	x3	mail.snappyfi.com
157.245.72.6	x5	mail.3emecline.com
159.203.13.200	x8	mail.instaridellc.com
159.203.14.73	x7	mail.gillingham-ryan.com
159.203.181.75	x6	mail.lexcincierge.com
159.203.39.126	x2	mail.die-pr-agentur.com
159.203.47.92	x2	mail.capquestpacific.com
159.65.112.114	x7	mail.jewelherbs.com
159.89.114.120	x39	mail.erdisdriza.com
161.35.231.244	x35	mail.imediarank.com
161.35.238.30	x33	mail.librar-e.com
161.35.81.37	x31	mail.samphengplaza.com
161.35.89.190	x39	mail.arpadhousing.com
162.243.173.216	x5	mail.plxcw.com
164.90.156.224	x40	mail.borsamotorstekirdag.com
165.22.113.72	x34	mail.expresatepanama.com
165.22.15.164	x31	mail.metaspec-sorb.com
165.22.192.79	x30	mail.pressearbeit-vom-profi.com
165.22.205.14	x40	mail.besthorrorfilms.com
165.227.135.0	x25	mail.prosperitynetworker.com
165.227.14.10	x3	mail.keonband.com
165.227.144.143	x33	mail.adwingmedia.com
165.227.151.21	x31	mail.sampengplaza.com
165.227.38.127	x4	mail.eurosalonspa.com
165.227.38.145	x10	mail.altholaia.com
167.172.246.216	x40	mail.myethconnect.com
167.172.51.243	x37	mail.abstractdomains.com
167.99.184.111	x42	mail.estate-agent-in-javea.com
167.99.191.171	x4	mail.golizle.com
167.99.194.184	x27	mail.mediasmartphilly.com
178.62.255.16	x3	mail.otvibes.com
188.166.104.103	x3	mail.balancingbloodsugar.com
188.166.112.46	x8	mail.hanahspa.com
188.166.23.183	x36	mail.greg-sport.com
188.166.71.218	x8	mail.alqahira-academy.com
188.166.82.107	x3	mail.hubsz.com
206.189.184.209	x35	mail.regionalplumber.com
206.189.220.121	x37	mail.codecuack.com
206.189.25.213	x32	mail.goribi.com
206.189.55.48	x39	mail.czicare.com
207.154.194.159	x37	mail.bingocarioca.com
46.101.199.38	x40	mail.birdandbearbakehouse.com
64.227.106.134	x36	mail.grandvaluecapital.com
64.227.64.92	x10	mail.asketc.com
67.205.154.14	x4	mail.3mcline.com
67.205.170.229	x2	mail.loveeathome.com
67.207.92.81	x28	mail.listfor999.com
68.183.193.172	x32	mail.nobeldial.com
68.183.204.173	x37	mail.qattos.com

Dec4
104.131.172.132	x6	mail.myethconnect.com
104.248.28.35	x59	mail.glennraid.com
128.199.34.43	x5	mail.srilankaboutiquehotel.com
134.122.20.94	x53	mail.gillingham-ryan.com
134.122.34.228	x42	mail.3emecline.com
134.122.98.215	x43	mail.petbuilds.com
134.209.177.193	x44	mail.metaspec-sorb.com
134.209.36.208	x53	mail.lumenspeech.com
134.209.37.203	x44	mail.mysupportflow.com
138.197.144.91	x7	mail.bingocarioca.com
138.197.173.104	x9	mail.goribi.com
157.230.102.147	x44	mail.ggjmanagement.com
157.230.104.16	x49	mail.nohidigitalpress.com
157.230.110.237	x56	mail.samphengplaza.com
157.230.17.155	x40	mail.regionalplumber.com
157.230.23.238	x43	mail.aldolga.com
157.245.43.228	x11	mail.birdandbearbakehouse.com
159.203.12.5	x5	mail.longislandmenu.com
159.203.17.62	x8	mail.staffordlawoffices.com
159.203.38.197	x3	mail.mirissasrilanka.com
159.203.60.129	x4	mail.capquestpacific.com
159.65.110.137	x2	mail.otvibes.com
159.65.117.252	x6	mail.discountgiftpens.com
159.65.124.87	x4	mail.proximaedicion.com
159.89.134.224	x5	mail.lexcincierge.com
159.89.19.86	x36	mail.abstractdomains.com
159.89.96.147	x7	mail.otvibez.com
161.35.108.28	x52	mail.loveeathome.com
161.35.89.190	x2	mail.arpadhousing.com
165.22.1.214	x46	mail.anasfamilydentistry.com
165.22.13.31	x38	mail.asketc.com
165.22.14.248	x43	mail.randombn.com
165.22.14.255	x36	mail.balancingbloodsugar.com
165.227.144.143	x4	mail.adwingmedia.com
165.227.206.84	x46	mail.grandvaluecapital.com
167.99.173.172	x5	mail.diyadjustabledesk.com
167.99.184.111	x3	mail.estate-agent-in-javea.com
167.99.194.184	x3	mail.mediasmartphilly.com
167.99.90.31	x41	mail.hydroxit.com
174.138.0.120	x3	mail.borsamotorstekirdag.com
174.138.8.151	x7	mail.hoteltopazkandy.com
174.138.8.164	x1	mail.prosperitynetworker.com
174.138.8.184	x7	mail.plxcw.com
174.138.8.206	x5	mail.eurosalonspa.com
174.138.8.215	x3	mail.hanahspa.com
174.138.8.223	x4	mail.czicare.com
178.128.180.172	x1	mail.erdisdriza.com
188.166.102.178	x6	mail.greg-sport.com
188.166.109.209	x3	mail.altholaia.com
188.166.116.6	x7	mail.atomicsolarwatches.com
188.166.117.202	x4	mail.imediarank.com
192.241.149.89	x4	mail.integrizo.com
192.241.155.244	x7	mail.moldemi.com
206.189.182.162	x46	mail.keonband.com
206.189.194.176	x41	mail.instaridellc.com
206.189.228.146	x42	mail.expresatepanama.com
209.97.154.5	x46	mail.besthorrorfilms.com
46.101.229.217	x4	mail.hubsz.com
64.227.104.196	x43	mail.hikkaduwabeach.com
64.227.97.6	x51	mail.die-pr-agentur.com
67.207.92.81	x7	mail.listfor999.com
68.183.148.57	x42	mail.santabarbaracampers.com
68.183.202.117	x6	mail.pressearbeit-vom-profi.com
68.183.213.103	x31	mail.snappyfi.com

Dec5
104.131.12.112	x9	mail.qattos.com
104.131.12.14	x11	mail.plxcw.com
104.131.64.193	x11	mail.srilankaboutiquehotel.com
104.248.170.42	x41	mail.capquestpacific.com
104.248.28.35	x2	mail.glennraid.com
134.122.100.1	x51	mail.loveeathome.com
134.122.20.94	x5	mail.gillingham-ryan.com
134.209.33.141	x41	mail.gear24-7.com
134.209.36.208	x1	mail.lumenspeech.com
138.197.160.189	x5	mail.3emecline.com
138.197.174.187	x8	mail.codecuack.com
138.197.219.29	x47	mail.goribi.com
138.197.223.71	x4	mail.eurosalonspa.com
138.68.21.46	x6	mail.metaspec-sorb.com
138.68.31.68	x2	mail.mirissasrilanka.com
139.59.128.41	x43	mail.discountgiftpens.com
157.230.82.205	x49	mail.santabarbaracampers.com
157.230.92.155	x55	mail.instaridellc.com
159.203.10.175	x5	mail.grandvaluecapital.com
159.203.20.200	x3	mail.otvibes.com
159.203.35.15	x8	mail.abstractdomains.com
159.65.105.143	x7	mail.regionalplumber.com
159.65.71.3	x8	mail.integrizo.com
159.89.147.14	x6	mail.ggjmanagement.com
161.35.12.245	x55	mail.lexcincierge.com
161.35.89.190	x1	mail.arpadhousing.com
165.22.44.75	x52	mail.randombn.com
165.227.141.158	x44	mail.prosperitynetworker.com
165.227.38.186	x2	mail.hanahspa.com
167.172.157.73	x42	mail.supplementscheck.com
167.172.50.246	x1	mail.bingocarioca.com
167.99.184.111	x3	mail.estate-agent-in-javea.com
167.99.194.184	x4	mail.mediasmartphilly.com
167.99.197.112	x46	mail.proximaedicion.com
174.138.0.138	x3	mail.sampengplaza.com
174.138.0.214	x4	mail.anasfamilydentistry.com
174.138.0.61	x3	mail.besthorrorfilms.com
174.138.15.133	x5	mail.die-pr-agentur.com
174.138.15.235	x8	mail.imediarank.com
174.138.15.75	x12	mail.birdandbearbakehouse.com
174.138.15.77	x6	mail.greg-sport.com
178.62.200.114	x9	mail.staffordlawoffices.com
188.166.103.34	x10	mail.librar-e.com
188.166.111.164	x3	mail.altholaia.com
188.166.113.242	x4	mail.stowlocal.com
188.166.127.62	x8	mail.balancingbloodsugar.com
188.166.90.240	x7	mail.myethconnect.com
192.241.141.180	x13	mail.mysupportflow.com
192.241.158.225	x5	mail.moldemi.com
206.81.25.220	x40	mail.aldolga.com
207.154.241.16	x45	mail.keonband.com
209.97.186.133	x45	mail.golizle.com
46.101.121.48	x3	mail.borsamotorstekirdag.com
46.101.127.59	x6	mail.hubsz.com
46.101.205.38	x46	mail.expresatepanama.com
64.227.101.100	x46	mail.diyadjustabledesk.com
64.227.104.196	x1	mail.hikkaduwabeach.com
64.227.35.117	x48	mail.petbuilds.com
67.207.92.81	x2	mail.listfor999.com
68.183.213.103	x3	mail.snappyfi.com

Dec6
104.131.56.212	x2	mail.regionalplumber.com
104.248.17.78	x60	mail.librar-e.com
104.248.28.35	x6	mail.glennraid.com
134.122.106.4	x46	mail.gear24-7.com
134.122.124.181	x41	mail.die-pr-agentur.com
134.122.20.94	x5	mail.gillingham-ryan.com
134.122.35.34	x73	mail.srilankaboutiquehotel.com
134.122.37.54	x46	mail.alqahira-academy.com
138.197.137.162	x4	mail.loveeathome.com
138.197.172.185	x5	mail.anasfamilydentistry.com
138.197.190.252	x4	mail.mediasmartphilly.com
138.68.226.220	x8	mail.greg-sport.com
138.68.45.47	x1	mail.erdisdriza.com
139.59.143.19	x49	mail.expresatepanama.com
142.93.146.12	x61	mail.myethconnect.com
142.93.163.157	x51	mail.czicare.com
142.93.97.196	x53	mail.maksgaragedoors.com
157.230.189.130	x44	mail.besthorrorfilms.com
157.230.215.60	x46	mail.hanahspa.com
157.230.223.114	x52	mail.petbuilds.com
157.230.238.123	x59	mail.codecuack.com
159.89.121.231	x67	mail.imediarank.com
161.35.228.117	x51	mail.listfor999.com
165.22.125.212	x61	mail.hubsz.com
165.227.13.27	x6	mail.estate-agent-in-javea.com
165.227.47.48	x5	mail.integrizo.com
167.172.157.73	x3	mail.supplementscheck.com
167.99.192.17	x46	mail.santabarbaracampers.com
167.99.253.201	x49	mail.lexcincierge.com
167.99.4.241	x5	mail.mirissasrilanka.com
174.138.1.31	x6	mail.golizle.com
174.138.14.241	x3	mail.birdandbearbakehouse.com
174.138.14.243	x8	mail.metaspec-sorb.com
174.138.14.73	x5	mail.randombn.com
174.138.2.133	x7	mail.discountgiftpens.com
174.138.2.224	x8	mail.mysupportflow.com
174.138.4.85	x1	mail.3mcline.com
174.138.8.80	x2	mail.qattos.com
188.166.122.182	x6	mail.eurosalonspa.com
198.199.79.103	x7	mail.ggjmanagement.com
198.199.83.135	x1	mail.aldolga.com
206.189.119.3	x48	mail.balancingbloodsugar.com
206.189.220.198	x57	mail.abstractdomains.com
206.189.50.139	x49	mail.artfulworldgalleria.com
209.97.131.88	x54	mail.orthoweave.com
209.97.143.11	x57	mail.instaridellc.com
209.97.153.119	x54	mail.adwingmedia.com
209.97.154.162	x51	mail.asketc.com
64.227.104.196	x1	mail.hikkaduwabeach.com
64.227.104.23	x40	mail.arpadhousing.com
64.227.19.157	x41	mail.cottageusa.com
64.227.22.73	x53	mail.prosperitynetworker.com
64.227.9.61	x54	mail.sampengplaza.com
68.183.148.152	x56	mail.proximaedicion.com
68.183.204.57	x61	mail.serviplatiniumrentacar.com
68.183.213.103	x2	mail.snappyfi.com

Dec7
104.248.17.78	x2	mail.librar-e.com
134.122.108.98	x35	mail.abstractdomains.com
134.122.124.148	x34	mail.ggjmanagement.com
134.122.20.94	x3	mail.gillingham-ryan.com
134.122.35.34	x4	mail.srilankaboutiquehotel.com
134.209.36.208	x2	mail.lumenspeech.com
134.209.41.182	x30	mail.discountgiftpens.com
138.197.145.102	x7	mail.hikkaduwabeach.com
138.197.215.185	x7	mail.erdisdriza.com
138.68.238.181	x4	mail.moldemi.com
142.93.146.12	x3	mail.myethconnect.com
142.93.161.157	x33	mail.golizle.com
142.93.176.112	x30	mail.gear24-7.com
142.93.178.117	x33	mail.glennraid.com
142.93.43.33	x2	mail.samphengplaza.com
142.93.97.196	x4	mail.maksgaragedoors.com
157.230.223.114	x3	mail.petbuilds.com
157.245.36.222	x6	mail.codecuack.com
159.65.91.158	x2	mail.cottageusa.com
159.89.26.46	x29	mail.grandvaluecapital.com
161.35.224.110	x34	mail.longislandmenu.com
161.35.228.117	x3	mail.listfor999.com
165.22.125.212	x4	mail.hubsz.com
165.227.81.240	x33	mail.arpadhousing.com
165.227.85.194	x30	mail.otvibez.com
167.172.157.73	x2	mail.supplementscheck.com
167.172.50.246	x2	mail.bingocarioca.com
167.172.55.184	x23	mail.die-pr-agentur.com
167.99.163.140	x27	mail.anasfamilydentistry.com
167.99.191.157	x4	mail.hanahspa.com
167.99.192.17	x1	mail.santabarbaracampers.com
167.99.193.102	x25	mail.asketc.com
167.99.242.29	x27	mail.diyadjustabledesk.com
174.138.1.100	x10	mail.czicare.com
174.138.14.16	x8	mail.borsamotorstekirdag.com
174.138.4.218	x6	mail.adwingmedia.com
188.166.121.175	x4	mail.hoteltopazkandy.com
198.199.70.7	x8	mail.greg-sport.com
198.199.78.222	x1	mail.aldolga.com
206.189.119.3	x1	mail.balancingbloodsugar.com
206.189.126.117	x35	mail.birdandbearbakehouse.com
209.97.131.88	x2	mail.orthoweave.com
209.97.143.11	x1	mail.instaridellc.com
209.97.144.235	x29	mail.alqahira-academy.com
64.227.100.83	x33	mail.expresatepanama.com
64.227.101.225	x29	mail.capquestpacific.com
64.227.103.226	x32	mail.3mcline.com
64.227.22.73	x3	mail.prosperitynetworker.com
64.227.45.61	x26	mail.goribi.com
64.227.9.61	x3	mail.sampengplaza.com
64.227.97.117	x33	mail.lexcincierge.com
67.205.146.48	x3	mail.artfulworldgalleria.com
68.183.148.152	x1	mail.proximaedicion.com
68.183.204.57	x3	mail.serviplatiniumrentacar.com
68.183.213.103	x3	mail.snappyfi.com
68.183.48.14	x34	mail.eurosalonspa.com

Dec8
104.131.160.45	x7	mail.besthorrorfilms.com
104.131.186.10	x7	mail.integrizo.com
104.248.115.32	x24	mail.yoursocialcompass.com
104.248.129.118	x20	mail.connecttopurpose.com
104.248.161.36	x36	mail.3emecline.com
104.248.17.102	x27	mail.vietbonsai.com
104.248.172.144	x22	mail.thewebisart.com
104.248.43.178	x30	mail.grandvaluecapital.com
104.248.58.214	x25	mail.bvifm.com
128.199.51.7	x5	mail.lexmatprinting.com
128.199.53.118	x4	mail.hanahspa.com
134.122.113.145	x26	mail.mirissasrilanka.com
134.122.21.250	x16	mail.kodevianstudio.com
134.122.28.202	x23	mail.bvikite.com
134.209.36.208	x1	mail.lumenspeech.com
138.197.141.154	x5	mail.zeekiebootz.com
138.197.152.148	x4	mail.tallermecanicomackinder.com
138.197.155.35	x2	mail.kiteboardingbvi.com
138.197.156.245	x1	mail.diversiforma.com
138.197.160.132	x3	mail.otavillamechanicalcontractors.com
138.197.173.88	x5	mail.lotus-audio.com
138.197.176.248	x5	mail.electricalcontractorwestminster.com
138.68.10.239	x1	mail.llanteraavalos.com
138.68.23.117	x8	mail.expresatepanama.com
138.68.234.63	x5	mail.barzancontracting.com
138.68.249.154	x3	mail.thebvibeachbar.com
138.68.252.66	x5	mail.borsamotorstekirdag.com
138.68.70.242	x5	mail.anasfamilydentistry.com
142.93.180.43	x33	mail.codecuack.com
142.93.189.16	x18	mail.theleftbrainagency.com
142.93.189.198	x26	mail.biomusclegym.com
142.93.249.161	x26	mail.epicnitro.com
142.93.9.203	x22	mail.ulagallaresort.com
143.110.147.176	x22	mail.anegadakitejam.com
143.110.148.197	x4	mail.tedbvi.com
143.110.157.168	x24	mail.benitexecuador.com
143.110.172.96	x23	mail.diyadjustabledesk.com
143.110.229.145	x2	mail.raiderbackup.com
157.230.19.55	x28	mail.thedisabilityguysgoshen.com
157.245.134.143	x7	mail.3mcline.com
157.245.137.205	x6	mail.altholaia.com
157.245.215.195	x29	mail.prosperitynetworker.com
157.245.34.147	x4	mail.virginislandskitejam.com
157.245.84.237	x3	mail.isasermais.com
159.203.12.183	x5	mail.samphengplaza.com
159.203.22.12	x6	mail.moldemi.com
159.203.25.100	x5	mail.staffordlawoffices.com
159.203.4.125	x5	mail.weixin288.com
159.203.43.190	x3	mail.steynar.com
159.203.46.213	x3	mail.asketc.com
159.65.107.66	x4	mail.myethconnect.com
159.65.124.229	x1	mail.ralphtoneal.com
159.65.192.147	x17	mail.realbvikitejam.com
159.65.192.246	x22	mail.greentechnologybvi.com
159.65.66.244	x3	mail.vincruise.com
159.65.84.164	x3	mail.loveeathome.com
159.89.121.227	x21	mail.zurmend.com
159.89.140.183	x2	mail.cookbrosomnia.com
159.89.144.74	x4	mail.nohidigitalpress.com
159.89.25.135	x5	mail.vincruises.com
161.35.127.12	x22	mail.tolaradio.com
161.35.160.224	x21	mail.bvikitevillage.com
161.35.161.126	x21	mail.sandestinlimorentals.com
161.35.235.220	x28	mail.anegadakiteclub.com
161.35.235.38	x27	mail.barzantravel.com
161.35.43.198	x34	mail.mediasmartphilly.com
161.35.46.86	x26	mail.tidewatercollection.com
165.22.35.233	x25	mail.trantandat.com
165.227.146.9	x23	mail.keonband.com
165.227.169.115	x31	mail.supplementscheck.com
165.227.17.20	x8	mail.adwingmedia.com
165.227.50.209	x38	mail.hikkaduwabeach.com
165.227.82.61	x31	mail.sampengplaza.com
167.172.50.246	x1	mail.bingocarioca.com
167.71.107.85	x21	mail.rvprotravelguide.com
167.71.184.13	x32	mail.greg-sport.com
167.71.250.94	x19	mail.vimyx.com
167.71.86.141	x20	mail.isabemore.com
167.99.103.14	x4	mail.workinjuryanswers.com
167.99.162.172	x19	mail.kitevillagebvi.com
167.99.194.86	x22	mail.proaguacate.com
174.138.11.133	x7	mail.santabarbaracampers.com
174.138.11.143	x6	mail.eurosalonspa.com
174.138.11.150	x3	mail.arpadhousing.com
174.138.11.158	x4	mail.gear24-7.com
174.138.11.160	x5	mail.drinktempest.com
174.138.11.170	x3	mail.aepages.com
174.138.11.171	x6	mail.petbuilds.com
174.138.11.235	x10	mail.hoteltopazkandy.com
174.138.11.49	x2	mail.casasbahia-carrinhopedido.com
174.138.11.65	x4	mail.metaspec-sorb.com
174.138.11.85	x4	mail.proximaedicion.com
174.138.13.234	x3	mail.anna-theo.com
174.138.3.224	x7	mail.srilankaboutiquehotel.com
174.138.3.228	x2	mail.golizle.com
174.138.37.189	x25	mail.torcedorfc.com
174.138.4.159	x2	mail.glennraid.com
174.138.7.243	x3	mail.tedxbvi.com
174.138.7.49	x4	mail.hydroxit.com
178.128.154.33	x1	mail.qattos.com
178.128.180.117	x1	mail.wowmonkbuilds.com
178.128.188.235	x22	mail.bvikiteboarding.com
178.128.188.247	x36	mail.czicare.com
178.128.235.33	x3	mail.instaridellc.com
178.128.38.117	x3	mail.maksgaragedoors.com
188.166.121.119	x2	mail.vanacle.com
188.166.18.105	x19	mail.remucica.com
188.166.18.31	x32	mail.discountgiftpens.com
188.166.25.65	x21	mail.bvisupcup.com
192.241.129.35	x4	mail.otvibez.com
192.34.60.111	x3	mail.orthoweave.com
206.189.119.3	x1	mail.balancingbloodsugar.com
206.189.183.15	x26	mail.estate-agent-in-javea.com
206.189.198.4	x23	mail.ecomugurukul.com
206.189.71.198	x30	mail.alqahira-academy.com
206.189.77.53	x4	mail.rocagames.com
207.154.225.125	x18	mail.thebvikitejam.com
207.154.247.212	x35	mail.abstractdomains.com
207.154.249.142	x26	mail.portlandbuttler.com
207.154.249.253	x36	mail.otvibes.com
209.97.149.198	x22	mail.anegadakitevillage.com
209.97.153.171	x19	mail.bvikiters.com
46.101.175.94	x2	mail.todido.com
46.101.210.178	x31	mail.librar-e.com
46.101.237.116	x3	mail.ultimateapexlife.com
64.227.101.113	x25	mail.domuchmore.com
64.227.101.219	x30	mail.die-pr-agentur.com
64.227.101.225	x2	mail.capquestpacific.com
64.227.45.61	x2	mail.goribi.com
64.227.96.149	x29	mail.cottageusa.com
64.227.97.165	x28	mail.serviplatiniumrentacar.com
67.205.170.181	x4	mail.plxcw.com
67.207.92.205	x31	mail.stowlocal.com
68.183.151.59	x1	mail.vikitejam.com
68.183.198.230	x23	mail.indotori.com
68.183.200.144	x27	mail.hubsz.com
68.183.200.226	x26	mail.televvun.com
68.183.200.92	x31	mail.crowdmasterstockmarket.com
68.183.202.135	x5	mail.erdisdriza.com
68.183.202.221	x6	mail.trendmylife.com
68.183.213.103	x1	mail.snappyfi.com
68.183.217.192	x24	mail.meditech-solutions.com
68.183.57.75	x33	mail.imediarank.com
68.183.59.229	x32	mail.birdandbearbakehouse.com

Dec9
104.131.161.232	x3	mail.samphengplaza.com
104.236.4.7	x6	mail.kitevillagebvi.com
104.236.7.194	x4	mail.otvibez.com
104.248.161.94	x16	mail.proaguacate.com
134.122.113.145	x5	mail.mirissasrilanka.com
134.209.177.253	x18	mail.zurmend.com
134.209.186.173	x20	mail.supplementscheck.com
134.209.19.68	x24	mail.thedisabilityguysgoshen.com
134.209.36.208	x2	mail.lumenspeech.com
134.209.72.21	x2	mail.die-pr-agentur.com
138.197.161.156	x2	mail.connecttopurpose.com
138.197.164.170	x4	mail.hydroxit.com
138.197.175.19	x2	mail.bvikiters.com
138.197.192.100	x2	mail.plxcw.com
142.93.103.140	x15	mail.isasermais.com
142.93.113.65	x15	mail.tidewatercollection.com
142.93.148.192	x20	mail.llanteraavalos.com
142.93.148.71	x18	mail.alqahira-academy.com
142.93.154.174	x17	mail.rocagames.com
142.93.189.16	x2	mail.theleftbrainagency.com
143.110.148.104	x2	mail.qattos.com
143.110.148.197	x1	mail.tedbvi.com
143.110.149.215	x21	mail.cookbrosomnia.com
143.110.158.191	x18	mail.trantandat.com
143.110.229.145	x2	mail.raiderbackup.com
157.230.184.56	x20	mail.todido.com
157.230.21.155	x21	mail.otavillamechanicalcontractors.com
157.230.214.247	x15	mail.televvun.com
157.230.220.152	x18	mail.epicnitro.com
157.230.222.90	x19	mail.anegadakitejam.com
157.230.232.218	x5	mail.nohidigitalpress.com
157.230.95.44	x16	mail.grandvaluecapital.com
157.245.38.1	x6	mail.hubsz.com
159.203.25.248	x3	mail.crowdmasterstock.com
159.203.29.102	x5	mail.tallermecanicomackinder.com
159.203.33.177	x2	mail.biomusclegym.com
159.203.8.192	x3	mail.realbvikitejam.com
159.65.124.91	x2	mail.metaspec-sorb.com
159.65.192.116	x24	mail.anegadakitevillage.com
159.65.196.142	x18	mail.crowdmasterstocks.com
159.65.200.108	x18	mail.srilankaboutiquehotel.com
159.65.200.114	x15	mail.birdandbearbakehouse.com
159.65.200.115	x18	mail.arpadhousing.com
159.65.200.118	x21	mail.vincruises.com
159.65.200.195	x15	mail.prosperitynetworker.com
159.65.200.199	x20	mail.tomoxide.com
159.65.207.107	x2	mail.vietbonsai.com
159.65.207.108	x2	mail.zeekiebootz.com
159.65.207.199	x15	mail.steynar.com
159.65.207.51	x4	mail.listfor999.com
159.65.74.93	x3	mail.keonband.com
159.89.126.29	x16	mail.regionalplumber.com
159.89.140.242	x2	mail.kodevianstudio.com
159.89.225.172	x4	mail.discountgiftpens.com
159.89.25.185	x2	mail.vincruise.com
161.35.100.241	x24	mail.hikkaduwabeach.com
161.35.127.12	x3	mail.tolaradio.com
161.35.161.126	x3	mail.sandestinlimorentals.com
161.35.231.8	x23	mail.anna-theo.com
161.35.232.195	x21	mail.diversiforma.com
161.35.43.198	x4	mail.mediasmartphilly.com
161.35.62.253	x19	mail.staffordlawoffices.com
161.35.98.42	x17	mail.longislandmenu.com
164.90.156.88	x17	mail.weixin288.com
165.22.122.107	x20	mail.petbuilds.com
165.22.37.144	x20	mail.rvprotravelguide.com
165.227.12.139	x4	mail.golizle.com
165.227.134.241	x20	mail.adwingmedia.com
165.227.21.129	x3	mail.gear24-7.com
165.227.35.117	x1	mail.borsamotorstekirdag.com
165.227.53.127	x16	mail.altholaia.com
165.227.58.228	x17	mail.casasbahia-carrinhopedido.com
165.227.92.79	x17	mail.stowlocal.com
167.172.132.241	x18	mail.3emecline.com
167.172.50.246	x1	mail.bingocarioca.com
167.71.131.230	x24	mail.bigcitysiren.com
167.71.184.13	x3	mail.greg-sport.com
167.71.250.94	x1	mail.vimyx.com
167.71.86.141	x1	mail.isabemore.com
167.99.168.156	x3	mail.portlandbuttler.com
167.99.174.54	x2	mail.eurosalonspa.com
167.99.176.108	x17	mail.kiteboardingbvi.com
167.99.178.32	x16	mail.greentechnologybvi.com
167.99.179.199	x15	mail.hanahspa.com
167.99.180.125	x22	mail.bvikiteboarding.com
167.99.180.227	x15	mail.maksgaragedoors.com
167.99.180.239	x18	mail.asketc.com
167.99.234.106	x17	mail.3mcline.com
174.138.11.136	x4	mail.codecuack.com
174.138.12.162	x1	mail.thehauntingathalloween.com
174.138.12.215	x2	mail.moldemi.com
174.138.2.17	x3	mail.imediarank.com
174.138.3.87	x1	mail.loveeathome.com
174.138.37.189	x2	mail.torcedorfc.com
174.138.39.17	x15	mail.ggjmanagement.com
174.138.4.210	x2	mail.thewebisart.com
174.138.6.135	x3	mail.bvifm.com
174.138.6.227	x2	mail.expresatepanama.com
174.138.6.26	x1	mail.besthorrorfilms.com
178.128.172.244	x1	mail.trendmylife.com
178.62.214.95	x3	mail.bvikitevillage.com
188.166.113.161	x5	mail.proximaedicion.com
188.166.126.119	x2	mail.anegadakiteclub.com
188.166.127.87	x1	mail.sampengplaza.com
188.166.18.105	x2	mail.remucica.com
188.166.25.65	x2	mail.bvisupcup.com
188.166.73.206	x1	mail.tedxbvi.com
206.189.119.3	x3	mail.balancingbloodsugar.com
206.189.161.36	x16	mail.ralphtoneal.com
206.189.171.232	x21	mail.ulagallaresort.com
206.189.183.15	x2	mail.estate-agent-in-javea.com
206.189.198.4	x5	mail.ecomugurukul.com
206.189.215.137	x19	mail.diyadjustabledesk.com
207.154.243.67	x16	mail.meditech-solutions.com
207.154.247.212	x2	mail.abstractdomains.com
207.154.249.253	x1	mail.otvibes.com
208.68.38.24	x1	mail.bierclip.com
209.97.133.189	x18	mail.glennraid.com
64.225.14.164	x24	mail.randombn.com
64.225.6.35	x21	mail.vikitejam.com
64.227.101.225	x2	mail.capquestpacific.com
64.227.107.211	x18	mail.wilpattuwanationalpark.com
64.227.45.61	x2	mail.goribi.com
64.227.96.149	x4	mail.cottageusa.com
64.227.96.181	x21	mail.bvikite.com
64.227.96.229	x18	mail.barzantravel.com
64.227.97.117	x4	mail.lexcincierge.com
67.205.188.90	x5	mail.crowdmasterexchange.com
68.183.111.244	x20	mail.bedandbreakfastnorfolk.com
68.183.198.230	x3	mail.indotori.com
68.183.200.92	x2	mail.crowdmasterstockmarket.com
68.183.202.172	x1	mail.electricalcontractorwestminster.com
68.183.213.103	x2	mail.snappyfi.com
68.183.217.78	x19	mail.myethconnect.com

Dec10
104.248.58.43	x23	mail.mysupportflow.com
128.199.49.249	x4	mail.ralphtoneal.com
134.209.168.41	x23	mail.barzantravel.com
134.209.177.253	x1	mail.zurmend.com
134.209.188.85	x34	mail.adwingmedia.com
134.209.36.208	x2	mail.lumenspeech.com
138.197.157.29	x4	mail.kiteboardingbvi.com
138.197.163.159	x3	mail.tedxbvi.com
138.197.169.199	x7	mail.workinjuryanswers.com
138.197.174.212	x4	mail.kodevianstudio.com
138.197.202.199	x1	mail.ikoneek.com
138.197.218.6	x6	mail.hanahspa.com
138.68.23.84	x1	mail.capquestpacific.com
138.68.252.58	x2	mail.vincruise.com
138.68.60.103	x4	mail.lexcincierge.com
142.93.145.129	x27	mail.librar-e.com
142.93.150.92	x1	mail.gear24-7.com
142.93.155.49	x26	mail.staffordlawoffices.com
142.93.189.16	x1	mail.theleftbrainagency.com
142.93.39.7	x4	mail.diyadjustabledesk.com
143.110.152.30	x26	mail.czicare.com
143.110.175.72	x21	mail.epicnitro.com
143.110.226.139	x1	mail.plxcw.com
143.110.226.242	x4	mail.randombn.com
143.110.230.127	x4	mail.todido.com
143.110.236.173	x7	mail.artfulworldgalleria.com
143.110.236.251	x6	mail.llanteraavalos.com
157.230.102.157	x24	mail.srilankaboutiquehotel.com
157.230.104.194	x23	mail.anegadakitejam.com
157.230.113.92	x34	mail.bvifm.com
157.230.121.146	x21	mail.hubsz.com
157.230.127.58	x28	mail.loveeathome.com
157.230.209.66	x26	mail.regionalplumber.com
157.230.21.155	x4	mail.otavillamechanicalcontractors.com
157.230.21.172	x19	mail.grosvenorfire.com
157.230.222.231	x21	mail.meditech-solutions.com
157.230.223.77	x21	mail.metaspec-sorb.com
157.230.58.101	x25	mail.biomusclegym.com
157.230.61.244	x25	mail.serviplatiniumrentacar.com
157.245.2.89	x26	mail.anna-theo.com
157.245.47.75	x2	mail.crowdmasterstockexchange.com
159.203.24.12	x1	mail.orthoweave.com
159.203.35.93	x4	mail.torcedorfc.com
159.203.37.33	x4	mail.tomoxide.com
159.65.112.214	x1	mail.greg-sport.com
159.65.192.116	x4	mail.anegadakitevillage.com
159.65.196.59	x23	mail.weixin288.com
159.65.200.11	x25	mail.crowdmasterexchange.com
159.65.200.226	x23	mail.qattos.com
159.65.200.236	x22	mail.prosperitynetworker.com
159.65.200.85	x25	mail.arpadhousing.com
159.65.207.113	x2	mail.televvun.com
159.65.207.129	x5	mail.discountgiftpens.com
159.65.207.141	x4	mail.mirissasrilanka.com
159.65.207.148	x2	mail.isasermais.com
159.65.207.166	x2	mail.thedisabilityguysgoshen.com
159.65.207.179	x2	mail.imediarank.com
159.89.140.119	x3	mail.tallermecanicomackinder.com
159.89.82.97	x22	mail.grandvaluecapital.com
161.35.100.241	x1	mail.hikkaduwabeach.com
161.35.112.160	x22	mail.nohidigitalpress.com
161.35.127.12	x3	mail.tolaradio.com
161.35.161.126	x3	mail.sandestinlimorentals.com
161.35.224.30	x24	mail.alqahira-academy.com
161.35.228.110	x24	mail.americanteeshirts.com
161.35.228.51	x23	mail.vietbonsai.com
161.35.232.195	x3	mail.diversiforma.com
161.35.39.188	x21	mail.tidewatercollection.com
161.35.43.198	x2	mail.mediasmartphilly.com
161.35.8.215	x22	mail.ulagallaresort.com
161.35.98.42	x1	mail.longislandmenu.com
162.243.174.96	x5	mail.kitevillagebvi.com
165.22.122.107	x3	mail.petbuilds.com
165.227.44.183	x2	mail.greentechnologybvi.com
165.227.92.79	x3	mail.stowlocal.com
167.172.50.246	x2	mail.bingocarioca.com
167.172.60.254	x19	mail.rocagames.com
167.71.110.22	x24	mail.altholaia.com
167.71.131.230	x3	mail.bigcitysiren.com
167.71.179.118	x24	mail.myethconnect.com
167.71.247.43	x25	mail.expresatepanama.com
167.71.250.94	x3	mail.vimyx.com
167.71.86.141	x3	mail.isabemore.com
167.99.134.100	x27	mail.crowdmasterstocks.com
167.99.161.215	x28	mail.die-pr-agentur.com
167.99.178.60	x20	mail.cookbrosomnia.com
167.99.179.209	x27	mail.bedandbreakfastnorfolk.com
167.99.180.125	x2	mail.bvikiteboarding.com
167.99.182.194	x24	mail.steynar.com
167.99.188.194	x27	mail.thewebisart.com
167.99.91.116	x28	mail.ggjmanagement.com
174.138.11.140	x2	mail.3emecline.com
174.138.11.234	x5	mail.supplementscheck.com
174.138.11.29	x6	mail.electricalcontractorwestminster.com
174.138.2.171	x3	mail.trantandat.com
174.138.3.230	x2	mail.eurosalonspa.com
174.138.4.135	x3	mail.hydroxit.com
174.138.4.242	x7	mail.anasfamilydentistry.com
174.138.5.14	x2	mail.estate-agent-in-javea.com
188.166.116.229	x4	mail.besthorrorfilms.com
188.166.125.25	x4	mail.rvprotravelguide.com
188.166.18.105	x1	mail.remucica.com
188.166.25.65	x3	mail.bvisupcup.com
192.81.209.112	x7	mail.proaguacate.com
198.199.67.69	x4	mail.maksgaragedoors.com
198.211.112.206	x7	mail.keonband.com
206.189.119.3	x1	mail.balancingbloodsugar.com
206.189.164.13	x19	mail.wilpattuwanationalpark.com
206.189.198.4	x1	mail.ecomugurukul.com
207.154.205.119	x28	mail.3mcline.com
207.154.212.115	x22	mail.borsamotorstekirdag.com
207.154.247.212	x2	mail.abstractdomains.com
207.154.249.253	x2	mail.otvibes.com
207.154.250.111	x29	mail.bierclip.com
209.97.132.120	x23	mail.integrizo.com
46.101.134.46	x23	mail.moldemi.com
46.101.144.95	x3	mail.gillingham-ryan.com
64.227.41.204	x29	mail.glennraid.com
64.227.45.61	x3	mail.goribi.com
64.227.96.149	x3	mail.cottageusa.com
64.227.96.181	x3	mail.bvikite.com
67.205.166.173	x4	mail.trendmylife.com
68.183.198.230	x4	mail.indotori.com
68.183.198.237	x30	mail.codecuack.com
68.183.200.92	x1	mail.crowdmasterstockmarket.com
68.183.213.103	x2	mail.snappyfi.com

Dec11
134.122.127.1	x15	mail.hydroxit.com
134.209.25.66	x18	mail.erdisdriza.com
134.209.250.91	x17	mail.lexmatprinting.com
134.209.254.111	x15	mail.steynar.com
134.209.254.47	x17	mail.proaguacate.com
134.209.36.208	x3	mail.lumenspeech.com
134.209.42.124	x15	mail.isasermais.com
138.197.174.238	x3	mail.barzantravel.com
138.197.181.218	x2	mail.vincruise.com
138.197.206.155	x6	mail.orthoweave.com
138.197.211.227	x11	mail.crowdmasterstock.com
138.68.238.16	x5	mail.televvun.com
139.59.147.200	x8	mail.mirissasrilanka.com
142.93.150.92	x3	mail.gear24-7.com
142.93.174.45	x14	mail.greentechnologybvi.com
142.93.188.162	x18	mail.prosperitynetworker.com
143.110.174.182	x16	mail.ecomugurukul.com
143.110.238.16	x3	mail.hikkaduwabeach.com
143.110.238.35	x6	mail.czicare.com
157.230.114.128	x14	mail.staffordlawoffices.com
157.230.209.66	x1	mail.regionalplumber.com
157.230.21.155	x1	mail.otavillamechanicalcontractors.com
157.230.215.160	x20	mail.vincruises.com
157.230.223.77	x2	mail.metaspec-sorb.com
157.230.229.85	x5	mail.americanteeshirts.com
157.230.237.112	x15	mail.imediarank.com
157.230.58.101	x3	mail.biomusclegym.com
157.230.85.131	x20	mail.birdandbearbakehouse.com
159.203.183.173	x4	mail.die-pr-agentur.com
159.203.61.33	x4	mail.indotori.com
159.65.192.116	x2	mail.anegadakitevillage.com
159.65.192.40	x20	mail.bedandbreakfastnorfolk.com
159.65.194.157	x13	mail.torcedorfc.com
159.65.194.203	x16	mail.tedbvi.com
159.65.196.150	x15	mail.besthorrorfilms.com
159.65.196.59	x1	mail.weixin288.com
159.65.198.152	x17	mail.keonband.com
159.65.198.60	x20	mail.maksgaragedoors.com
159.65.198.62	x17	mail.connecttopurpose.com
159.65.200.11	x2	mail.crowdmasterexchange.com
159.65.200.3	x20	mail.thedisabilityguysgoshen.com
159.65.200.85	x1	mail.arpadhousing.com
159.65.202.124	x5	mail.instaridellc.com
159.65.202.188	x8	mail.listfor999.com
159.65.202.198	x6	mail.epicnitro.com
159.65.202.205	x2	mail.isabemore.com
159.65.202.236	x4	mail.capquestpacific.com
159.65.202.252	x3	mail.adwingmedia.com
159.65.202.86	x5	mail.santabarbaracampers.com
159.65.204.114	x18	mail.sneakinguplikecelery.com
159.65.204.226	x15	mail.greg-sport.com
159.65.206.130	x17	mail.plxcw.com
159.65.206.189	x17	mail.crowdmasterstocks.com
159.65.206.64	x16	mail.georgetweets.com
159.65.207.120	x1	mail.artfulworldgalleria.com
159.89.132.131	x4	mail.anna-theo.com
159.89.132.241	x3	mail.crowdmasterstockexchange.com
161.35.127.12	x5	mail.tolaradio.com
161.35.13.97	x19	mail.tedxbvi.com
161.35.224.30	x1	mail.alqahira-academy.com
161.35.232.195	x2	mail.diversiforma.com
161.35.234.196	x15	mail.vietbonsai.com
161.35.35.52	x17	mail.grosvenorfire.com
161.35.39.188	x1	mail.tidewatercollection.com
161.35.98.42	x2	mail.longislandmenu.com
164.90.156.172	x16	mail.theleftbrainagency.com
164.90.158.90	x18	mail.remucica.com
165.22.122.107	x1	mail.petbuilds.com
165.22.44.219	x14	mail.glennraid.com
165.227.10.5	x4	mail.tomoxide.com
165.227.38.109	x5	mail.hubsz.com
165.227.44.166	x5	mail.snakoon.com
167.172.132.150	x16	mail.librar-e.com
167.172.134.163	x12	mail.cottageusa.com
167.172.151.46	x17	mail.qattos.com
167.172.157.18	x18	mail.anasfamilydentistry.com
167.172.50.246	x1	mail.bingocarioca.com
167.71.105.228	x14	mail.loveeathome.com
167.71.108.41	x12	mail.wwwsports24bd.com
167.71.140.171	x14	mail.cookbrosomnia.com
167.99.141.152	x4	mail.zeekiebootz.com
167.99.179.185	x17	mail.zurmend.com
167.99.182.96	x13	mail.electricalcontractorwestminster.com
167.99.184.96	x13	mail.realbvikitejam.com
167.99.190.255	x15	mail.wilpattuwanationalpark.com
167.99.244.212	x18	mail.drinktempest.com
167.99.244.61	x17	mail.grandvaluecapital.com
167.99.255.186	x15	mail.hoteltopazkandy.com
167.99.255.85	x16	mail.kodevianstudio.com
167.99.91.116	x2	mail.ggjmanagement.com
174.138.13.145	x3	mail.trendmylife.com
178.128.235.79	x1	mail.anegadakitejam.com
178.128.237.245	x1	mail.ralphtoneal.com
198.211.107.9	x3	mail.virginislandskitejam.com
206.189.113.90	x17	mail.mysupportflow.com
206.189.119.3	x5	mail.balancingbloodsugar.com
206.189.218.159	x12	mail.expresatepanama.com
206.189.220.70	x14	mail.srilankaboutiquehotel.com
207.154.205.119	x1	mail.3mcline.com
207.154.228.224	x16	mail.ikoneek.com
207.154.241.76	x14	mail.llanteraavalos.com
207.154.247.212	x1	mail.abstractdomains.com
207.154.249.253	x3	mail.otvibes.com
209.97.138.123	x19	mail.kiteboardingbvi.com
46.101.220.219	x17	mail.diyadjustabledesk.com
64.227.100.45	x18	mail.integrizo.com
64.227.108.110	x4	mail.otvibez.com
64.227.15.218	x15	mail.thewebisart.com
64.227.22.197	x14	mail.lexcincierge.com
64.227.45.61	x2	mail.goribi.com
67.205.150.248	x5	mail.serviplatiniumrentacar.com
68.183.213.103	x1	mail.snappyfi.com
68.183.33.35	x13	mail.borsamotorstekirdag.com
68.183.54.133	x18	mail.rvprotravelguide.com

Dec12
104.236.12.235	x8	mail.tomoxide.com
104.236.9.125	x4	mail.serviplatiniumrentacar.com
104.236.9.71	x9	mail.santabarbaracampers.com
104.248.37.41	x20	mail.listfor999.com
128.199.51.200	x6	mail.grandvaluecapital.com
134.122.111.240	x12	mail.wilpattuwanationalpark.com
134.122.35.167	x12	mail.greg-sport.com
134.122.41.214	x17	mail.trendmylife.com
134.122.41.252	x16	mail.orthoweave.com
134.122.45.150	x16	mail.nohidigitalpress.com
134.209.123.94	x1	mail.hubsz.com
134.209.163.154	x9	mail.asketc.com
134.209.210.251	x8	mail.bvikite.com
134.209.210.54	x8	mail.discountgiftpens.com
134.209.214.193	x11	mail.ralphtoneal.com
134.209.218.243	x5	mail.petbuilds.com
134.209.222.187	x7	mail.ecomugurukul.com
134.209.222.27	x9	mail.thewebisart.com
134.209.250.91	x6	mail.lexmatprinting.com
134.209.254.111	x4	mail.steynar.com
134.209.254.47	x7	mail.proaguacate.com
134.209.33.97	x12	mail.meditech-solutions.com
134.209.36.208	x9	mail.lumenspeech.com
138.197.159.29	x8	mail.lexcincierge.com
138.197.164.112	x4	mail.altholaia.com
138.197.166.164	x10	mail.loveeathome.com
138.197.181.218	x5	mail.vincruise.com
138.197.211.227	x11	mail.crowdmasterstock.com
138.197.211.250	x14	mail.regionalplumber.com
138.197.218.233	x7	mail.hanahspa.com
138.68.235.119	x6	mail.capquestpacific.com
138.68.238.16	x3	69-171-232-130.mail-mail.facebook.com
138.68.249.154	x8	mail.thebvibeachbar.com
138.68.249.216	x10	mail.plxcw.com
138.68.57.68	x2	mail.sampengplaza.com
142.93.150.92	x7	mail.gear24-7.com
143.110.229.145	x9	mail.raiderbackup.com
143.110.230.127	x10	mail.todido.com
143.110.231.31	x8	mail.eurosalonspa.com
143.110.231.35	x9	mail.bigcitysiren.com
143.110.231.36	x4	mail.kiteboardingbvi.com
143.110.231.37	x9	mail.bedandbreakfastnorfolk.com
143.110.231.38	x11	mail.bvikitevillage.com
143.110.231.62	x3	mail.bvikiters.com
143.110.235.107	x11	mail.virginislandskitejam.com
143.110.235.186	x3	mail.longislandmenu.com
143.110.235.189	x6	mail.sneakinguplikecelery.com
143.110.235.199	x8	mail.supplementscheck.com
143.110.235.213	x8	mail.anna-theo.com
143.110.235.216	x6	mail.crowdmasterstocks.com
143.110.235.217	x6	mail.zurmend.com
143.110.235.220	x12	mail.otvibez.com
143.110.235.221	x7	mail.rocagames.com
143.110.235.224	x8	mail.vanacle.com
143.110.235.226	x4	mail.qattos.com
143.110.235.227	x8	mail.trantandat.com
143.110.237.25	x11	mail.integrizo.com
143.110.238.57	x8	mail.theleftbrainagency.com
157.230.109.234	x13	mail.epicnitro.com
157.230.113.92	x5	mail.bvifm.com
157.230.114.128	x6	mail.staffordlawoffices.com
157.230.185.122	x11	mail.randombn.com
157.230.212.250	x13	mail.greentechnologybvi.com
157.230.215.160	x10	mail.vincruises.com
157.230.216.106	x17	mail.expresatepanama.com
157.230.220.12	x14	mail.maksgaragedoors.com
157.230.223.24	x14	mail.anegadakitevillage.com
157.230.223.77	x6	mail.metaspec-sorb.com
157.230.229.49	x10	mail.ulagallaresort.com
157.230.229.85	x10	mail.americanteeshirts.com
157.230.58.101	x4	mail.biomusclegym.com
157.230.99.190	x11	mail.otavillamechanicalcontractors.com
157.245.138.136	x5	mail.drinktempest.com
157.245.15.216	x14	mail.erdisdriza.com
159.203.18.131	x5	mail.televvun.com
159.203.27.29	x4	mail.die-pr-agentur.com
159.203.35.17	x6	mail.crowdmasterexchange.com
159.65.121.78	x4	mail.librar-e.com
159.65.192.135	x16	mail.birdandbearbakehouse.com
159.65.196.250	x16	mail.electricalcontractorwestminster.com
159.65.196.59	x8	mail.weixin288.com
159.65.200.85	x6	mail.arpadhousing.com
159.65.202.252	x3	mail.adwingmedia.com
159.65.221.237	x15	mail.imediarank.com
159.65.227.93	x7	mail.moldemi.com
159.65.81.30	x13	mail.besthorrorfilms.com
159.89.136.170	x3	mail.torcedorfc.com
159.89.138.86	x8	mail.georgetweets.com
161.35.127.12	x7	mail.tolaradio.com
161.35.160.80	x17	mail.mirissasrilanka.com
161.35.224.30	x8	mail.alqahira-academy.com
161.35.234.196	x9	mail.vietbonsai.com
161.35.43.198	x7	mail.mediasmartphilly.com
161.35.56.110	x15	mail.borsamotorstekirdag.com
162.243.168.90	x9	mail.mysupportflow.com
162.243.174.96	x5	mail.kitevillagebvi.com
165.22.119.74	x17	mail.snakoon.com
165.227.12.139	x7	mail.golizle.com
167.172.157.18	x8	mail.anasfamilydentistry.com
167.172.50.246	x13	mail.bingocarioca.com
167.71.108.41	x4	mail.wwwsports24bd.com
167.71.250.94	x5	mail.vimyx.com
167.99.1.8	x7	mail.hikkaduwabeach.com
167.99.129.145	x14	mail.srilankaboutiquehotel.com
167.99.168.156	x5	mail.portlandbuttler.com
167.99.180.125	x8	mail.bvikiteboarding.com
167.99.182.217	x14	mail.crowdmasterstockexchange.com
167.99.191.8	x5	mail.isasermais.com
167.99.255.186	x9	mail.hoteltopazkandy.com
174.138.11.140	x5	mail.3emecline.com
174.138.11.152	x7	mail.workinjuryanswers.com
174.138.11.170	x4	mail.aepages.com
174.138.12.162	x2	mail.thehauntingathalloween.com
174.138.4.33	x6	mail.kodevianstudio.com
174.138.5.14	x9	mail.estate-agent-in-javea.com
174.138.7.25	x8	mail.stowlocal.com
174.138.8.185	x4	mail.tedxbvi.com
178.128.164.210	x4	mail.tidewatercollection.com
178.128.235.79	x8	mail.anegadakitejam.com
178.128.70.188	x6	mail.connecttopurpose.com
178.128.72.0	x5	mail.instaridellc.com
178.128.72.131	x11	mail.tedbvi.com
188.166.0.88	x5	mail.gillingham-ryan.com
188.166.113.161	x4	mail.proximaedicion.com
188.166.116.6	x5	mail.atomicsolarwatches.com
188.166.126.119	x5	mail.anegadakiteclub.com
188.166.25.65	x5	mail.bvisupcup.com
188.166.71.52	x9	mail.hydroxit.com
188.166.87.160	x7	mail.diversiforma.com
198.199.78.222	x8	mail.aldolga.com
198.211.115.208	x5	mail.cottageusa.com
204.48.24.53	x21	mail.barzantravel.com
206.189.119.3	x12	mail.balancingbloodsugar.com
206.189.205.221	x12	mail.keonband.com
206.189.224.114	x13	mail.czicare.com
206.189.237.123	x15	mail.samphengplaza.com
206.189.48.156	x15	mail.cookbrosomnia.com
206.81.30.70	x18	mail.isabemore.com
207.154.205.119	x11	mail.3mcline.com
207.154.228.224	x1	mail-12.web-hosting.com-159439067244-s-4vcpu-8gb-fra1-01
207.154.241.76	x11	mail.llanteraavalos.com
207.154.247.212	x11	mail.abstractdomains.com
207.154.249.253	x8	mail.otvibes.com
207.154.250.111	x8	mail.bierclip.com
46.101.103.41	x9	mail.grosvenorfire.com
46.101.220.219	x5	mail.diyadjustabledesk.com
64.227.100.189	x14	mail.rvprotravelguide.com
64.227.106.100	x15	mail.remucica.com
64.227.45.61	x8	mail.goribi.com
67.205.134.86	x7	mail.thedisabilityguysgoshen.com
67.205.139.153	x9	mail.indotori.com
67.205.166.26	x7	mail.realbvikitejam.com
67.205.178.147	x7	mail.prosperitynetworker.com
68.183.145.199	x13	mail.artfulworldgalleria.com
68.183.193.37	x17	mail.zeekiebootz.com
68.183.213.103	x9	mail.snappyfi.com
68.183.35.220	x14	mail.ggjmanagement.com
68.183.54.231	x12	mail.myethconnect.com

Dec13
104.131.12.100	x9	mail.librar-e.com
104.236.12.235	x2	mail.tomoxide.com
104.236.9.125	x5	mail.serviplatiniumrentacar.com
104.236.9.71	x3	mail.santabarbaracampers.com
104.248.113.99	x19	mail.bvifm.com
104.248.13.7	x21	mail.longislandmenu.com
104.248.37.41	x8	mail.listfor999.com
128.199.38.94	x4	mail.tolaradio.com
128.199.49.6	x7	mail.capquestpacific.com
134.122.111.240	x12	mail.wilpattuwanationalpark.com
134.122.31.245	x24	mail.thedisabilityguysgoshen.com
134.122.45.150	x5	mail.nohidigitalpress.com
134.122.47.188	x1	mail.diyadjustabledesk.com
134.209.175.197	x2	mail.crowdmasterexchange.com
134.209.25.30	x20	mail.petbuilds.com
134.209.250.91	x9	mail.lexmatprinting.com
134.209.254.111	x4	mail.steynar.com
134.209.33.97	x8	mail.meditech-solutions.com
134.209.36.208	x4	mail.lumenspeech.com
134.209.38.196	x27	mail.sampengplaza.com
138.197.138.141	x7	mail.sneakinguplikecelery.com
138.197.141.148	x10	mail.alqahira-academy.com
138.197.159.29	x2	mail.lexcincierge.com
138.197.162.72	x4	mail.weixin288.com
138.197.181.218	x3	mail.vincruise.com
138.197.211.227	x10	mail.crowdmasterstock.com
138.68.249.154	x6	mail.thebvibeachbar.com
142.93.147.171	x31	mail.vanacle.com
142.93.150.92	x8	mail.gear24-7.com
142.93.152.131	x20	mail.bvikitevillage.com
142.93.99.138	x25	mail.wwwsports24bd.com
143.110.147.252	x29	mail.llanteraavalos.com
143.110.148.217	x11	mail.proaguacate.com
143.110.227.216	x11	mail.americanteeshirts.com
143.110.229.145	x11	mail.raiderbackup.com
143.110.230.127	x5	mail.todido.com
143.110.231.35	x8	mail.bigcitysiren.com
143.110.231.36	x3	mail.kiteboardingbvi.com
143.110.231.37	x6	mail.bedandbreakfastnorfolk.com
143.110.231.57	x6	mail.gillingham-ryan.com
143.110.231.62	x9	mail.bvikiters.com
143.110.233.213	x13	mail.aepages.com
143.110.233.71	x8	mail.drinktempest.com
143.110.235.107	x5	mail.virginislandskitejam.com
143.110.235.213	x3	mail.anna-theo.com
143.110.235.216	x4	mail.crowdmasterstocks.com
143.110.235.220	x7	mail.otvibez.com
143.110.235.221	x5	mail.rocagames.com
143.110.235.226	x10	mail.qattos.com
143.110.235.227	x3	mail.trantandat.com
143.110.236.33	x15	mail.artfulworldgalleria.com
143.110.236.79	x8	mail.discountgiftpens.com
143.110.238.142	x7	mail.asketc.com
143.110.238.52	x8	mail.tedxbvi.com
143.110.238.57	x6	mail.theleftbrainagency.com
157.230.114.128	x5	mail.staffordlawoffices.com
157.230.212.250	x6	mail.greentechnologybvi.com
157.230.215.160	x6	mail.vincruises.com
157.230.223.117	x3	mail.eurosalonspa.com
157.230.223.24	x6	mail.anegadakitevillage.com
157.230.232.155	x13	mail.codecuack.com
157.230.83.149	x4	mail.remucica.com
157.245.15.216	x11	mail.erdisdriza.com
159.203.13.241	x9	mail.trendmylife.com
159.203.18.131	x2	mail.televvun.com
159.203.28.204	x8	mail.crowdmasterstockexchange.com
159.203.9.104	x10	mail.electricalcontractorwestminster.com
159.65.127.173	x5	mail.vimyx.com
159.65.192.196	x21	mail.torcedorfc.com
159.65.194.118	x20	mail.greg-sport.com
159.65.194.247	x20	mail.workinjuryanswers.com
159.65.194.96	x22	mail.biomusclegym.com
159.65.196.212	x21	mail.bvikite.com
159.65.196.226	x23	mail.supplementscheck.com
159.65.196.234	x22	mail.metaspec-sorb.com
159.65.196.236	x23	mail.regionalplumber.com
159.65.198.168	x30	mail.altholaia.com
159.65.198.239	x2	mail.moldemi.com
159.65.204.109	x21	mail.srilankaboutiquehotel.com
159.65.204.126	x29	mail.snakoon.com
159.65.204.147	x22	mail.ikoneek.com
159.65.204.205	x27	mail.tidewatercollection.com
159.65.204.46	x26	mail.plxcw.com
159.89.108.178	x22	mail.stowlocal.com
159.89.147.116	x5	mail.randombn.com
159.89.236.68	x5	mail.maksgaragedoors.com
161.35.108.91	x27	mail.birdandbearbakehouse.com
161.35.160.80	x4	mail.mirissasrilanka.com
161.35.224.185	x20	mail.ulagallaresort.com
161.35.234.196	x7	mail.vietbonsai.com
161.35.56.110	x2	email.electricacademy.in
162.243.174.96	x4	mail.kitevillagebvi.com
165.22.123.15	x26	mail.anegadakitejam.com
165.22.177.93	x22	mail.grandvaluecapital.com
165.227.12.139	x4	mail.golizle.com
165.227.142.9	x16	mail.die-pr-agentur.com
165.227.170.90	x19	mail.connecttopurpose.com
165.227.21.68	x10	mail.imediarank.com
165.227.5.0	x7	mail.instaridellc.com
167.172.149.182	x20	mail.orthoweave.com
167.172.20.156	x29	mail.hikkaduwabeach.com
167.172.50.246	x13	mail.bingocarioca.com
167.172.53.126	x21	mail.hanahspa.com
167.71.129.204	x18	mail.georgetweets.com
167.71.134.130	x30	mail.barzantravel.com
167.99.11.197	x10	mail.besthorrorfilms.com
167.99.168.156	x2	mail.portlandbuttler.com
167.99.180.125	x8	mail.bvikiteboarding.com
167.99.191.8	x1	mail.isasermais.com
167.99.255.186	x6	mail.hoteltopazkandy.com
167.99.84.155	x20	mail.adwingmedia.com
174.138.10.250	x12	mail.ecomugurukul.com
174.138.11.140	x3	mail.3emecline.com
174.138.12.162	x3	mail.thehauntingathalloween.com
174.138.32.167	x21	mail.mysupportflow.com
174.138.5.14	x6	mail.estate-agent-in-javea.com
178.128.12.54	x3	mail.anasfamilydentistry.com
178.128.199.93	x19	mail.borsamotorstekirdag.com
178.128.2.211	x5	mail.ralphtoneal.com
178.128.3.128	x3	mail.czicare.com
178.128.64.243	x22	mail.zurmend.com
178.62.196.118	x8	mail.indotori.com
188.166.113.161	x5	mail.proximaedicion.com
188.166.116.6	x1	mail.atomicsolarwatches.com
188.166.126.119	x1	mail.anegadakiteclub.com
188.166.25.65	x7	mail.bvisupcup.com
188.166.71.52	x3	mail.hydroxit.com
188.166.87.160	x7	mail.diversiforma.com
192.241.148.23	x9	mail.kodevianstudio.com
198.199.78.222	x5	mail.aldolga.com
198.211.115.208	x5	mail.cottageusa.com
206.189.119.3	x5	mail.balancingbloodsugar.com
206.189.19.54	x1	mail.thewebisart.com
206.189.220.167	x16	mail.expresatepanama.com
206.189.237.123	x12	mail.samphengplaza.com
206.189.48.156	x10	mail.cookbrosomnia.com
206.81.12.134	x20	mail.realbvikitejam.com
206.81.27.72	x23	mail.hubsz.com
206.81.30.70	x9	mail.isabemore.com
207.154.205.119	x11	mail.3mcline.com
207.154.247.212	x5	mail.abstractdomains.com
207.154.249.253	x11	mail.otvibes.com
207.154.250.111	x6	mail.bierclip.com
209.97.187.190	x28	mail.arpadhousing.com
46.101.175.87	x13	mail.otavillamechanicalcontractors.com
64.227.100.189	x9	mail.rvprotravelguide.com
64.227.45.61	x5	mail.goribi.com
67.205.167.35	x12	mail.integrizo.com
67.205.178.147	x3	mail.prosperitynetworker.com
68.183.145.66	x18	mail.loveeathome.com
68.183.213.103	x8	mail.snappyfi.com
68.183.54.231	x4	mail.myethconnect.com

Perhaps you’ll notice that the PTR/reverse DNS records of these IPs are no longer there. We aren’t sure whether it is Digital Ocean identifying and shutting down these servers, or if it is the actors performing ‘fly by night’ attacks. ‘Fly by night’ attacks are when Spammers send large volumes of spam within a short time frame, shut off the servers, and move on to the next set of IPs to repeat the process. This way, by the time people deal with and block the IPs sending spam, they are already spamming from a new set of IPs. Even if Digital Ocean is indeed cracking down on these spam servers, their efforts do little to mitigate future occurrences as evident here:

Dec3
206.189.220.121 x37 mail.codecuack.com

Dec5
138.197.174.187 x8 mail.codecuack.com

Dec6
157.230.238.123 x59 mail.codecuack.com

Dec7
157.245.36.222 x6 mail.codecuack.com

Dec8
142.93.180.43 x33 mail.codecuack.com

Dec9
174.138.11.136 x4 mail.codecuack.com

Dec10
68.183.198.237 x30 mail.codecuack.com

Dec13
157.230.232.155 x13 mail.codecuack.com

The same suspicious domain configured in the PTR/reverse DNS record, across multiple Digital Ocean IPs, over a period of 10 days.

And now, a third large spam pattern has emerged from the Digital Ocean network. This time the domains being used are of a more ‘traditional’ spam pattern: new domains with nonsense as the domain name, likely automatically generated through a script or program. From the looks of it the domains were registered about 3 months ago and are now being put to use for spam.

Nov27
134.122.49.191                    1   s7uu47i.com
143.110.225.194                   1   4klnsu.com
   143.110.225.200                2   vbl2m1.com
   143.110.225.241               11   bchkqfe.info
64.225.1.122                      9   2jrolkt.com
64.225.69.0                       2   rt1a1.com
64.227.105.207                   11   h1jak.com 

Dec1
143.110.155.249                   4   94jleqz.com
143.110.157.253                   3   n730y.com
143.110.226.88                   13   vc3glq.com
143.110.230.52                   13   jv687do.com
161.35.234.145                    5   r8far.com
165.227.48.5                      1   sf3.btco4u.com
167.172.25.37                    17   bs3yu.com
167.71.73.211                     3   1zz3l.com
188.166.29.141                    3   tjwvgs.com
68.183.149.21                     3   4wqgn.com

Dec3
143.110.147.71                    4   j1spa.com
143.110.149.99                    3   y2u4yme.com
143.110.226.181                   3   4q464xv.com
   143.110.226.234                5   s0fa9we.com
143.110.234.226                   3   ey3zz.com
143.110.236.151                   2   pw9x9g.com 
167.172.230.157                   3   xpxcyyq.com
167.172.30.136                   12   tcbko.com
167.172.30.32                     3   jt2ah.com
64.225.3.11                      15   cwnvuz.com
   64.225.3.98                   13   kdfgylf.com 

Dec4
104.131.41.83                     7   jiun4r.com
104.248.0.207                     2   lvh7yda.com
143.110.228.142                   2   v1own.com
143.110.230.75                    2   opixyn.com
143.110.234.159                   1   0af6r.com
143.110.238.10                    2   5top87.com
157.245.114.240                   8   wyz4.com
157.245.223.9                     2   lwbrh.com 

Dec7
104.131.127.73                    3   n8zwc.com
104.131.171.245                  15   qeg9.com
104.131.188.202                  15   j8a12q.com
   104.236.0.153                  5   4frgi.com
104.236.0.94                     16   0w9sgg.com
   104.236.4.246                  4   w9eezd.com
104.236.4.41                     15   v1ewl.com
   104.236.4.48                   1   4lxu.com
128.199.0.158                     4   p2jr.com
128.199.7.124                     3   9i1s.com
142.93.69.151                    10   yqms8.com
143.110.148.67                    5   au1dccj.com
   143.110.153.193                1   wr5a5.com
143.110.153.86                    4   ndc964s.com
143.110.226.219                   1   cv3cdb.com
143.110.227.146                   5   owb4.com
   143.110.229.101                4   jstxg6.com
   143.110.229.193                4   7isz12.com
   143.110.229.247                6   ognm8.com
143.110.229.40                    7   oo0kyto.com
   143.110.229.69                 3   msf42n1.com
143.110.230.82                    4   7m1amo.com
157.245.113.232                   1   gbbdk4c.com
157.245.216.134                  17   ch0yf.com
157.245.217.75                    4   ofm3h.com
161.35.228.159                    1   qmrtzv7.com
161.35.235.11                     1   ek3e0.com
167.172.21.162                    3   kr3uu.com
167.71.110.50                     2   ofn5o08.com

Dec8
128.199.10.141                    4   poh5a.com
   128.199.10.249                 6   csqnsf.com
128.199.4.11                      3   gg61z.com
143.110.148.15                    4   wt3nk.com
   143.110.158.123                3   p75ru.com
164.90.155.142                    3   svprx30.com
165.22.60.127                     1   tha88.net
167.172.227.238                  11   97noqgt.com
167.172.239.110                   2   n6sg3.com
167.71.181.206                   18   6pxdyj.com 

Dec9
104.131.35.99                     3   xk6siw.com
104.131.7.213                    16   2q86xo.com
128.199.2.76                      3   oue2mi.com
143.110.148.155                   2   h9y4vg.com
143.110.230.116                   3   y87aqr.com
161.35.239.9                      6   b6drnjz.com
164.90.144.38                     7   c3hiw.com
164.90.148.161                    5   q1qci.com

Dec10
104.131.3.237                     4   0eux9r1.com
104.131.53.192                   17   g93eqo.com
104.236.6.221                    16   puvyczo.com
143.110.147.209                   5   g3yd8.com
143.110.156.4                     4   vlu7gt.com
143.110.226.195                   5   q3ec1.com
143.110.230.7                     5   hvti0zs.com
143.110.234.124                   3   i3ll3d.com 

Dec11
104.131.174.242                  15   jj0da9.com
104.131.175.91                    5   96faa3t.com
128.199.0.61                      4   i3q71go.com
128.199.13.3                      8   b1fgtdi.com
128.199.4.24                      6   bxhot2.com
   164.90.151.176                 2   u7c5m.com
167.172.236.137                  13   o7vaev.com 

This entry was posted in Informative and tagged , , , , , , , , , . Bookmark the permalink.

Leave a Reply