Tag Archives: tld

Trends in Networks: Spam #5

Posted on September 11, 2020 by Thomas

Weekly dump of Digital Ocean abuse using Freenom (and .xyz) domains. Sep5 134.122.112.139 x1 kota.paypak.xyz 138.68.110.2 x3 srv0.mails19.ga 138.68.87.194 x4 srv0.mails19.ml 138.68.96.83 x1 srv0.mails19.cf 159.65.232.195 x2 bundi.paypax.xyz 161.35.14.115 x2 srv0.mails18.cf 46.101.163.120 x2 srv0.mails18.gq 64.225.10.63 x1 srv0.mails19.tk Sep6 134.122.125.156 x2 srv0.mails19.gq … Continue reading →

Posted in Informative | Tagged , , , , , , , , | Leave a comment

Trends in Networks: Spam #4

Posted on September 4, 2020 by Thomas

Another week of Digital Ocean abuse using Freenom domains… I don’t want to assume they are all bad, but I have yet to see a ‘legit’ domain. Aug28 134.122.81.184 x1 srv0.mails13.ml 142.93.96.187 x1 srv0.mails13.ga 161.35.112.82 x1 der005-fv03.powerdealers.xyz 164.90.237.213 x4 srv0.mails13.tk … Continue reading →

Posted in Informative | Tagged , , , , , , , , | Leave a comment

Trends in Networks: Spam #3

Posted on August 27, 2020 by Thomas

Just a quick data dump today, not much to say. The activity continues, and people continue to get spammed by the Digital Ocean network with the exact same patterns. If anyone is interested in other data points related to this … Continue reading →

Posted in Informative | Tagged , , , , , , , , | Leave a comment

Trends in Networks: Spam #2

Posted on August 20, 2020 by Thomas

In last week’s article we covered Freenom domains and how they are used in Digital Ocean snowshoe spam campaigns. Let’s see what kind of activity has been coming from Digital Ocean over the past week. While not a Freenom TLD, … Continue reading →

Posted in Informative | Tagged , , , , , , , , , , , , | Leave a comment