As recently as 2nd June I got a status=sent 250 / Queued mail for delivery to 
[email protected]…
Doesn't mean they respond though (4 emails sent to that address over last 2 
weeks, zero responses).


On Friday, June 05, 2026 07:28 AEST, Areeb via mailop <[email protected]> wrote:

 
Hi Robert,  Yeah, we opened a ticket two days back and never received a reply :(
On 5/06/2026 7:25:04 AM, [email protected] <[email protected]> 
wrote:Send mailop mailing list submissions to 
[email protected] 

To subscribe or unsubscribe via the World Wide Web, visit 
https://list.mailop.org/listinfo/mailop 
or, via email, send a message with subject or body 'help' to 
[email protected] 

You can reach the person managing the list at 
[email protected] 

When replying, please edit your Subject line so it is more specific 
than "Re: Contents of mailop digest..." 


Today's Topics: 

1. Re: OMEGATECH hacker's /22 netblock (Bill Cole) 
2. Re: OMEGATECH hacker's /22 netblock (Atro Tossavainen) 
3. Re: OMEGATECH hacker's /22 netblock (Michael Peddemors) 
4. MS not allowing replies back to their own support threads 
(Robert Rubenking) 


---------------------------------------------------------------------- 

Message: 1 
Date: Thu, 04 Jun 2026 08:40:07 -0400 
From: Bill Cole 
To: Jarland Donnell via mailop 
Subject: Re: [mailop] OMEGATECH hacker's /22 netblock 
Message-ID: 

Content-Type: text/plain; format=flowed 

On 2026-06-04 at 00:56:29 UTC-0400 (Wed, 03 Jun 2026 23:56:29 -0500) 
Jarland Donnell via mailop 
is rumored to have said: 

> Nice find. While bad networks are a dime a dozen, their events mostly 
> stay off of my radar and get handled by automation. 

The most useful automation I have for these sorts of scum is Spamhaus' 
DROP list. This /22 and everything else in AS202412 is listed. Free for 
all and never has a bad listing as far as I've seen. 

> We clocked just shy of 171,000 connection attempts from their ranges 
> in the last 30 days. Couldn't find a useful item among them. Mostly 
> brute force login attempts over SMTP to usernames with just a local 
> part, so basically just spinning wheels to watch them spin. 
> 
[...] 
>> 
>>> +1 
>>> 
>>> Name: OMEGATECH 
>>> Country: Netherlands 
>>> CIDRs: 158.94.210.0/24 
>>> Parent: 158.94.208.0 - 158.94.211.255 
>>> Registrant(s): 
>>> - Name: Abuse Contact (CA12141-RIPE) 
>>> Address: [email protected] 
>>> - Name: lir-tr-mgn-1-MNT (lir-tr-mgn-1-MNT) 
>>> Address: 
>>> - Name: Omegatech LTD (ORG-OL329-RIPE) 
>>> Address: HOUSE OF FRANCIS ROOM 303, ILE DU PORT, MAHE, 
>>> SEYCHELLES 
>>> 
>>> 

In my experience, RIPE registrations to entities claiming to be in the 
Seychelles are entirely ignorable. Treat those addresses like bogons. 



-- 
Bill Cole 
[email protected] or [email protected] 
(AKA @[email protected] and many *@billmail.scconsult.com 
addresses) 
Please keep discussion mailing list replies *on-list* 
Not Currently Available For Hire 


------------------------------ 

Message: 2 
Date: Thu, 4 Jun 2026 16:07:23 +0300 
From: Atro Tossavainen 
To: mailop 
Subject: Re: [mailop] OMEGATECH hacker's /22 netblock 
Message-ID: <[email protected]> 
Content-Type: text/plain; charset=iso-8859-1 

> The most useful automation I have for these sorts of scum is 
> Spamhaus' DROP list. This /22 and everything else in AS202412 is 
> listed. Free for all and never has a bad listing as far as I've 
> seen. 

Indeed I already asked in a previous message why anybody felt the need 
to accept any traffic from networks on the Spamhaus DROP. The original 
poster(s) don't seem to have noticed it. 

> In my experience, RIPE registrations to entities claiming to be in 
> the Seychelles are entirely ignorable. Treat those addresses like 
> bogons. 

Another excellent observation. 

-- 
Atro Tossavainen, Founder, Partner 
Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635) 
Tallinn, Estonia 
tel. +372-5883-4269, https://www.koliloks.eu/ 


------------------------------ 

Message: 3 
Date: Thu, 4 Jun 2026 08:58:51 -0700 
From: Michael Peddemors 
To: [email protected] 
Subject: Re: [mailop] OMEGATECH hacker's /22 netblock 
Message-ID: 
Content-Type: text/plain; charset=UTF-8; format=flowed 

For the record.. actors on these blocks are also operating a large 
botnet used for password spray attacks.. 

There is a reason they are on SpamHaus and SpamRats DROP Lists.. 

On 2026-06-04 06:07, Atro Tossavainen via mailop wrote: 
>> The most useful automation I have for these sorts of scum is 
>> Spamhaus' DROP list. This /22 and everything else in AS202412 is 
>> listed. Free for all and never has a bad listing as far as I've 
>> seen. 
> 
> Indeed I already asked in a previous message why anybody felt the need 
> to accept any traffic from networks on the Spamhaus DROP. The original 
> poster(s) don't seem to have noticed it. 
> 
>> In my experience, RIPE registrations to entities claiming to be in 
>> the Seychelles are entirely ignorable. Treat those addresses like 
>> bogons. 
> 
> Another excellent observation. 
> 


-- 
"Catch the Magic of Linux..." 
------------------------------------------------------------------------ 
Michael Peddemors, President/CEO LinuxMagic Inc. 
Visit us at http://www.linuxmagic.com @linuxmagic 
A Wizard IT Company - For More Info http://www.wizard.ca 
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd. 
------------------------------------------------------------------------ 
604-682-0300 Beautiful British Columbia, Canada 



------------------------------ 

Message: 4 
Date: Thu, 4 Jun 2026 21:16:02 +0000 
From: Robert Rubenking 
To: "[email protected]" 
Subject: [mailop] MS not allowing replies back to their own support 
threads 
Message-ID: 


Content-Type: text/plain; charset="utf-8" 

Hey all and MS if you’re listening 😊 

Anyone else having issues with attempting to reply to MS support requests? 
I forwarded my response to [email protected] 


This is literally just me trying to escalate/respond back in reply form to 
[email protected] and no attempt to relay. I also tried 
from OWA via o365 to see if it were some weird off chance an Exchange admin 
thing(?); 

[cid:[email protected]] 




Thanks, 
Bob 




[cid:[email protected]] 
Bob Rubenking | Deliverability Program Manager 

Managing Directors: James Brooke 

This e-mail is from Mapp Digital Group and its international legal entities and 
may contain information that is confidential. If you are not the intended 
recipient, do not read, copy or distribute the e-mail or any attachments. 
Instead, please notify the sender and delete the e-mail and any attachments. 
-------------- next part -------------- 
An HTML attachment was scrubbed... 
URL: 
-------------- next part -------------- 
A non-text attachment was scrubbed... 
Name: image001.png 
Type: image/png 
Size: 54516 bytes 
Desc: image001.png 
URL: 
-------------- next part -------------- 
A non-text attachment was scrubbed... 
Name: image002.png 
Type: image/png 
Size: 17092 bytes 
Desc: image002.png 
URL: 

------------------------------ 

Subject: Digest Footer 

_______________________________________________ 
mailop mailing list 
[email protected] 
https://list.mailop.org/listinfo/mailop 


------------------------------ 

End of mailop Digest, Vol 71, Issue 10 
************************************** 



 
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to