API tools faq
paste
Advertisement
Guest User

2018-01-18 - Necurs Botnet malspam examples

a guest
Jan 18th, 2018
1,798
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.89 KB | None | 0 0
raw download clone embed print report
  1. EMAIL EXAMPLES FROM THE NECURS BOTNET - THURSDAY 2018-01-18:
  2.  
  3. Read: Date/Time Received: from Sending address (spoofed) Subject email address in message text
  4.  
  5. 2018-01-18 06:28 UTC host-201-183-224-150.ecutel.net ([201.183.224.150]) Ksenia <Ksenia78@host-201-183-224-150.ecutel.net> hi vanesagbmaria@rambler.ru
  6. 2018-01-18 06:50 UTC [45.246.99.1] ([45.246.34.246]) marina <marina03@caisilweldon.com> hi route325@rambler.ru
  7. 2018-01-18 06:50 UTC abts-north-dynamic-069.8.162.122.airtelbroadband.in ([122.162.8.69]) Alexandra <Alexandra12@airtelbroadband.in> hi viktoriebu0@rambler.ru
  8. 2018-01-18 06:51 UTC [39.55.48.148] ([39.55.48.148]) Olga <Olga29@tnegroupinc.com> hi gabrielake0i@rambler.ru
  9. 2018-01-18 07:11 UTC [195.24.223.208] ([195.24.223.208]) Anna <Anna9076@perfectflaw.ca> hi nikol04omonika@rambler.ru
  10. 2018-01-18 07:13 UTC 162-199-154-197.lightspeed.okcbok.sbcglobal.net ([162.199.154.197]) Sonya <Sonya03@consultoriafalcao.com.br> hi nikolai4k@rambler.ru
  11. 2018-01-18 07:13 UTC host169-114-static.10-79-b.business.telecomitalia.it ([79.10.114.169]) Yulia <Yulia5303@business.telecomitalia.it> hi lucietmsabine@rambler.ru
  12. 2018-01-18 07:13 UTC 162-199-154-197.lightspeed.okcbok.sbcglobal.net ([162.199.154.197]) Sonya <Sonya03@consultoriafalcao.com.br> hi nikolai4k@rambler.ru
  13. 2018-01-18 07:31 UTC 197-248-152-218.safaricombusiness.co.ke ([197.248.152.218]) Anya <Anya60242@safaricombusiness.co.ke> hi michaelahaptg@rambler.ru
  14. 2018-01-18 07:57 UTC [116.108.149.200] ([116.108.149.200]) Yulia <Yulia60058@tity.net> hi hanafotelf@rambler.ru
  15. 2018-01-18 08:14 UTC cpc114908-seve28-2-0-cust93.13-3.cable.virginm.net ([82.10.208.94]) Olga <Olga912@yourhomepagenow.com> hi mgiselamd7q@rambler.ru
  16. 2018-01-18 08:15 UTC [42.114.38.210] ([42.114.38.210]) Tatiana <Tatiana8138@sfftt.com> hi denisabaru4@rambler.ru
  17. 2018-01-18 08:37 UTC [42.110.137.220] ([42.110.137.220]) Anastasia <Anastasia34276@bereplenished.com> hi ellairxt6t@rambler.ru
  18. 2018-01-18 08:59 UTC [14.169.122.111] ([14.169.122.111]) Natasha <Natasha1347@ajleonard.com> hi nikol04omonika@rambler.ru
  19. 2018-01-18 09:41 UTC abts-tn-dynamic-118.137.164.122.airtelbroadband.in ([122.164.137.118]) Veronika <Veronika214@airtelbroadband.in> hi annaheikeay@rambler.ru
  20. 2018-01-18 10:03 UTC 93-55-173-30.ip264.fastwebnet.it ([93.55.173.30]) Masha <Masha19@culturafashion.com> hi simonamonikat3c@rambler.ru
  21. 2018-01-18 10:16 UTC static.vnpt.vn ([113.185.25.255]) Helen <Helen45@static.vnpt.vn> hi mariectff@rambler.ru
  22. 2018-01-18 10:20 UTC static.vnpt-hanoi.com.vn ([123.25.21.147]) Natalia <Natalia6774@vnpt-hanoi.com.vn> hi anetabirgit5af@rambler.ru
  23. 2018-01-18 10:42 UTC [171.229.210.5] ([171.229.210.5]) Natasha <Natasha4934@bushmhn.screaming.net> hi mariesandran7@rambler.ru
  24. 2018-01-18 10:57 UTC malbork-zsp3-0.elblag.dialog.net.pl ([78.9.126.202]) Maria <Maria288@dialog.net.pl> hi baringridagho@rambler.ru
  25. 2018-01-18 11:16 UTC DELL-Inspiron ([101.221.102.149]) Natasha <Natasha2639@psychologische-praxis-giessen.de> hi gabrielaekwchr@rambler.ru
  26. 2018-01-18 11:18 UTC [103.253.155.118] ([103.253.155.118]) Victoria <Victoria4727@ablit.com> hi anetaingepj@rambler.ru
  27. 2018-01-18 11:52 UTC mail.emeditek.com ([14.102.111.34]) marina <marina00@mail.emeditek.com> hi vanesaruthzp@rambler.ru
  28. 2018-01-18 11:53 UTC [91.92.230.62] ([91.92.230.62]) Daria <Daria2962@pawtucketgop.org> hi lucie1ommhelga@rambler.ru
  29. 2018-01-18 11:56 UTC 93-61-37-243.ip144.fastwebnet.it ([93.61.37.243]) Anastasia <Anastasia646@smt-e.ru> hi route325@rambler.ru
  30. 2018-01-18 12:09 UTC abts-north-dynamic-94.31.79.171.airtelbroadband.in ([171.48.50.7]) Anastasiya <Anastasiya47@airtelbroadband.in> hi anetaerika8v8@rambler.ru
  31. 2018-01-18 12:13 UTC host-151-250-57-177.reverse.superonline.net ([151.250.57.177]) Darya <Darya090@superonline.net> hi vanesarenate0qq4@rambler.ru
  32. 2018-01-18 12:15 UTC [1.52.1.124] ([1.52.1.124]) Valeria <Valeria83@lrob.worldonline.co.uk> hi eleninge51r@rambler.ru
  33. 2018-01-18 12:33 UTC static.vnpt.vn ([113.168.214.95]) Elena <Elena588@static.vnpt.vn> hi julieulrikediei@rambler.ru
  34. 2018-01-18 12:34 UTC 89-79-208-100.dynamic.chello.pl ([89.79.208.100]) Irina <Irina5461@chello.pl> hi nelachr1zkx@rambler.ru
  35.  
  36. EMAIL EXAMPLE:
  37.  
  38. Received: from static.vnpt.vn ([113.185.25.255]) by [removed] for [removed];
  39. Thu, 18 Jan 2018 10:16:41 +0000 (UTC)
  40. Received: fby mail.static.vnpt.vn (Postfix, from userid 868) id 97709D2AA13;
  41. Thu, 18 Jan 2018 17:16:40 +0700
  42. Date: Thu, 18 Jan 2018 17:16:41 +0700
  43. MIME-Version: 1.0
  44. X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer)
  45. Content-Transfer-Encoding: 8bit
  46. Subject: hi
  47. X-PHP-Originating-Script: 868:class-phpmailer.php
  48. Message-ID: <a443a779ef0e19cac67f8c04fa433b98@static.vnpt.vn>
  49. From: Helen <Helen45@static.vnpt.vn>
  50. Content-type: text/html; charset=utf-8
  51. To: [removed]
  52.  
  53. You seem like my type and I would like to know you more!
  54. Write me if you are interested, here is my email mariectff@rambler.ru and, if you want, I will send some of my photos.
  55.  
  56. Hugs,
  57. Helen
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!