NOQUEUE - IP: 93.99.104.2 - Mar 6 09:48:29 plesk postfix/smtpd[2122525]: NOQUEUE: reject: RCPT from ...
show moreNOQUEUE - IP: 93.99.104.2 - Mar 6 09:48:29 plesk postfix/smtpd[2122525]: NOQUEUE: reject: RCPT from 2.104.99.93.finalhosting.cz[93.99.104.2]: 554 5.7.1 Service unavailable; Client host [93.99.104.2] blocked using dnsbl-1.uceprotect.net; IP 93.99.104.2 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=93.99.104.2; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<elara.servermonday.click>
show less
NOQUEUE - IP: 93.99.104.2 - Feb 28 21:46:26 plesk postfix/smtpd[29504]: NOQUEUE: reject: RCPT from ...
show moreNOQUEUE - IP: 93.99.104.2 - Feb 28 21:46:26 plesk postfix/smtpd[29504]: NOQUEUE: reject: RCPT from 2.104.99.93.finalhosting.cz[93.99.104.2]: 554 5.7.1 Service unavailable; Client host [93.99.104.2] blocked using dnsbl-2.uceprotect.net; NET 93.99.104.0/24 is UCEPROTECT-Level2 listed because 4 impacts are seen from VODAFONE-CZ-AS, CZ/AS16019 there. See: http://www.uceprotect.net/rblcheck.php?ipr=93.99.104.2; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<tampa.winora.store>
show less
This IP is actively sending spam tied to an ongoing Pfcloud/Jellyfish campaign.
Observed sending u ...
show moreThis IP is actively sending spam tied to an ongoing Pfcloud/Jellyfish campaign.
Observed sending unsolicited email promoting fake health remedies ("Japanese Moon Elixir" / thyroid cure).
Domain: biowave.sa.com, DKIM/SPF/DMARC all pass.
Messages include tracking pixels and multiple click-through links hosted on biowave.sa.com.
Relay path via asp-relay-pe.jellyfish.systems (162.255.118.7).
Part of a persistent spam/phishing operation.
show less