They are validating addresses using incomplete SMTP dialogs. Either
nullroute or block at the MAIL FROM stage, so they don't even get to check
whether RCPT TO would be accepted.
Cheers,
Hans-Martin
Am 30. Oktober 2022 23:23:51 schrieb Michael Peddemors via mailop
<mailop@mailop.org>:
Can anyone give insight into this company?
They have an IMMENSE amount of IP space from PSI/Cogent..
(Someone might like to look into this from Cogent's end)
Their website (https://www.code200.global/contact) has no real company
information, and Google shows a Lithunian company by that name with 17
employees. But almost all of that IP space is active, with either PTR
naming conventions of code200.global ..
Oct 30 09:02:51 be msd[3651510]: CONN: 38.79.219.120 -> 25 GeoIP = [US]
PTR = code200.global OS = Linux 2.2.x-3.x
Oct 30 09:02:51 be msd[3651510]: HELO command received, args: code200.global
Oct 30 09:02:52 be msd[3651510]: MAIL command received, args:
FROM:<A2I174@code200.global>
Doing list washing..
... or..
38.128.158.229 x1 prd-ol-25ad6o.sourcexnet.com
38.128.158.231 x1 prd-ol-6n0jkp.unsignedstatic.com
38.128.158.233 x1 prd-ol-hf8c87.spaceisstupid.com
38.128.158.235 x1 prd-ol-fc0xdw.marketdatax.com
They advertise that they are selling internet connections for $19.95 and
hosting, but this doesn't appear to be the case..
Oct 30 11:46:08 be msd[4182031]: CONN: 149.100.189.246 -> 25 GeoIP =
[IT] PTR = prd-ol-5sp9th.froyogogo.com OS = Linux 2.2.x-3.x
Oct 30 11:46:09 be msd[4182031]: HELO command received, args:
prd-ol-5SP9TH.froyogogo.com
Oct 30 11:46:09 be msd[4182031]: MAIL command received, args:
FROM:<gd6...@prd-ol-5sp9th.froyogogo.com>
You will recall that name from a while back in out reports..
This seems to be someone trying to prove they have justification for IP
space, but this is simply huge swaths of IP space used to slow roll list
washing it appears..
Any one else have comments on them?
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
