Near: Columbus, Ohio, United States
IP Lookup Details:
IP Information - 195.83.90.100
Host name: smtp-slow-1-a.ac-orleans-tours.fr
Country: France
Country Code: FR
Region: A3
City: Sandillon
Latitude: 47.8451
Longitude: 2.0316
Whois information
CIDR: 195.0.0.0/8
NetName: RIPE-CBLK3
NetHandle: NET-195-0-0-0-1
Parent: ()
NetType: Allocated to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 1996-03-25
Updated: 2009-03-25
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
Ref: https://rdap.arin.net/registry/ip/195.0.0.0
ResourceLink: https://apps.db.ripe.net/search/query.html
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois://whois.ripe.net
ResourceLink: https://apps.db.ripe.net/search/query.html
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
RTechHandle: RIPE-NCC-ARIN
RTechName: RIPE NCC Hostmaster
RTechPhone: +31 20 535 4444
RTechEmail: search-ripe-ncc-not-arin@ripe.net
RTechRef: https://rdap.arin.net/registry/entity/RIPE-NCC-ARIN
Recu mail escroc usurpant une boite mail de l'EDUCATION NAtionale, mail aux faux loyers impayés et titré : Vérification quitance - Retard loyer Mars Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP, comptes et boites mails ! Boites mails @assistance-immobilier.com gérées par : https://www.ionos.fr/ Samedi 30 Mars 2024 après 11h32 j’ai reçu ce mail escroc ci-dessous venant l’adresse mail usurpée à l’EDUCATION Nationale : GVincent@ac-orleans-tours.fr Mais vraie adresse mail gérée par GMAIL, pour répondre aux hackers : Reply-To : contact@assistance-immobilier.com Boites mails gérées par : https://www.ionos.fr/ Et utilisant les adresses IP : 195.83.90.100 et 192.168.68.13 Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) Received : from imsva-smtp-2.ac-orleans-tours.fr (imsva-smtp-2.in.ac-orleans-tours.fr [192.168.68.13]) by smtp-slow-1.ac-orleans-tours.fr (Postfix) with ESMTP id B1F76109074A for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) ********************** Code HTML des hackers ************************ Return-Path : <GVincent@ac-orleans-tours.fr> Received : from mlpnf0117.laposte.net (mlpnf0117.sys.meshcore.net [10.94.128.96]) by mlpnb0108 with LMTPA; Sat, 30 Mar 2024 11:32:34 +0100 X-Cyrus-Session-Id : cyrus-198037-1711794754-1-9179340722842337918 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=1; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1711794754; cv=none; b=dLK5ldOPwaaU1RSyC9FXZW9M/bUJ8+9VqitMzqwEKRmgQXvVon7N7S7td6fzQb3LqISImJs9nmo UqRIZ7eiuiluxFXp2b431m3YrP5vNtxJqkU9gBX0Xf9a3pZJCKt9CJfyed3cxI9o/y2tSCqocVAs QimAEuUyCUGrV8nyvEqLSEXvMLpXCQLipNk47g5KTeE6/PSbLBqrRdHT4Kx6+I+efj50Pj+q8WMr FAtlaTV19FcWbPmN4G0qjxVinPUVRlgsG2IGwSfnclfO5paDUVPjv1Bp9f9N62goiPBcpqoEfGnt YO2t5oq9/PU6Y9JC5Gvv+xSB9JLPUuZvn9grBkA== ARC-Message-Signature : i=1; a=rsa-sha256; c=relaxed/relaxed; d=laposte.net; s=lpn-wlmd; t=1711794754; h=DKIM-Signature:Reply-To:From:To:Subject:Date; bh= GvqVkR4poh8IGFs5P8HkW/DNkahrH9A5jd34AQQd/ZU=; b=YUbxhP6Tmh3oM0aNN8/PmOd9TYcU E8ZEnSFWAOmD8b/QkvptMdWIabV6uY4u4YD3aB3v9lONWD0VoAdKH0qu2eCQ+ZhLFXguNxQzNchL a5FYYHv2d5No7YCcEOnkNc/RoBaWyyxi1lc2cdkkANIkF4Um4WYpBgIySifrHKCvfCW4bRiEAfE3 Af3XNIYZHf+poOlHQ5g9LynM/xqSXISD0rnHWrjJxsCuGL+rToyysG5YwvrDQTukHf1HM7matChb 229Pq0znOwB3SHhTQPVfPKd/X2Y3/N1fyQ4N5PtnlXexA+y1/i6VFp/lj33DQCcVmc5vWui0y1zR 7JocJqePzw== ARC-Authentication-Results : i=1; laposte.net; spf=pass smtp.helo=smtp-slow-1.ac-orleans-tours.fr smtp.mailfrom=GVincent@ac-orleans-tours.fr; dkim=pass reason="good signature" header.b=AiaxAd header.d=ac-orleans-tours.fr header.s=dkim1; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6vFRzDq67","contextId": "2814b133-3665-44bf-b4b9-4163700812da"} X-ppbforward : {"queueID":"4V6D9s6vFRzDq67","server":"mlpnf0117"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0117.laposte.net (SMTP Server) with ESMTP id 4V6D9s6vFRzDq67 for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6JBQzDq5w","contextId": "cb4d9b81-d887-4316-988d-8ed3324a0323"} X-lpn-mailing : LEGIT X-lpn-spamrating : 40 X-lpn-spamlevel : not-spam Authentication-Results : laposte.net; spf=pass smtp.mailfrom=GVincent@ac-orleans-tours.fr smtp.helo=smtp-slow-1.ac-orleans-tours.fr; dkim=pass reason="good signature" header.d=ac-orleans-tours.fr header.s=dkim1 header.b=AiaxAd; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-lpn-spamcause : OK, (0)(0000)gggruggvucftvghtrhhoucdtuddrgedvledruddvgedgudejucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecunfetrffquffvgfdpggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucenucfjughrpehtrhfhvffufffkgggtoffnkgfqsegrtdejpeeftdejnecuhfhrohhmpefivghsthhiohhnucfnohgtrghtihhvvgcuqdcukffooffquccuoefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrheqnecuggftrfgrthhtvghrnhepjeeggeefkeevheffgfeugfegvdduvdeuuefhteevudffgfejgfektdevjefgheelnecukfhppeduleehrdekfedrledtrddutddtpdejjedrudeguddrkeehrdduleefnecuvehluhhsthgvrhfuihiivgepuddtnecurfgrrhgrmhepihhnvghtpeduleehrdekfedrledtrddutddtpdhhvghlohepshhmthhpqdhslhhofidquddrrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpmhgrihhlfhhrohhmpefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopegvlhgvrdhlvghmohhinhgvsehlrghpohhsthgvrdhnvghtpdhsphhfpehprghsshdpughkihhmpehprghsshdpughmrghrtgepphgrshhspdhrvghvkffrpehsmhhtphdqshhlohifqdduqdgrrdgrtgdqohhrlhgvrghnshdqthhouhhrshdrfhhrpdhgvghokffr pefhtf Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w
