Noticing lot's of noise from OVH adress ranges with "bouncer.cloud" PTR and HELO. Often they are trying only one recipient and seem to move on then. Can anyone shed some light on what these people are trying to accomplish? Could there be any kind of legitimacy, or are just plain bad guys? Seems like a lot of effort to push spam this way and that's what's holding me back from blocking them..
SPF pass: ip=135.125.128.56, fqdn=de1-mail-173.bouncer.cloud, helo=de1-mail-173.bouncer.cloud, from=<hello@de1-mail-173.bouncer.cloud> SPF pass: ip=91.121.50.199, fqdn=sbg5-mail-160.bouncer.cloud, helo=sbg5-mail-160.bouncer.cloud, from=<hello@sbg5-mail-160.bouncer.cloud> SPF pass: ip=51.89.19.107, fqdn=de1-mail-35.bouncer.cloud, helo=de1-mail-35.bouncer.cloud, from=<hello@de1-mail-35.bouncer.cloud> SPF pass: ip=51.68.178.58, fqdn=de1-mail-5.bouncer.cloud, helo=de1-mail-5.bouncer.cloud, from=<hello@de1-mail-5.bouncer.cloud> SPF pass: ip=46.105.33.125, fqdn=sbg5-mail-141.bouncer.cloud, helo=sbg5-mail-141.bouncer.cloud, from=<hello@sbg5-mail-141.bouncer.cloud> SPF pass: ip=37.59.67.40, fqdn=sbg5-mail-37.bouncer.cloud, helo=sbg5-mail-37.bouncer.cloud, from=<hello@sbg5-mail-37.bouncer.cloud> SPF pass: ip=178.32.167.75, fqdn=sbg5-mail-150.bouncer.cloud, helo=sbg5-mail-150.bouncer.cloud, from=<hello@sbg5-mail-150.bouncer.cloud> SPF pass: ip=54.36.212.178, fqdn=sbg5-mail-147.bouncer.cloud, helo=sbg5-mail-147.bouncer.cloud, from=<hello@sbg5-mail-147.bouncer.cloud> SPF pass: ip=135.125.224.91, fqdn=de1-mail-233.bouncer.cloud, helo=de1-mail-233.bouncer.cloud, from=<hello@de1-mail-233.bouncer.cloud> SPF pass: ip=135.125.145.35, fqdn=de1-mail-185.bouncer.cloud, helo=de1-mail-185.bouncer.cloud, from=<hello@de1-mail-185.bouncer.cloud> SPF pass: ip=188.165.49.25, fqdn=sbg5-mail-27.bouncer.cloud, helo=sbg5-mail-27.bouncer.cloud, from=<hello@sbg5-mail-27.bouncer.cloud> SPF pass: ip=51.38.116.69, fqdn=de1-mail-1.bouncer.cloud, helo=de1-mail-1.bouncer.cloud, from=<hello@de1-mail-1.bouncer.cloud> SPF pass: ip=178.33.42.186, fqdn=sbg5-mail-25.bouncer.cloud, helo=sbg5-mail-25.bouncer.cloud, from=<hello@sbg5-mail-25.bouncer.cloud> SPF pass: ip=51.89.47.230, fqdn=de1-mail-108.bouncer.cloud, helo=de1-mail-108.bouncer.cloud, from=<hello@de1-mail-108.bouncer.cloud> _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
