Spamcop-Top200 Weekly 2023-03-17 : US(64:39_910_426); AS16509/US(3:28_867_862); 18.220.169.251(1:28_813_263) US AS16509

[A. Filip]

Spamcop.net Top200 source: https://www.spamcop.net/hoshame.shtml
For the week ending 2023-03-17T11:37:13+00:00 IPv4 reports total 47_810_972
For the week ending 2023-03-17T11:37:14+00:00 IPv6 reports total 167_932
IP address to country and ASN mapping by whois.cymru.com
Stats generated for 200 IPv4 addresses and 17 IPv6 adresses
Cutoff at Spamcop.net 200:IPv4 : 3043 reports
Spamcop.net 1:IPv6 : 8894 reports

#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + Top 1 IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
1. 1:IPv4 28_813_263 4 hours US AS16509 18.220.169.251
2. 2:IPv4 6_475_092 23 hours IL AS41436/US 45.91.169.103
3. 3:IPv4 795_287 4 hours US AS36352 107.172.44.130
4. 4:IPv4 536_478 4 hours US AS36352 172.245.23.140
5. 5:IPv4 534_633 45 hours US AS36352 104.168.34.178
6. 6:IPv4 475_572 45 hours US AS36352 104.168.34.177
7. 7:IPv4 438_674 46 hours US AS36352 104.168.34.187
8. 8:IPv4 429_234 44 hours US AS36352 104.168.34.168
9. 9:IPv4 400_790 4 hours RU AS39593 136.169.211.68
10. 10:IPv4 299_853 4 hours GB AS31655 51.52.97.232
123. 1:IPv6 8_894 4 hours AR AS4270 2800:110:44:6100:0:0:0:2
140. 137:IPv4 7_241 19 hours US AS15169 209.85.220.97
https://dnswl.org/s/?s=209.85.220.97 Trust=none google.com
212. 195:IPv4 3_225 2.6 days US AS15169 209.85.220.101
https://dnswl.org/s/?s=209.85.220.101 Trust=none google.com
217. 200:IPv4 3_043 - - -
5_320_939 - - *

#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
1. AS16509 3 28_867_862 AMAZON-02, US
[Top-IP:1]
2. AS41436 1 6_475_092 CLOUDWEBMANAGE-EU, US
[Top-IP:2]
3. AS36352 23 4_235_354 AS-COLOCROSSING, US
[Top-IP:3,4,5,6,7,8]
4. AS137386 3 562_339 CW-AS-AP Child Wisdom Limited, HK
5. AS31133 32 541_983 MF-MGSM-AS PJSC MegaFon, RU
6. AS31655 2 487_331 ASN-GAMMATELECOM, GB
[Top-IP:10]
7. AS16276 9 419_408 OVH, FR
8. AS39593 1 400_790 ML-AS, RU
[Top-IP:9]
9. AS45382 7 229_394 EHOSTIDC-AS-KR EHOSTICT, KR
10. AS262514 3 215_860 Telecomdados Servicos LTDA, BR
22. AS15169 4 49_176 GOOGLE, US
[Top-IP:140(dnswl-none),212(dnswl-none)]
64. AS4270 1 8_894 Red de Interconexion Universitaria, AR
[Top-IP:123(1:IPv6)]
94. - 1 3_228 -
* 127 2_045_507

#### Entries and reports count by country
#### [Top-Country: Top 5 countries + listed in Top-IP + listed in Top-AS]
#No. Reports ASes_with_stats
1. US 64 39_910_426 AS16509(3:28_867_862) AS41436(1:6_475_092)
AS36352(23:4_235_354) AS8075(5:62_830)
AS211252(5:51_477) AS15169(4:49_176)
AS14061(3:29_272) AS7922(2:13_311)
AS397031(1:13_294) AS396982(1:13_136)
AS11426(2:12_385) AS33363(1:12_318)
AS11404(2:12_278) AS399471(1:9_060)
AS13490(1:7_866) AS33588(1:7_294) AS22773(1:7_129)
AS20473(1:5_490) AS7018(1:5_376) AS31898(1:4_735)
AS10796(1:4_511) AS11427(1:4_383) AS20001(1:3_556)
AS36007(1:3_241)
[Top-IP:1,2,3,4,5,6,7,8,140(dnswl-none),
212(dnswl-none) + Top-AS:1,2,3]
2. IL 2 6_487_665 AS41436/US(1:6_475_092) AS1680(1:12_573)
[Top-IP:2]
3. RU 53 1_485_606 AS31133(32:541_983) AS39593(1:400_790)
AS12389(7:183_653) AS210616(1:166_189)
AS41786(4:102_594) AS207713(1:19_238)
AS39156(1:18_356) AS48614(2:16_738)
AS45027(1:12_458) AS42610(1:11_432)
AS196949(1:6_906) AS29124(1:5_269)
[Top-IP:9 + Top-AS:5,8]
-. eu 26 629_322 FR(10:424_730) CZ(5:66_783) DK(1:34_214)
BG(3:29_945) ES(1:27_524) RO(3:19_401) NL(2:16_738)
DE(1:9_987)
[Top-AS:7]
-. cn 14 627_065 HK(3:562_339) CN(11:64_726)
[Top-AS:4]
4. HK 3 562_339 AS137386(3:562_339)
[Top-AS:4]
5. GB 2 487_331 AS31655(2:487_331)
[Top-IP:10 + Top-AS:6]
6. BR 21 433_043 AS262514(3:215_860) AS28182(5:50_822)
AS10429(4:49_280) AS268601(2:42_936)
AS28191(2:27_624) AS8167(1:12_675)
AS18881(1:11_051) AS7738(1:9_830) AS14868(1:8_182)
AS271305(1:4_783)
[Top-AS:10]
7. FR 10 424_730 AS16276(9:419_408) AS12876(1:5_322)
[Top-AS:7]
10. KR 10 246_096 AS45382(7:229_394) AS3786(1:6_592) AS9318(1:6_179)
AS38121(1:3_931)
[Top-AS:9]
33. AR 1 8_894 AS4270(1:8_894)
[Top-IP:123(1:IPv6)]
41. - 1 4_659 -

[The Doctor]

Post by A. Filip
Spamcop.net Top200 source: https://www.spamcop.net/hoshame.shtml
For the week ending 2023-03-17T11:37:13+00:00 IPv4 reports total 47_810_972
For the week ending 2023-03-17T11:37:14+00:00 IPv6 reports total 167_932
IP address to country and ASN mapping by whois.cymru.com
Stats generated for 200 IPv4 addresses and 17 IPv6 adresses
Cutoff at Spamcop.net 200:IPv4 : 3043 reports
Spamcop.net 1:IPv6 : 8894 reports
#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + Top 1 IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
1. 1:IPv4 28_813_263 4 hours US AS16509 18.220.169.251
2. 2:IPv4 6_475_092 23 hours IL AS41436/US 45.91.169.103
3. 3:IPv4 795_287 4 hours US AS36352 107.172.44.130
4. 4:IPv4 536_478 4 hours US AS36352 172.245.23.140
5. 5:IPv4 534_633 45 hours US AS36352 104.168.34.178
6. 6:IPv4 475_572 45 hours US AS36352 104.168.34.177
7. 7:IPv4 438_674 46 hours US AS36352 104.168.34.187
8. 8:IPv4 429_234 44 hours US AS36352 104.168.34.168
9. 9:IPv4 400_790 4 hours RU AS39593 136.169.211.68
10. 10:IPv4 299_853 4 hours GB AS31655 51.52.97.232
123. 1:IPv6 8_894 4 hours AR AS4270 2800:110:44:6100:0:0:0:2
140. 137:IPv4 7_241 19 hours US AS15169 209.85.220.97
https://dnswl.org/s/?s=209.85.220.97 Trust=none google.com
212. 195:IPv4 3_225 2.6 days US AS15169 209.85.220.101
https://dnswl.org/s/?s=209.85.220.101 Trust=none google.com
217. 200:IPv4 3_043 - - -
5_320_939 - - *
#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
1. AS16509 3 28_867_862 AMAZON-02, US
[Top-IP:1]
2. AS41436 1 6_475_092 CLOUDWEBMANAGE-EU, US
[Top-IP:2]
3. AS36352 23 4_235_354 AS-COLOCROSSING, US
[Top-IP:3,4,5,6,7,8]
4. AS137386 3 562_339 CW-AS-AP Child Wisdom Limited, HK
5. AS31133 32 541_983 MF-MGSM-AS PJSC MegaFon, RU
6. AS31655 2 487_331 ASN-GAMMATELECOM, GB
[Top-IP:10]
7. AS16276 9 419_408 OVH, FR
8. AS39593 1 400_790 ML-AS, RU
[Top-IP:9]
9. AS45382 7 229_394 EHOSTIDC-AS-KR EHOSTICT, KR
10. AS262514 3 215_860 Telecomdados Servicos LTDA, BR
22. AS15169 4 49_176 GOOGLE, US
[Top-IP:140(dnswl-none),212(dnswl-none)]
64. AS4270 1 8_894 Red de Interconexion Universitaria, AR
[Top-IP:123(1:IPv6)]
94. - 1 3_228 -
* 127 2_045_507
#### Entries and reports count by country
#### [Top-Country: Top 5 countries + listed in Top-IP + listed in Top-AS]
#No. Reports ASes_with_stats
1. US 64 39_910_426 AS16509(3:28_867_862) AS41436(1:6_475_092)
AS36352(23:4_235_354) AS8075(5:62_830)
AS211252(5:51_477) AS15169(4:49_176)
AS14061(3:29_272) AS7922(2:13_311)
AS397031(1:13_294) AS396982(1:13_136)
AS11426(2:12_385) AS33363(1:12_318)
AS11404(2:12_278) AS399471(1:9_060)
AS13490(1:7_866) AS33588(1:7_294) AS22773(1:7_129)
AS20473(1:5_490) AS7018(1:5_376) AS31898(1:4_735)
AS10796(1:4_511) AS11427(1:4_383) AS20001(1:3_556)
AS36007(1:3_241)
[Top-IP:1,2,3,4,5,6,7,8,140(dnswl-none),
212(dnswl-none) + Top-AS:1,2,3]
2. IL 2 6_487_665 AS41436/US(1:6_475_092) AS1680(1:12_573)
[Top-IP:2]
3. RU 53 1_485_606 AS31133(32:541_983) AS39593(1:400_790)
AS12389(7:183_653) AS210616(1:166_189)
AS41786(4:102_594) AS207713(1:19_238)
AS39156(1:18_356) AS48614(2:16_738)
AS45027(1:12_458) AS42610(1:11_432)
AS196949(1:6_906) AS29124(1:5_269)
[Top-IP:9 + Top-AS:5,8]
-. eu 26 629_322 FR(10:424_730) CZ(5:66_783) DK(1:34_214)
BG(3:29_945) ES(1:27_524) RO(3:19_401) NL(2:16_738)
DE(1:9_987)
[Top-AS:7]
-. cn 14 627_065 HK(3:562_339) CN(11:64_726)
[Top-AS:4]
4. HK 3 562_339 AS137386(3:562_339)
[Top-AS:4]
5. GB 2 487_331 AS31655(2:487_331)
[Top-IP:10 + Top-AS:6]
6. BR 21 433_043 AS262514(3:215_860) AS28182(5:50_822)
AS10429(4:49_280) AS268601(2:42_936)
AS28191(2:27_624) AS8167(1:12_675)
AS18881(1:11_051) AS7738(1:9_830) AS14868(1:8_182)
AS271305(1:4_783)
[Top-AS:10]
7. FR 10 424_730 AS16276(9:419_408) AS12876(1:5_322)
[Top-AS:7]
10. KR 10 246_096 AS45382(7:229_394) AS3786(1:6_592) AS9318(1:6_179)
AS38121(1:3_931)
[Top-AS:9]
33. AR 1 8_894 AS4270(1:8_894)
[Top-IP:123(1:IPv6)]
41. - 1 4_659 -

Yet again a case of The Bigger you are, the more Arrogant you can be!

[Andrzej Adam Filip]

Post by The Doctor

Post by A. Filip
[…]
#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + Top 1 IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
1. 1:IPv4 28_813_263 4 hours US AS16509 18.220.169.251
2. 2:IPv4 6_475_092 23 hours IL AS41436/US 45.91.169.103
[…]
#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
1. AS16509 3 28_867_862 AMAZON-02, US
[Top-IP:1]
[…]

Yet again a case of The Bigger you are, the more Arrogant you can be!

Could you be more specific?

[Andrzej Adam Filip]

Post by Andrzej Adam Filip

Post by The Doctor

Post by A. Filip
[…]
#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + Top 1 IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
1. 1:IPv4 28_813_263 4 hours US AS16509 18.220.169.251
2. 2:IPv4 6_475_092 23 hours IL AS41436/US 45.91.169.103
[…]
#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
1. AS16509 3 28_867_862 AMAZON-02, US
[Top-IP:1]
[…]

Yet again a case of The Bigger you are, the more Arrogant you can be!

Could you be more specific?

18.220.169.251 (ec2-18-220-169-251.us-east-2.compute.amazonaws.com) is
not listed by RBLa [A]. It most likely means it sends no spam itself
but it is a spamverized website. Sadly AFAIK spamcop.net does not
provide publicly separate statistic for spam sources and spamvertized
websites.

I remember spam/scams with links to BBC news. I am quite sure that some
people reported BBC links. Some tools/sites used/abused by spammers put
"producer/hosted by link" is email signature.

[A] https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a18.220.169.251&run=toolpage

[The Doctor]

Post by Andrzej Adam Filip

Post by Andrzej Adam Filip

Post by The Doctor

Post by A. Filip
[
]
#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + Top 1 IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
1. 1:IPv4 28_813_263 4 hours US AS16509 18.220.169.251
2. 2:IPv4 6_475_092 23 hours IL AS41436/US 45.91.169.103
[
]
#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
1. AS16509 3 28_867_862 AMAZON-02, US
[Top-IP:1]
[
]

Yet again a case of The Bigger you are, the more Arrogant you can be!

Could you be more specific?

18.220.169.251 (ec2-18-220-169-251.us-east-2.compute.amazonaws.com) is
not listed by RBLa [A]. It most likely means it sends no spam itself
but it is a spamverized website. Sadly AFAIK spamcop.net does not
provide publicly separate statistic for spam sources and spamvertized
websites.
I remember spam/scams with links to BBC news. I am quite sure that some
people reported BBC links. Some tools/sites used/abused by spammers put
"producer/hosted by link" is email signature.
[A]
https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a18.220.169.251&run=toolpage

Googd News: Amazon will acknowledge their faults.

Post by Andrzej Adam Filip
--
A. Filip

[The Doctor]

Post by Andrzej Adam Filip

Post by The Doctor

Post by A. Filip
[
]
#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + Top 1 IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
1. 1:IPv4 28_813_263 4 hours US AS16509 18.220.169.251
2. 2:IPv4 6_475_092 23 hours IL AS41436/US 45.91.169.103
[
]
#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
1. AS16509 3 28_867_862 AMAZON-02, US
[Top-IP:1]
[
]

Yet again a case of The Bigger you are, the more Arrogant you can be!

Could you be more specific?

Google and Microsoft for starters.

Post by Andrzej Adam Filip
--
A. Filip