[mailop] Overdue bi-weekly report on what the Spam Auditors are seeing..

2020-11-12 Thread Michael Peddemors via mailop
It's been a while since I sent one of these out, and since one of the senior threat researchers is off this week, on a well deserved break, thought I would take a look at what the rest of the team is reporting.. * The amount of leakage from Gmail and o365 continues to climb, are they getting b

Re: [mailop] spam from ASN 46664

2020-11-12 Thread Fernando Cassia via mailop
On 12/11/2020, Atro Tossavainen via mailop wrote: > On Thu, Nov 12, 2020 at 11:08:28PM +0200, Mary via mailop wrote: >> >> Hello, >> >> Anyone knows how to get in touch with the owners of ASN 46664? Volumedrive strikes again? :)) https://blogs.oracle.com/internetintelligence/why-far-flung-parts-o

Re: [mailop] spam from ASN 46664

2020-11-12 Thread Mary via mailop
Thanks! that makes it quite clear... A quick change on the routers and off we go to the next one... On Thu, 12 Nov 2020 23:23:30 +0200 Atro Tossavainen via mailop wrote: > On Thu, Nov 12, 2020 at 11:08:28PM +0200, Mary via mailop wrote: > > > > Hello, > > > > Anyone knows how to get in tou

Re: [mailop] spam from ASN 46664

2020-11-12 Thread Atro Tossavainen via mailop
On Thu, Nov 12, 2020 at 11:08:28PM +0200, Mary via mailop wrote: > > Hello, > > Anyone knows how to get in touch with the owners of ASN 46664? https://www.spamhaus.org/sbl/query/SBL461359 suggests you may not wish to. If Spamhaus is reading this, I'd say this should be on DROP if it isn't. If

Re: [mailop] spam from ASN 46664

2020-11-12 Thread Jay Hennigan via mailop
On 11/12/20 13:08, Mary via mailop wrote: Hello, Anyone knows how to get in touch with the owners of ASN 46664? jay$ whois -h whois.arin.net as46664 # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/resources/registry/whois/tou/ # # If you

[mailop] spam from ASN 46664

2020-11-12 Thread Mary via mailop
Hello, Anyone knows how to get in touch with the owners of ASN 46664? We see significant amounts of spam from their IP range and gotten no response to our requests. [156.96.107.252] blocked using zen.spamhaus.org; from= [156.96.115.148] blocked using zen.spamhaus.org; from= [156.96.115.151]

[mailop] Anyone contact to DigiByte Media B.V. Utrecht (maybe linked to megafon.ru) or knows how to get them disconnected by Google?

2020-11-12 Thread Benoît Panizzon via mailop
Hi Gang We see a constant stream of spam mails advertising erotica websites run by DigiByte Media B.V. Utrecht, NL and hosted @ Goole Could. Despite DigiByte Media B.V. stating, they react to every complaint within a couple of work days I have NEVER EVER got a reply from them o an incident. Now