Near: United States
IP Lookup Details:
IP Information - 195.83.90.100
Host name: smtp-slow-1-a.ac-orleans-tours.fr
Country: France
Country Code: FR
Region: A3
City: Sandillon
Latitude: 47.8451
Longitude: 2.0316
Whois information
CIDR: 195.0.0.0/8
NetName: RIPE-CBLK3
NetHandle: NET-195-0-0-0-1
Parent: ()
NetType: Allocated to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 1996-03-25
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/195.0.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
RTechHandle: RIPE-NCC-ARIN
RTechName: RIPE NCC Hostmaster
RTechPhone: +31 20 535 4444
RTechEmail: search-ripe-ncc-not-arin@ripe.net
RTechRef: https://rdap.arin.net/registry/entity/RIPE-NCC-ARIN
Recu mail escroc usurpant une boite mail de l'EDUCATION NAtionale, mail aux faux loyers impayés et titré : Vérification quitance - Retard loyer Mars Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP, comptes et boites mails ! Boites mails @assistance-immobilier.com gérées par : https://www.ionos.fr/ Samedi 30 Mars 2024 après 11h32 j’ai reçu ce mail escroc ci-dessous venant l’adresse mail usurpée à l’EDUCATION Nationale : GVincent@ac-orleans-tours.fr Mais vraie adresse mail gérée par GMAIL, pour répondre aux hackers : Reply-To : contact@assistance-immobilier.com Boites mails gérées par : https://www.ionos.fr/ Et utilisant les adresses IP : 195.83.90.100 et 192.168.68.13 Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) Received : from imsva-smtp-2.ac-orleans-tours.fr (imsva-smtp-2.in.ac-orleans-tours.fr [192.168.68.13]) by smtp-slow-1.ac-orleans-tours.fr (Postfix) with ESMTP id B1F76109074A for <@laposte.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) ********************** Code HTML des hackers ************************ Return-Path : <GVincent@ac-orleans-tours.fr> Received : from mlpnf0117.laposte.net (mlpnf0117.sys.meshcore.net [10.94.128.96]) by mlpnb0108 with LMTPA; Sat, 30 Mar 2024 11:32:34 +0100 X-Cyrus-Session-Id : cyrus-198037-1711794754-1-9179340722842337918 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=1; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1711794754; cv=none; b=dLK5ldOPwaaU1RSyC9FXZW9M/bUJ8+9VqitMzqwEKRmgQXvVon7N7S7td6fzQb3LqISImJs9nmo UqRIZ7eiuiluxFXp2b431m3YrP5vNtxJqkU9gBX0Xf9a3pZJCKt9CJfyed3cxI9o/y2tSCqocVAs QimAEuUyCUGrV8nyvEqLSEXvMLpXCQLipNk47g5KTeE6/PSbLBqrRdHT4Kx6+I+efj50Pj+q8WMr FAtlaTV19FcWbPmN4G0qjxVinPUVRlgsG2IGwSfnclfO5paDUVPjv1Bp9f9N62goiPBcpqoEfGnt YO2t5oq9/PU6Y9JC5Gvv+xSB9JLPUuZvn9grBkA== ARC-Message-Signature : i=1; a=rsa-sha256; c=relaxed/relaxed; d=laposte.net; s=lpn-wlmd; t=1711794754; h=DKIM-Signature:Reply-To:From:To:Subject:Date; bh= GvqVkR4poh8IGFs5P8HkW/DNkahrH9A5jd34AQQd/ZU=; b=YUbxhP6Tmh3oM0aNN8/PmOd9TYcU E8ZEnSFWAOmD8b/QkvptMdWIabV6uY4u4YD3aB3v9lONWD0VoAdKH0qu2eCQ+ZhLFXguNxQzNchL a5FYYHv2d5No7YCcEOnkNc/RoBaWyyxi1lc2cdkkANIkF4Um4WYpBgIySifrHKCvfCW4bRiEAfE3 Af3XNIYZHf+poOlHQ5g9LynM/xqSXISD0rnHWrjJxsCuGL+rToyysG5YwvrDQTukHf1HM7matChb 229Pq0znOwB3SHhTQPVfPKd/X2Y3/N1fyQ4N5PtnlXexA+y1/i6VFp/lj33DQCcVmc5vWui0y1zR 7JocJqePzw== ARC-Authentication-Results : i=1; laposte.net; spf=pass smtp.helo=smtp-slow-1.ac-orleans-tours.fr smtp.mailfrom=GVincent@ac-orleans-tours.fr; dkim=pass reason="good signature" header.b=AiaxAd header.d=ac-orleans-tours.fr header.s=dkim1; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6vFRzDq67","contextId": "2814b133-3665-44bf-b4b9-4163700812da"} X-ppbforward : {"queueID":"4V6D9s6vFRzDq67","server":"mlpnf0117"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0117.laposte.net (SMTP Server) with ESMTP id 4V6D9s6vFRzDq67 for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Sat, 30 Mar 2024 11:32:33 +0100 (CET) X-mail-filterd : {"version":"1.7.5","queueID":"4V6D9s6JBQzDq5w","contextId": "cb4d9b81-d887-4316-988d-8ed3324a0323"} X-lpn-mailing : LEGIT X-lpn-spamrating : 40 X-lpn-spamlevel : not-spam Authentication-Results : laposte.net; spf=pass smtp.mailfrom=GVincent@ac-orleans-tours.fr smtp.helo=smtp-slow-1.ac-orleans-tours.fr; dkim=pass reason="good signature" header.d=ac-orleans-tours.fr header.s=dkim1 header.b=AiaxAd; dmarc=pass reason="SPF is aligned, DKIM is aligned"; arc=none smtp.remote-ip=195.83.90.100; bimi=skipped reason="non-compliant DMARC" X-lpn-spamcause : OK, (0)(0000)gggruggvucftvghtrhhoucdtuddrgedvledruddvgedgudejucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecunfetrffquffvgfdpggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucenucfjughrpehtrhfhvffufffkgggtoffnkgfqsegrtdejpeeftdejnecuhfhrohhmpefivghsthhiohhnucfnohgtrghtihhvvgcuqdcukffooffquccuoefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrheqnecuggftrfgrthhtvghrnhepjeeggeefkeevheffgfeugfegvdduvdeuuefhteevudffgfejgfektdevjefgheelnecukfhppeduleehrdekfedrledtrddutddtpdejjedrudeguddrkeehrdduleefnecuvehluhhsthgvrhfuihiivgepuddtnecurfgrrhgrmhepihhnvghtpeduleehrdekfedrledtrddutddtpdhhvghlohepshhmthhpqdhslhhofidquddrrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpmhgrihhlfhhrohhmpefigghinhgtvghnthesrggtqdhorhhlvggrnhhsqdhtohhurhhsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopegvlhgvrdhlvghmohhinhgvsehlrghpohhsthgvrdhnvghtpdhsphhfpehprghsshdpughkihhmpehprghsshdpughmrghrtgepphgrshhspdhrvghvkffrpehsmhhtphdqshhlohifqdduqdgrrdgrtgdqohhrlhgvrghnshdqthhouhhrshdrfhhrpdhgvghokffr pefhtf Received : from smtp-slow-1.ac-orleans-tours.fr (smtp-slow-1-a.ac-orleans-tours.fr [195.83.90.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4V6D9s6JBQzDq5w
