On Wed 31/May/2023 00:13:38 +0200 Michael Peddemors via mailop wrote:
18.156.43.163 (M) 1 guardpost-n08.euc1.mailgun.co
18.157.58.83 (M) 1 guardpost-n07.euc1.mailgun.co
18.157.75.126 (M) 1 guardpost-n01.euc1.mailgun.co
18.158.176.19 (M) 1 guardpost-n02.euc1.mailgun.co
18.197.223.145 (M) 1 guardpost-n05.euc1.mailgun.co
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: ab...@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited
https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: REDACTED FOR PRIVACY
whois on the IP?
18.156.0.0/14 AMAZO-ZFRA
Organization: A100 ROW GmbH (RG-123)
The difference between names and numbers is amazing:
At https://rdap.arin.net/registry/ip/18.156.0.0
among other things you find:
registrant:
A100 ROW GmbH
Marcel-Breuer-Strasse 10\nMunchen\n\n80807\nGermany
abuse:
Amazon EC2 Abuse
ab...@amazonaws.com
+1-206-555-0000
Abuse of Amazon Web Services
The activity you have detected originates from a dynamic hosting environment.
For fastest response, please submit abuse reports via the AWS webform:
https://repost.aws/knowledge-center/report-aws-abuse
If your company system is configured to automatically send abuse reports,
please send them to ab...@amazonaws.com including:
* src IP
* dest IP (your IP)
* dest port
* Accurate date/timestamp and timezone of activity
* Intensity/frequency (short log extracts)
* Your contact details (phone and email)
technical:
Amazon EC2 Network Operations
amzn-noc-cont...@amazon.com
noc:
Amazon AWS Network Operations
amzn-noc-cont...@amazon.com
+1-206-555-0000
administrative:
IP Management
ipmanagem...@amazon.com
+1-703-464-1336
Best
Ale
--
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
