Possible bad actor.

Very cozy place

Lokeshn

Lokeshn

27.124.43.87

Rather valuable answer

synergieb2b.com - spam Return-Path: <news@cont.synergieb2b.com> X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on de3631.ispfr.net X-Spam-Level: X-Spam-Status: No, score=-100.1 required=1.0 tests=BAYES_20,DATE_IN_PAST_12_24, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST, HTML_MESSAGE,MAILING_LIST_MULTI,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE, SPF_PASS,T_SCC_BODY_TEXT_LINE,USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.4 X-Original-To: contact@saga8mm.com Delivered-To: contact-saga8mm.com@saga8mm.com Received: from mta1.cont.synergieb2b.com (mta1.cont.synergieb2b.com [163.172.248.203]) by saga8mm.com (Postfix) with ESMTPS id 446D093FF5 for <contact@saga8mm.com>; Wed, 6 Mar 2024 03:58:29 +0100 (CET) Authentication-Results: saga8mm.com; dkim=pass (2048-bit key; unprotected) header.d=cont.synergieb2b.com header.i=@cont.synergieb2b.com header.a=rsa-sha256 header.s=default header.b=DHXTn8WT; dkim-atps=neutral DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cont.synergieb2b.com; q=dns/txt; s=default; bh=fcEsMpGvxBAHBP8FRLO3r0EF+JzmqdmU+lDYpDLzKLo=; h=from:reply-to:subject:date:message-id:to:mime-version:content-type:list-id:list-unsubscribe:list-unsubscribe-post:feedback-id; b=DHXTn8WT/RgyQ8Vhfi01u4DPihXlzzBmW24dTcZkoDpWJJw2NGciQHLtzjk44i+i6O00dErCE PMW5Eeg8/69kyoB1AMi+HEFhPd1Vwh+LPqzDhG47Eejcl+kZgn8FqNSztKzlkIHDwlTCrc7Fm3g mlzmisrNrOmTWkCirb3xUbmNsiQaVJqQl/uDGpC0QIlVVYn54KGV07RnsSmVUneBmMMb7j5Trw7 nOb7c5NivbcMNS/71EHoBtL8fe64/O0LjJEqHzl90Ij6q7fOS4EZPJSch9eHSa6grEkzn4mn/H9 H20fS0yx+VvHQXzH0/ur3558VFYCfMJgzJzXHAxq48ag== Date: Tue, 5 Mar 2024 04:45:06 +0100 To: contact@saga8mm.com From: Land Rover <news@cont.synergieb2b.com> Reply-To: "desinscription@managedesinsc.com" <desinscription@managedesinsc.com> Subject: Découvrez le nouveau Land Rover Velar hybride ! Message-ID: <ByFwDQg7E4R21oLb5zotHkFjMzVyiFgbnSfHxjWeUho@cont.synergieb2b.com> X-Mailer: mailXpertise X-Account: 2513 X-Campaign: 124059 X-List: 838218 X-Unique: 703 X-Mode: 1 List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: <mailto:abuse@cont.synergieb2b.com?subject=eyJ1IjoiNzAzIiwiYSI6IjI1MTMiLCJjIjoiMTI0MDU5In0=>, <https://cont.synergieb2b.com/YSUzRDI1MTMlMjZjJTNEMTI0MDU5JTI2ZSUzRDcwMyUyNmVtJTNEY29udGFjdCU0MHNhZ2E4bW0uY29tJTI2dCUzRGMlMjZsJTNEMTAyMjA0NSUyNmYlM0Qy> List-Id: <cont.synergieb2b.com.2513-838218.mxp> X-Abuse: abuse@mailxpertise.com X-Report-Abuse: Please report abuse here: abuse@mailxpertise.com X-Auto-Response-Suppress: OOF,AutoReply Precedence: bulk Feedback-ID: 124059:2513:703:Mailxpertise MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1=_ByFwDQg7E4R21oLb5zotHkFjMzVyiFgbnSfHxjWeUho"

209.85.214.175

209.85.214.175

142.250.200.196

Good.حيد.

Recu mail escroc usurpant une boite mail de l'EDUCATION NAtionale, mail aux faux loyers impayés et titré : Vérification quitance - Retard loyer Mars Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP, comptes et boites mails ! Boites mails @assistance-immobilier.com gérées par : https://www.ionos.fr/ Samedi 30 Mars 2024 après 11h32 j’ai reçu ce mail escroc ci-dessous venant l’adresse mail usurpée à l’EDUCATION Nationale : GVincent@ac-orleans-tours.fr Mais vraie adresse mail gérée par GMAIL, pour répondre aux hackers : Reply-To : contact@assistance-immobilier.com Boites mails gérées par : https://www.ionos.fr/ Et utilisant les adresses IP : 195.83.90.100 et 192.168.68.13 Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) Received : from imsva-smtp-2.ac-orleans-tours.fr (imsva-smtp-2.in.ac-orleans-tours.fr [192.168.68.13]) by smtp-slow-1.ac-orleans-tours.fr (Postfix) with ESMTP id B1F76109074A for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) ********************** Code HTML des hackers ************************ Return-Path : <GVincent@ac-orleans-tours.fr> Received : from mlpnf0117.laposte.net (mlpnf0117.sys.meshcore.net [10.94.128.96]) by mlpnb0108 with LMTPA; Sat, 30 Mar 2024 11:32:34 +0100 X-Cyrus-Session-Id : cyrus-198037-1711794754-1-9179340722842337918 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=1; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1711794754; cv=none; b=dLK5ldOPwaaU1RSyC9FXZW9M/bUJ8+9VqitMzqwEKRmgQXvVon7N7S7td6fzQb3LqISImJs9nmo UqRIZ7eiuiluxFXp2b431m3YrP5vNtxJqkU9gBX0Xf9a3pZJCKt9CJfyed3cxI9o/y2tSCqocVAs QimAEuUyCUGrV8nyvEqLSEXvMLpXCQLipNk47g5KTeE6/PSbLBqrRdHT4Kx6+I+efj50Pj+q8WMr FAtlaTV19FcWbPmN4G0qjxVinPUVRlgsG2IGwSfnclfO5paDUVPjv1Bp9f9N62goiPBcpqoEfGnt YO2t5oq9/PU6Y9JC5Gvv+xSB9JLPUuZvn9grBkA== ARC-Message-Signature : i=1; a=rsa-sha256; c=relaxed/relaxed; d=laposte.net; s=lpn-wlmd; t=1711794754; h=DKIM-Signature:Reply-To:From:To:Subject:Date; bh= GvqVkR4poh8IGFs5P8HkW/DNkahrH9A5jd34AQQd/ZU=; b=YUbxhP6Tmh3oM0aNN8/PmOd9TYcU E8ZEnSFWAOmD8b/QkvptMdWIabV6uY4u4YD3aB3v9lONWD0VoAdKH0qu2eCQ+ZhLFXguNxQzNchL a5FYYHv2d5No7YCcEOnkNc/RoBaWyyxi1lc2cdkkANIkF4Um4WYpBgIySifrHKCvfCW4bRiEAfE3 Af3XNIYZHf+poOlHQ5g9LynM/xqSXISD0rnHWrjJxsCuGL+rToyysG5YwvrDQTukHf1HM7matChb 229Pq0znOwB3SHhTQPVfPKd/X2Y3/N1fyQ4N5PtnlXexA+y1/i6VFp/lj33DQCcVmc5vWui0y1zR 7JocJqePzw== ARC-Authentication-Results : i=1; laposte.net; spf=pass smtp.helo=smtp-slow-1.ac-orleans-tours.fr smtp.mailfrom=GVincent@ac-orleans-tours.fr; dkim=pass reason="good signature" header.b=AiaxAd header.d=ac-orleans-tours.fr header.s=dkim1; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6vFRzDq67","contextId": "2814b133-3665-44bf-b4b9-4163700812da"} X-ppbforward : {"queueID":"4V6D9s6vFRzDq67","server":"mlpnf0117"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0117.laposte.net (SMTP Server) with ESMTP id 4V6D9s6vFRzDq67 for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6JBQzDq5w","contextId": "cb4d9b81-d887-4316-988d-8ed3324a0323"} X-lpn-mailing : LEGIT X-lpn-spamrating : 40 X-lpn-spamlevel : not-spam Authentication-Results : laposte.net; spf=pass smtp.mailfrom=GVincent@ac-orleans-tours.fr smtp.helo=smtp-slow-1.ac-orleans-tours.fr; dkim=pass reason="good signature" header.d=ac-orleans-tours.fr header.s=dkim1 header.b=AiaxAd; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-lpn-spamcause : OK, (0)(0000)gggruggvucftvghtrhhoucdtuddrgedvledruddvgedgudejucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecunfetrffquffvgfdpggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucenucfjughrpehtrhfhvffufffkgggtoffnkgfqsegrtdejpeeftdejnecuhfhrohhmpefivghsthhiohhnucfnohgtrghtihhvvgcuqdcukffooffquccuoefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrheqnecuggftrfgrthhtvghrnhepjeeggeefkeevheffgfeugfegvdduvdeuuefhteevudffgfejgfektdevjefgheelnecukfhppeduleehrdekfedrledtrddutddtpdejjedrudeguddrkeehrdduleefnecuvehluhhsthgvrhfuihiivgepuddtnecurfgrrhgrmhepihhnvghtpeduleehrdekfedrledtrddutddtpdhhvghlohepshhmthhpqdhslhhofidquddrrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpmhgrihhlfhhrohhmpefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopegvlhgvrdhlvghmohhinhgvsehlrghpohhsthgvrdhnvghtpdhsphhfpehprghsshdpughkihhmpehprghsshdpughmrghrtgepphgrshhspdhrvghvkffrpehsmhhtphdqshhlohifqdduqdgrrdgrtgdqohhrlhgvrghnshdqthhouhhrshdrfhhrpdhgvghokffr pefhtf Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w

Recu mail escroc usurpant une boite mail de l'EDUCATION NAtionale, mail aux faux loyers impayés et titré : Vérification quitance - Retard loyer Mars Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP, comptes et boites mails ! Boites mails @assistance-immobilier.com gérées par : https://www.ionos.fr/ Samedi 30 Mars 2024 après 11h32 j’ai reçu ce mail escroc ci-dessous venant l’adresse mail usurpée à l’EDUCATION Nationale : GVincent@ac-orleans-tours.fr Mais vraie adresse mail gérée par GMAIL, pour répondre aux hackers : Reply-To : contact@assistance-immobilier.com Boites mails gérées par : https://www.ionos.fr/ Et utilisant les adresses IP : 195.83.90.100 et 192.168.68.13 Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) Received : from imsva-smtp-2.ac-orleans-tours.fr (imsva-smtp-2.in.ac-orleans-tours.fr [192.168.68.13]) by smtp-slow-1.ac-orleans-tours.fr (Postfix) with ESMTP id B1F76109074A for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) ********************** Code HTML des hackers ************************ Return-Path : <GVincent@ac-orleans-tours.fr> Received : from mlpnf0117.laposte.net (mlpnf0117.sys.meshcore.net [10.94.128.96]) by mlpnb0108 with LMTPA; Sat, 30 Mar 2024 11:32:34 +0100 X-Cyrus-Session-Id : cyrus-198037-1711794754-1-9179340722842337918 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=1; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1711794754; cv=none; b=dLK5ldOPwaaU1RSyC9FXZW9M/bUJ8+9VqitMzqwEKRmgQXvVon7N7S7td6fzQb3LqISImJs9nmo UqRIZ7eiuiluxFXp2b431m3YrP5vNtxJqkU9gBX0Xf9a3pZJCKt9CJfyed3cxI9o/y2tSCqocVAs QimAEuUyCUGrV8nyvEqLSEXvMLpXCQLipNk47g5KTeE6/PSbLBqrRdHT4Kx6+I+efj50Pj+q8WMr FAtlaTV19FcWbPmN4G0qjxVinPUVRlgsG2IGwSfnclfO5paDUVPjv1Bp9f9N62goiPBcpqoEfGnt YO2t5oq9/PU6Y9JC5Gvv+xSB9JLPUuZvn9grBkA== ARC-Message-Signature : i=1; a=rsa-sha256; c=relaxed/relaxed; d=laposte.net; s=lpn-wlmd; t=1711794754; h=DKIM-Signature:Reply-To:From:To:Subject:Date; bh= GvqVkR4poh8IGFs5P8HkW/DNkahrH9A5jd34AQQd/ZU=; b=YUbxhP6Tmh3oM0aNN8/PmOd9TYcU E8ZEnSFWAOmD8b/QkvptMdWIabV6uY4u4YD3aB3v9lONWD0VoAdKH0qu2eCQ+ZhLFXguNxQzNchL a5FYYHv2d5No7YCcEOnkNc/RoBaWyyxi1lc2cdkkANIkF4Um4WYpBgIySifrHKCvfCW4bRiEAfE3 Af3XNIYZHf+poOlHQ5g9LynM/xqSXISD0rnHWrjJxsCuGL+rToyysG5YwvrDQTukHf1HM7matChb 229Pq0znOwB3SHhTQPVfPKd/X2Y3/N1fyQ4N5PtnlXexA+y1/i6VFp/lj33DQCcVmc5vWui0y1zR 7JocJqePzw== ARC-Authentication-Results : i=1; laposte.net; spf=pass smtp.helo=smtp-slow-1.ac-orleans-tours.fr smtp.mailfrom=GVincent@ac-orleans-tours.fr; dkim=pass reason="good signature" header.b=AiaxAd header.d=ac-orleans-tours.fr header.s=dkim1; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6vFRzDq67","contextId": "2814b133-3665-44bf-b4b9-4163700812da"} X-ppbforward : {"queueID":"4V6D9s6vFRzDq67","server":"mlpnf0117"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0117.laposte.net (SMTP Server) with ESMTP id 4V6D9s6vFRzDq67 for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6JBQzDq5w","contextId": "cb4d9b81-d887-4316-988d-8ed3324a0323"} X-lpn-mailing : LEGIT X-lpn-spamrating : 40 X-lpn-spamlevel : not-spam Authentication-Results : laposte.net; spf=pass smtp.mailfrom=GVincent@ac-orleans-tours.fr smtp.helo=smtp-slow-1.ac-orleans-tours.fr; dkim=pass reason="good signature" header.d=ac-orleans-tours.fr header.s=dkim1 header.b=AiaxAd; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-lpn-spamcause : OK, (0)(0000)gggruggvucftvghtrhhoucdtuddrgedvledruddvgedgudejucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecunfetrffquffvgfdpggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucenucfjughrpehtrhfhvffufffkgggtoffnkgfqsegrtdejpeeftdejnecuhfhrohhmpefivghsthhiohhnucfnohgtrghtihhvvgcuqdcukffooffquccuoefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrheqnecuggftrfgrthhtvghrnhepjeeggeefkeevheffgfeugfegvdduvdeuuefhteevudffgfejgfektdevjefgheelnecukfhppeduleehrdekfedrledtrddutddtpdejjedrudeguddrkeehrdduleefnecuvehluhhsthgvrhfuihiivgepuddtnecurfgrrhgrmhepihhnvghtpeduleehrdekfedrledtrddutddtpdhhvghlohepshhmthhpqdhslhhofidquddrrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpmhgrihhlfhhrohhmpefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopegvlhgvrdhlvghmohhinhgvsehlrghpohhsthgvrdhnvghtpdhsphhfpehprghsshdpughkihhmpehprghsshdpughmrghrtgepphgrshhspdhrvghvkffrpehsmhhtphdqshhlohifqdduqdgrrdgrtgdqohhrlhgvrghnshdqthhouhhrshdrfhhrpdhgvghokffr pefhtf Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w

Why the URL is not reachable

Why the URL is not reachable

What human rights are being violated in Palestine? Deprivation of the right to self-determination, extrajudicial killings, restrictions on freedom of movement and assembly and illegal settlements were some of glaring manifestations of human rights violations of the Palestinian people see why Israel can kill innocent children with American taxpayer money 1- Because the God of Money of our World is a Jew who supports and lives in Israel. For more details, click on the following link. https://mega.nz/file/FqhzGKbB#bsX4PD-O59HEA0-rynD29xkk47dmddycY5CjZfoDLYg 2- Because https://www.tiktok.com/@thefearlessqueenmel/video/7307640994579680542?lang=en&q=why%20dont%20Americans%20knowl%20what%20you%20have%20seen%20&t=1701880206555 See how innocent children are killed by the most powerful Israeli using American bombs at Al Jazeera Arabic Live at https://www.youtube.com/watch?v=bNyUyrR0PHo if you do not do something such as going on the street and telling your government which is controlled by the Jews to stop killing the Gaza people and stop the Israeli War and send food to the starving people of Gaza. If you can not do it then forward this message with the above two links to at least 4 of your friends and ask them to forward it to 4 of their friends so that the world will know that the new mass murderers are the Jews of the world . It is ironic that the Holocaust servicers (the Jews) are creating a new Holocaust against the Philistines in Gaza. if you do not do this also then you do not have a HART

gftgg

gftgg

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

Unusual command line activities that are not typical for the server environment.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

The IP made multiple unsuccessful login attempts in a short period of time.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

It made multiple requests from user agents claiming to be bots.

The IP was involved in a rapid sequence of login attempts.