Hello,
An abusive behaviour (Spam) originating from your dedicated server ns505319.ip-198-27-65.net has been reported to or noticed by our Abuse Team.
Technical details showing the aforementioned problem follow :
— start of the technical details —
[ SpamCop V5.4.0 ]
This message is brief for your comfort. Please use links below for details.
Email from 198.27.65.31 / Fri, 1 Oct 2021 14:29:30 +0300
https://www.spamcop.net/w3m?i=z7143368626z96b3cc1047c4a92579ec94e16877189bz
Spamvertised web site: https://sto-ufa.ru/
https://www.spamcop.net/w3m?i=z7143368627z5908c89b73804db69589f26470f13714z
https://sto-ufa.ru/ is 198.27.65.31; Fri, 01 Oct 2021 20:32:35 GMT
[ Offending message ]
Received: via tmail-2007f.2015-sau for markusk.200; Fri, 1 Oct 2021 14:29:32 +0300 (EEST)
Received: from cf50.tnl.mail.saunalahti.fi (cf50.tnl.mail.saunalahti.fi [193.64.193.203])
by be503.mail.saunalahti.fi (Postfix) with ESMTP id 37C5860038
for ; Fri, 1 Oct 2021 14:29:32 +0300 (EEST)
X-Spam-Folder: YES
X-Original-Sender: email-removed@provider.com
X-Halon-SA: 2.3
X-Halon-RPD: 0
Received: from vs24.mail.saunalahti.fi (vs24.mail.saunalahti.fi [62.142.117.201])
by cf50.tnl.mail.saunalahti.fi (Halon) with ESMTPS
id d847440c-22aa-11ec-a156-005056bd8f0d;
Fri, 01 Oct 2021 14:29:31 +0300 (EEST)
Received: from vs24.mail.saunalahti.fi (localhost [127.0.0.1])
by vs24.mail.saunalahti.fi (Postfix) with ESMTP id E70FD2016E
for ; Fri, 1 Oct 2021 14:29:30 +0300 (EEST)
Received: from fe28.mail.saunalahti.fi (fe28.mail.saunalahti.fi [62.142.117.206])
by vs24.mail.saunalahti.fi (Postfix) with ESMTP id DCC81200FC
for ; Fri, 1 Oct 2021 14:29:30 +0300 (EEST)
X-Client-Addr: 198.27.65.31
Received: from ns505319.ip-198-27-65.net (167.bhs.ovh.abcd.network [198.27.65.31])
(using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by fe28.mail.saunalahti.fi (Postfix) with ESMTPS id C1482E0004
for ; Fri, 1 Oct 2021 14:29:30 +0300 (EEST)
Received: from stolnik by ns505319.ip-198-27-65.net with local (Exim 4.94.2)
(envelope-from <email-removed@provider.com>)
id 1mWGjJ-0006sf-AH
for x; Fri, 01 Oct 2021 16:29:29 +0500
To: x
Subject: =?utf-8?B?0JrQvtC/0LjRjzog4pi677iPIE1pdGVuIHDDpGl2w6RzaSBtZW5pPw==?=
X-PHP-Originating-Script: 500:class.phpmailer.php
Date: Fri, 1 Oct 2021 16:29:29 +0500
From: =?utf-8?B?0JDQstGC0L7RgdC10YDQstC40YEg0KHQotCe0LvRjNC90LjQug==?= <email-removed@provider.com>
Reply-To: markusk
Message-ID: <email-removed@provider.com>
X-Mailer: PHPMailer 5.2.16 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Status:
AAAaAA3\u20444 AAoAA3\u20444AAAA AA AAAA3\u20444AA3\u20444AAAaAA\u03bcAA1\u20442AA AA, AAoAA3\u20444AaAA3\u20444AaAA3\u20444AA\u03bc AA2Aa1 AA3\u20444AaAAAaAAAA2AA AAAA Contact Name Here AaAA\u03bcAaAA\u03bcAA AAAA2AaAA3\u20444AAAA\u03bcAaAA2AA AA AAAAAA3\u20444AAAAAA1\u20442AA AAo
AAAaAA3\u20444 AAAA AAAAAA1\u20444AA3\u20444 AA3\u20444AaAAAaAAAA2AAAA\u03bcAA1\u20442AA3\u20444 AA AAAAAA1AaAA https://sto-ufa.ru/ AA3\u20444Aa:
markusk
__________________________Hei, kuvani ovat tAAAAllAA
https://script.google.com/macros/s/AKfycbwehzi6eIoV7yKxzPSrin5XMeJNxzRpi6LpctNrEZnaygpCm2tUrARH62RQmkz6esNr4w/exec?bWFya3Vza0Brb2x1bWJ1cy5maQ==
Unsubscribe: https://script.google.com/macros/s/AKfycbwehzi6eIoV7yKxzPSrin5XMeJNxzRpi6LpctNrEZnaygpCm2tUrARH62RQmkz6esNr4w/exec?bWFya3Vza0Brb2x1bWJ1cy5maV9VbnN1YnNjcmliZQ== \— Forwarded email(s) —
— end of the technical details —
Your should investigate and fix this problem, as it constitutes a violation to our terms of service.
Please answer to this e-mail indicating which measures you’ve taken to stop the abusive behaviour.
Cordially,
The OVHcloud Abuse team.
