On Thu 07/May/2026 18:26:55 +0200 Randolf Richardson, Postmaster via mailop
wrote:
I'm wondering, are others noticing abuse from different IP addresses
in this /22, attempting to hack into mostly non-existent POP3 and
IMAP4 accounts, and sending excessive quantities of spam (usually
high volume in short bursts)?
I have 15 of them:
531-north:~$ ibd-del -Lv -i 64.89.160.0/22
list records in IP range 64.89.160.0/22
min age 0 secs, max age 1778173048 secs, min prob 0=0.00%, max prob
2147483647=100.00%.
CREATED PROB. BLOCKED PACKETS UPDATED DECAY THRESHOLD CAUGHT
IP DESCRIPTION
17-21:57 0.00% 0 3-06:14 60 0 5
64.89.160.44 SPF failure
07:47:37 99.03% 84s ago 1024 93s ago 4.32e+04 1 14
64.89.160.72 SMTP auth dictionary attack
24-12:25 37.79% 13:00:16 84 13:00:15 5.184e+05 1 3
64.89.160.79 PHP scan
Feb-2026 43.76% Mar-2026 577 Mar-2026 5.184e+06 1 14
64.89.160.82 IP without abuse team
Feb-2026 82.53% 21-04:06 20 21-04:06 5.184e+06 1 3
64.89.160.94 PHP scan
27-23:24 0.00% 0 30-12:09 60 0 4
64.89.160.95 SPF failure
Feb-2026 0.00% Feb-2026 41 Feb-2026 2.592e+05 0 1
64.89.160.96 PHP scan
25-15:33 1.12% 6-22:02 24 6-22:02 2.16e+04 0 7
64.89.160.120 SPF failure
Feb-2026 19.15% Apr-2026 59 Apr-2026 2.592e+06 0 4
64.89.160.178 IP without abuse team
Feb-2026 48.58% Mar-2026 1360 Mar-2026 5.184e+06 1 26
64.89.161.80 IP without abuse team
Jan-2026 86.05% 24-18:49 78 24-18:49 5.184e+06 1 5
64.89.163.23 PHP scan
Feb-2026 13.85% Mar-2026 155 Mar-2026 2.592e+06 0 2
64.89.163.49 IP without abuse team
Apr-2026 0.47% 29-23:42 39 29-23:42 2.592e+05 0 4
64.89.163.50 PHP scan
Jan-2026 0.00% Feb-2026 37 Feb-2026 2.592e+05 0 1
64.89.163.204 PHP scan
Jan-2026 0.00% 0 Jan-2026 60 0 1
64.89.163.245 SPF failure
15 IPv4 record(s) selected, 0 deleted, 0 failed deletion(s)
Given the excessive quantities of abuse from across their network,
we don't even care to try to contact them, but if they're part of
Mailop then we may be willing to reconsider after the abuse stops.
I automatically send to the abuse address, but those with "IP without abuse
team" bounced.
Best
Ale
--
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
