-
Recent Entries
Monthly Archives
- October 2021
- September 2021
- August 2021
- March 2021
- February 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- April 2020
- February 2020
- December 2019
- April 2019
- February 2019
- January 2019
- October 2018
- July 2018
- June 2018
- April 2018
- February 2018
- December 2017
- July 2017
- May 2017
- February 2017
- January 2017
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- June 2016
- April 2016
- March 2016
- February 2016
- December 2015
- October 2015
- September 2015
- August 2015
- July 2015
- June 2015
- December 2014
- November 2014
- September 2014
- August 2014
- July 2014
- May 2014
Tag Archives: Snowshoe spam
Trends in Networks: Spam #6
Picking up where we left off, more spam coming from the Digital Ocean network with freenom and xyz TLDs in the PTR/reverse DNS record. Sep12 157.245.94.185 x1 mail.opoczanie.xyz 161.35.230.193 x1 server.healthdocs.xyz 164.90.228.251 x1 srv0.mails27.gq 164.90.233.88 x3 srv0.mails27.cf 165.22.74.145 x3 srv0.mails28.tk … Continue reading
Posted in Informative
Tagged digital ocean, domain, freenom, freenom tld, Snowshoe spam, spam, spammer, top level domain
Leave a comment
Trends in Networks: Spam #5
Weekly dump of Digital Ocean abuse using Freenom (and .xyz) domains. Sep5 134.122.112.139 x1 kota.paypak.xyz 138.68.110.2 x3 srv0.mails19.ga 138.68.87.194 x4 srv0.mails19.ml 138.68.96.83 x1 srv0.mails19.cf 159.65.232.195 x2 bundi.paypax.xyz 161.35.14.115 x2 srv0.mails18.cf 46.101.163.120 x2 srv0.mails18.gq 64.225.10.63 x1 srv0.mails19.tk Sep6 134.122.125.156 x2 srv0.mails19.gq … Continue reading
Posted in Informative
Tagged digital ocean, domain, freenom, freenom tld, Snowshoe spam, spam, spammer, tld, top level domain
Leave a comment
Trends in Networks: Spam #4
Another week of Digital Ocean abuse using Freenom domains… I don’t want to assume they are all bad, but I have yet to see a ‘legit’ domain. Aug28 134.122.81.184 x1 srv0.mails13.ml 142.93.96.187 x1 srv0.mails13.ga 161.35.112.82 x1 der005-fv03.powerdealers.xyz 164.90.237.213 x4 srv0.mails13.tk … Continue reading
Posted in Informative
Tagged digital ocean, domain, freenom, freenom tld, Snowshoe spam, spam, spammer, tld, top level domain
Leave a comment
Trends in Networks: Spam #3
Just a quick data dump today, not much to say. The activity continues, and people continue to get spammed by the Digital Ocean network with the exact same patterns. If anyone is interested in other data points related to this … Continue reading
Posted in Informative
Tagged digital ocean, domain, freenom, freenom tld, Snowshoe spam, spam, spammer, tld, top level domain
Leave a comment
Trends in Networks: Spam #2
In last week’s article we covered Freenom domains and how they are used in Digital Ocean snowshoe spam campaigns. Let’s see what kind of activity has been coming from Digital Ocean over the past week. While not a Freenom TLD, … Continue reading
Posted in Informative
Tagged AgentTesla, digital ocean, domain, freenom, freenom tld, keylogger, malware, RAT, Snowshoe spam, spam, spammer, tld, top level domain
Leave a comment
Trends in Networks: Spam #1
This is the beginning of a recurring article where I’ll be reviewing patterns in spam activity. I’ll start with something easily overlooked but surprisingly still prevalent in the spam landscape. Freenom TLDs (Top Level Domains) Freenom is a service that … Continue reading
Posted in Informative
Tagged digital ocean, domain, email, freenom, freenom tld, ptr, reverse DNS, Snowshoe spam, spam, spammer
Leave a comment
Looks like Xmas Vacation is over for the Spammers
On Monday, January 14 2019, we saw a sudden spike in spam of the Emotet and Snowshoe Marketing variety from our detection tools. Here is our data from the Monday and 30 days prior. It shows that Emotet has been … Continue reading
Posted in Informative
Tagged Emotet, malspam, Russian Christmas, Snowshoe spam, spam
Leave a comment