Authentication-Results: prod-smtp-forward02;
dkim=fail (body hash did not verify) header.i=@abuse.ipv6home.eu header.d=abuse.ipv6home.eu header.s=v20231026
Received: from CWXP265CU009.outbound.protection.outlook.com (mail-ukwestazon11021091.outbound.protection.outlook.com [52.101.100.91])
by prod-smtp-forward02 (Haraka) with ESMTPS id 17F93F77-93E5-486D-A2F5-15D80CAA9ED3.1
envelope-from <report.1750489028@abuse.ipv6home.eu>
tls TLS_AES_256_GCM_SHA384;
Sat, 21 Jun 2025 06:57:13 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=kJHO7emMRJWsQkZV1X8LS2BiSsuP5z5ZLk+UD3+CUC4WcXCShyn/G5q2ANC7IzO/AlV/9mL3yZppN66q/qxntkeMFPgMBYD/Gs0Upd/vTq1ZdM8iXUQEGm7IuLsVDAdL6PAIXMU8mTYKrD58fO10HiMWwmxCpi3j/IcjmX4D3/PzhH1KzIZZXl9bezkuDNp1haqrM13we/cIOqkQcH2OrA3Wl5swzsUlGM/4t5WCoSMhC5cJ4i58x+GVIgA0Bp2HAm6MOL5ztQqqIIjvjhygqF0ofjVz51qigqKej/h6/sfzmmIylJdpl/RcqRcCdbq2afTnALwQClyOOcbh0JJ4VA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=X+bBAg2/ZKulGtPF/KQrHzSCQ2B1nnlUh4+FJFtiXEY=;
b=PIjfDqiVokvOXfHx/Uwyf19zRUq+wrBB3zn8to8N6x3hYSzChsm93SzdzZQd1q6wowEQXiMDPU7AVAdDy+MCIir5Mcnjf5tBYG7dZWRBkocgNxAW3TAjMQ1IVgL4Xhq5rcc99BYcbj9OJD2K0HgDjB0Uf6U/WFjTNXDc7LJxmuBsKyHebmw2Lnft8oCIQqlk7+iFlKBv0joKhV4Zl6+26S1GFM/72JLfMIYftYnxQKsB0ryWx/KrYwmZVkBYK7TDBkHX5jtgEDbpPtVMhZR3uLApTw3IQISpY/hgEMUVughzv7RfPIEDWAJ5MzjrcBhhMOcvPf9jlbYZs4BEK2koBg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
2a03:4000:40:df::1) smtp.rcpttodomain=abuseradar.com
smtp.mailfrom=abuse.ipv6home.eu; dmarc=pass (p=reject sp=none pct=100)
action=none header.from=abuse.ipv6home.eu; dkim=pass (signature was verified)
header.d=abuse.ipv6home.eu; arc=none (0)
Received: from LNXP265CA0013.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:5e::25)
by CWLP265MB3202.GBRP265.PROD.OUTLOOK.COM (2603:10a6:400:8c::12) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.27; Sat, 21 Jun
2025 06:57:10 +0000
Received: from LN2PEPF000100CB.GBRP265.PROD.OUTLOOK.COM
(2603:10a6:600:5e:cafe::d0) by LNXP265CA0013.outlook.office365.com
(2603:10a6:600:5e::25) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.20.8857.25 via Frontend Transport; Sat,
21 Jun 2025 06:57:09 +0000
Received-SPF: Pass (protection.outlook.com: domain of abuse.ipv6home.eu
designates 2a03:4000:40:df::1 as permitted sender)
receiver=protection.outlook.com; client-ip=2a03:4000:40:df::1;
helo=donaukurier.host.ipv6help.de; pr=C
Received: from donaukurier.host.ipv6help.de (2a03:4000:40:df::1) by
LN2PEPF000100CB.mail.protection.outlook.com (2603:10a6:608:1::5) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.21 via Frontend
Transport; Sat, 21 Jun 2025 06:57:09 +0000
Received: from shinkansen.host.ipv6help.de (shinkansen.host.ipv6help.de [IPv6:2a03:4000:31:345::1])
by donaukurier.host.ipv6help.de (Postfix) with ESMTP id D1D931CF0;
Sat, 21 Jun 2025 06:57:08 +0000 (UTC)
Received: by shinkansen.host.ipv6help.de (Postfix, from userid 0)
id BFF0C68A4A; Sat, 21 Jun 2025 06:57:08 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 shinkansen.host.ipv6help.de BFF0C68A4A
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=abuse.ipv6home.eu;
s=v20231026; t=1750489028;
bh=faY/evoT9QGFNX/GZpQj5lPa6l8bnfHSNSgwjMhnIOY=;
h=From:To:Subject:MIME-Version:Content-Type:Message-Id:Date:From;
b=QTBv9qH0MHhAt8ka5Tblni/uvkiNBK1iD83cCT1JF9qsMnf+UEH5BV+fn5J49lfki
s01fIXYHqdM/RqMTjqXJNyzuOje0v083PwrXz8yG2FFkgdueusXK5yS1NhV4BMKbn+
ua7m6K+lHJ0qzDSufTOsZINjlsDmnCtZSvnxgnr0WnS311dTWcja1Nh6kt9cB23DFw
cKC64qT4bzh6Jqsiw==
From: Abuse Report <report.1750489028@abuse.ipv6home.eu>
To: lir@telecentras.lt,report@abuseradar.com
X-Mailer: Abuse-Mail/1.0
Subject: Abuse report [IP: 89.117.54.74]
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----A1D4696B663C32F7F1EB28421A235376"
Message-Id: <20250621065708.BFF0C68A4A@shinkansen.host.ipv6help.de>
Date: Sat, 21 Jun 2025 06:57:08 +0000 (UTC)
Return-Path: report.1750489028@abuse.ipv6home.eu
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 4b06f27d-d0bc-45cd-b169-d61de1bca836:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: LN2PEPF000100CB:EE_|CWLP265MB3202:EE_
X-MS-Office365-Filtering-Correlation-Id: e61373f9-fa92-406c-a246-08ddb090d796
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam:
BCL:0;ARA:13230040|9140799003|61400799027|376014|4053099003;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?gwDxxHHJCaMx4PMamBsuYERBc3WpVE1DMx77kzEjx/3QOnJNzeoa9jOM9B?=
=?iso-8859-1?Q?rO7u2bB5L327hw3n8w33I461BeMmGc3ZX+0jlSlLyWLAzKCQecRpObQWe9?=
=?iso-8859-1?Q?/7Y/yPpfUjvfR2yaJzsTRXWiN3yVYwhOmyEjmU6rPcd/RTp4VHroLx1O2t?=
=?iso-8859-1?Q?9rPdreg9KSexBEdTqVBXT2ctvQRdbVEyUkNODlN+2A6VUTgw7NRWDi5IlP?=
=?iso-8859-1?Q?xDGecrTbQ7uWJB3gnM5xmPKWLmveMdlpt9yOX/Wi2CcHl9MrZdrALhHJh5?=
=?iso-8859-1?Q?rS0zL7EOpiJY1ivpnx98TjeY6ja0923yq9fU28z0kO3w2XR6LnG/SowhsV?=
=?iso-8859-1?Q?l2yq2trG67Mo/1mpZn/nt6O07SX4V9w8GG3ZEg6Rg1FcgTDB1fjfighYID?=
=?iso-8859-1?Q?TBm5rOFjBCyIZx9f1e+0sCst5/a7xWXyjWs9R4pL9kA/DgEYy3P24BqRS1?=
=?iso-8859-1?Q?xPHOpizrsXFXP9G4UYJ7RNl0YyjvEzdKJ33uLagE55ldlrRTKQ3/zxh/Zs?=
=?iso-8859-1?Q?b/sYIqlwUYJScQSLUEwMglFKuq7SRHS+l/O2rcR8IWLBlRk+ObWtF/3Jvm?=
=?iso-8859-1?Q?Fdm0beuXUYChU6uYpyYN+NqYBT/8vsNUYNEVUhtF5iU941ol8uRg8yFRGN?=
=?iso-8859-1?Q?y/xk8X/+MNiQtvkq8aOx3ZizmpbKPnhYksDirorDc+TLqJJwcfH7TLwP6A?=
=?iso-8859-1?Q?kRvapxibhSbnm4pG9kJhnOOG/XODxnCQcvNSSAfZG+XDK3YfujNJ+L/bXW?=
=?iso-8859-1?Q?YSwlkOZhcHMVNCgDrbPyQxIae0M7KHYxPCSgXpyCt4myThw5QBU5gZqmPI?=
=?iso-8859-1?Q?18EVR06CLBpMaXFY5s+Pc6nJtcXEkp5uWYoqAQLovUtozM2Gs9KZqzfTw7?=
=?iso-8859-1?Q?/j0uuTUsAtMZvXWU3FZ6/WBsd6qQbg29zNQVPOjWaP4TVQUirmEq4gb/eL?=
=?iso-8859-1?Q?GcnCMhtO2cTzDaweEYHHyIXJ+SM4hae6vxYBkgJWXRzkEfRMiTMXMGDu2c?=
=?iso-8859-1?Q?rLvuwWpKtWtB9+yxZXfZgOy4rIXXNOv0vnWNAHMP5KQQxiBRuv+WtGrVoT?=
=?iso-8859-1?Q?Nu3nCC1K6tTGmn5ukQ/TfGJFGQilFUlwthSBSGDEPPl4HLM6XdUex1oF/b?=
=?iso-8859-1?Q?BhV/uW6BROkdy+g9F24AIE1InnrlStk5bkLnety1lOc33SOrlfjmYsv1AX?=
=?iso-8859-1?Q?sOBH9I4qPE8byCjBADOTCKEFKom7gZBDZkQimLM0VmwMoAVGCquTIu2pLB?=
=?iso-8859-1?Q?jGGPILoqDWOuXIlvUIJnDHQhXmlZ+mzCf17JZFRUy9UpAEBbCyjdV16M/A?=
=?iso-8859-1?Q?vsNEi6bfiVvO6x56sXOmkz5+KGERgAHtQPt2AKgvg+xuWtiTx7mmxRwGTk?=
=?iso-8859-1?Q?clxEbVxxwOBNoBE+lm9KQ6/SAqnTzeYF17ujJy2539Ody9AI6e+gqnVgPe?=
=?iso-8859-1?Q?A7smumzzwF70gKBimshgHO9Nt16uolcx56q+/Z0kOFt1CH698Bc8GG3Ftz?=
=?iso-8859-1?Q?uB0Vkv0UoD7V3t6TWaa4lu1cX9wF5DFrZhynn+U9jjY0oGfZUw88uZNIeN?=
=?iso-8859-1?Q?Xjy3KD4B0yNgFfkDyS6BVKkI1+UBPnTFJX8n0ixfBU2GeYeN0A=3D=3D?=
X-Forefront-Antispam-Report:
CIP:2a03:4000:40:df::1;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:donaukurier.host.ipv6help.de;PTR:donaukurier.host.ipv6help.de;CAT:NONE;SFS:(13230040)(9140799003)(61400799027)(376014)(4053099003);DIR:OUT;SFP:1102;
X-ExternalRecipientOutboundConnectors: 4b06f27d-d0bc-45cd-b169-d61de1bca836
X-OriginatorOrg: netutils.io
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jun 2025 06:57:09.0306
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e61373f9-fa92-406c-a246-08ddb090d796
X-MS-Exchange-CrossTenant-Id: 4b06f27d-d0bc-45cd-b169-d61de1bca836
X-MS-Exchange-CrossTenant-AuthSource: LN2PEPF000100CB.GBRP265.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP265MB3202
Original-Authentication-Results: spf=pass (sender IP is 2a03:4000:40:df::1)
smtp.mailfrom=abuse.ipv6home.eu; dkim=pass (signature was verified)
header.d=abuse.ipv6home.eu;dmarc=pass action=none
header.from=abuse.ipv6home.eu;
This is a multi-part message in MIME format.
------A1D4696B663C32F7F1EB28421A235376
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7-bit
Hello,
Stop this abusive host(s) (IP: 89.117.54.74) of scanning my system(s).
The complete information to stop this abusive host(s)
(IP: 89.117.54.74) is given ONLY by THIS report.
So don't ask further questions as THIS report gives you all informations in order to STOP this.
My systems are located within these ASNs:
AS1205, AS12605, AS40994, AS42388, and AS197540.
(the corresponding IP subnets and IPv6 prefixes are listed in the attached networks.txt)
The specific IPs are not given, as you do not need them.
See the attached firewall log, that is also given directly to LAW ENFORCEMENT AUTHORITIES.
(any times given in the logs are in UTC)
AND any replies will be dropped/rejected automatically.
-------------------------------------------------------------------------
- Doing Portscanning without permission (Opt-in) is a criminal offence. -
- My personality has nothing to say nor it is needed at all. -
-------------------------------------------------------------------------
