Hi Robert,
Yeah, we opened a ticket two days back and never received a reply :(
> On 5/06/2026 7:25:04 AM, [email protected]
> <[email protected]> wrote:
>
> Send mailop mailing list submissions to
> [email protected]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://list.mailop.org/listinfo/mailop
> or, via email, send a message with subject or body 'help' to
> [email protected]
>
> You can reach the person managing the list at
> [email protected]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of mailop digest..."
>
> Today's Topics:
>
> 1. Re: OMEGATECH hacker's /22 netblock (Bill Cole)
> 2. Re: OMEGATECH hacker's /22 netblock (Atro Tossavainen)
> 3. Re: OMEGATECH hacker's /22 netblock (Michael Peddemors)
> 4. MS not allowing replies back to their own support threads
> (Robert Rubenking)
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 04 Jun 2026 08:40:07 -0400
> From: Bill Cole
> To: Jarland Donnell via mailop
> Subject: Re: [mailop] OMEGATECH hacker's /22 netblock
> Message-ID:
>
> Content-Type: text/plain; format=flowed
>
> On 2026-06-04 at 00:56:29 UTC-0400 (Wed, 03 Jun 2026 23:56:29 -0500)
> Jarland Donnell via mailop
> is rumored to have said:
>
>> Nice find. While bad networks are a dime a dozen, their events mostly
>> stay off of my radar and get handled by automation.
>
> The most useful automation I have for these sorts of scum is Spamhaus'
> DROP list. This /22 and everything else in AS202412 is listed. Free for
> all and never has a bad listing as far as I've seen.
>
>> We clocked just shy of 171,000 connection attempts from their ranges
>> in the last 30 days. Couldn't find a useful item among them. Mostly
>> brute force login attempts over SMTP to usernames with just a local
>> part, so basically just spinning wheels to watch them spin.
>>
> [...]
>>>
>>>> +1
>>>>
>>>> Name: OMEGATECH
>>>> Country: Netherlands
>>>> CIDRs: 158.94.210.0/24
>>>> Parent: 158.94.208.0 - 158.94.211.255
>>>> Registrant(s):
>>>> - Name: Abuse Contact (CA12141-RIPE)
>>>> Address: [email protected]
>>>> - Name: lir-tr-mgn-1-MNT (lir-tr-mgn-1-MNT)
>>>> Address:
>>>> - Name: Omegatech LTD (ORG-OL329-RIPE)
>>>> Address: HOUSE OF FRANCIS ROOM 303, ILE DU PORT, MAHE,
>>>> SEYCHELLES
>>>>
>>>>
>
> In my experience, RIPE registrations to entities claiming to be in the
> Seychelles are entirely ignorable. Treat those addresses like bogons.
>
> --
> Bill Cole
> [email protected] or [email protected]
> (AKA @[email protected] and many *@billmail.scconsult.com
> addresses)
> Please keep discussion mailing list replies *on-list*
> Not Currently Available For Hire
>
> ------------------------------
>
> Message: 2
> Date: Thu, 4 Jun 2026 16:07:23 +0300
> From: Atro Tossavainen
> To: mailop
> Subject: Re: [mailop] OMEGATECH hacker's /22 netblock
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset=iso-8859-1
>
>> The most useful automation I have for these sorts of scum is
>> Spamhaus' DROP list. This /22 and everything else in AS202412 is
>> listed. Free for all and never has a bad listing as far as I've
>> seen.
>
> Indeed I already asked in a previous message why anybody felt the need
> to accept any traffic from networks on the Spamhaus DROP. The original
> poster(s) don't seem to have noticed it.
>
>> In my experience, RIPE registrations to entities claiming to be in
>> the Seychelles are entirely ignorable. Treat those addresses like
>> bogons.
>
> Another excellent observation.
>
> --
> Atro Tossavainen, Founder, Partner
> Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635)
> Tallinn, Estonia
> tel. +372-5883-4269, https://www.koliloks.eu/
>
> ------------------------------
>
> Message: 3
> Date: Thu, 4 Jun 2026 08:58:51 -0700
> From: Michael Peddemors
> To: [email protected]
> Subject: Re: [mailop] OMEGATECH hacker's /22 netblock
> Message-ID:
> Content-Type: text/plain; charset=UTF-8; format=flowed
>
> For the record.. actors on these blocks are also operating a large
> botnet used for password spray attacks..
>
> There is a reason they are on SpamHaus and SpamRats DROP Lists..
>
> On 2026-06-04 06:07, Atro Tossavainen via mailop wrote:
>>> The most useful automation I have for these sorts of scum is
>>> Spamhaus' DROP list. This /22 and everything else in AS202412 is
>>> listed. Free for all and never has a bad listing as far as I've
>>> seen.
>>
>> Indeed I already asked in a previous message why anybody felt the need
>> to accept any traffic from networks on the Spamhaus DROP. The original
>> poster(s) don't seem to have noticed it.
>>
>>> In my experience, RIPE registrations to entities claiming to be in
>>> the Seychelles are entirely ignorable. Treat those addresses like
>>> bogons.
>>
>> Another excellent observation.
>>
>
> --
> "Catch the Magic of Linux..."
> ------------------------------------------------------------------------
> Michael Peddemors, President/CEO LinuxMagic Inc.
> Visit us at http://www.linuxmagic.com @linuxmagic
> A Wizard IT Company - For More Info http://www.wizard.ca
> "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> ------------------------------------------------------------------------
> 604-682-0300 Beautiful British Columbia, Canada
>
> ------------------------------
>
> Message: 4
> Date: Thu, 4 Jun 2026 21:16:02 +0000
> From: Robert Rubenking
> To: "[email protected]"
> Subject: [mailop] MS not allowing replies back to their own support
> threads
> Message-ID:
>
> Content-Type: text/plain; charset="utf-8"
>
> Hey all and MS if you’re listening 😊
>
> Anyone else having issues with attempting to reply to MS support requests?
> I forwarded my response to [email protected]
>
> This is literally just me trying to escalate/respond back in reply form to
> [email protected] and no attempt to relay. I also tried
> from OWA via o365 to see if it were some weird off chance an Exchange admin
> thing(?);
>
> [cid:[email protected]]
>
> Thanks,
> Bob
>
> [cid:[email protected]]
> Bob Rubenking | Deliverability Program Manager
>
> Managing Directors: James Brooke
>
> This e-mail is from Mapp Digital Group and its international legal entities
> and may contain information that is confidential. If you are not the intended
> recipient, do not read, copy or distribute the e-mail or any attachments.
> Instead, please notify the sender and delete the e-mail and any attachments.
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: image001.png
> Type: image/png
> Size: 54516 bytes
> Desc: image001.png
> URL:
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: image002.png
> Type: image/png
> Size: 17092 bytes
> Desc: image002.png
> URL:
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> mailop mailing list
> [email protected]
> https://list.mailop.org/listinfo/mailop
>
> ------------------------------
>
> End of mailop Digest, Vol 71, Issue 10
> **************************************
> @outlook.mail.microsoft>@microsoftsupport.com>@sj0pr10mb5470.namprd10.prod.outlook.com>@mailop.org>@mapp.com>@linuxmagic.com>@linuxmagic.com>@mailop.org>@atrotossavainen.fi>@mxroute.com>@billmail.scconsult.com>@mailop.org>@billmail.scconsult.com>
[f1ccbea4-ac32-4937-bb6d-eb8fab148505]
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
