Blacklisted IP/range/domain: *.ru.com *.sa.com Reason: UBE from disposable $0.01 domains registered via sav.com

Blacklisted IP/range/domain:

$0.01 spam domains blocked

• *.ru.com
• *.sa.com

Reason(s):

• UBE from disposable $0.01 ru.com domains registered via sav.com
• UBE from disposable $0.01 sa.com domains registered via sav.com

Cheap $0.01 registrations will result in spam abuse.
All cheap disposable sub domains that enable spammers this way will be blocked.

Blacklist code:

• /\.ru.com$/ REJECT Blacklisted by https://abuse.privacy4all.org
• /\.sa.com$/ REJECT Blacklisted by https://abuse.privacy4all.org

Evidence:

3 strikes and *.ru.com is out.

Jul 28 19:38:39 behemoth postfix/smtpd[17763]: NOQUEUE: reject: RCPT from unknown[104.148.94.165]: 554 5.7.1 <unknown[104.148.94.165]>: Client host rejected: IP blacklisted reason: UBE from 104.148.94.131 – unlist via https://abuse.privacy4all.org; from=<[email protected]> to=<x> proto=ESMTP helo=<riceveil.ru.com>
Jul 28 21:24:33 behemoth postfix/smtpd[23932]: NOQUEUE: reject: RCPT from unknown[104.148.94.167]: 554 5.7.1 <unknown[104.148.94.167]>: Client host rejected: IP blacklisted reason: UBE from 104.148.94.131 – unlist via https://abuse.privacy4all.org; from=<[email protected]> to=<x> proto=ESMTP helo=<addslot.ru.com>
Jul 28 23:29:02 behemoth postfix/smtpd[32331]: NOQUEUE: reject: RCPT from unknown[104.148.94.169]: 554 5.7.1 <unknown[104.148.94.169]>: Client host rejected: IP blacklisted reason: UBE from 104.148.94.131 – unlist via https://abuse.privacy4all.org; from=<[email protected]> to=<x> proto=ESMTP helo=<aidsexit.ru.com>

3 strikes and *.sa.com is out.

Jul 28 15:57:23 behemoth postfix/smtpd[6190]: NOQUEUE: reject: RCPT from unknown[104.148.94.160]: 554 5.7.1 <unknown[104.148.94.160]>: Client host rejected: IP blacklisted reason: UBE from 104.148.94.131 – unlist via https://abuse.privacy4all.org; from=<[email protected]> to=<x> proto=ESMTP helo=<feedcurl.sa.com>
Jul 28 17:55:31 behemoth postfix/smtpd[12770]: NOQUEUE: reject: RCPT from unknown[104.148.94.164]: 554 5.7.1 <unknown[104.148.94.164]>: Client host rejected: IP blacklisted reason: UBE from 104.148.94.131 – unlist via https://abuse.privacy4all.org; from=<[email protected]> to=<x> proto=ESMTP helo=<leadwood.sa.com>
Jul 28 20:47:35 behemoth postfix/smtpd[21742]: NOQUEUE: reject: RCPT from unknown[104.148.94.166]: 554 5.7.1 <unknown[104.148.94.166]>: Client host rejected: IP blacklisted reason: UBE from 104.148.94.131 – unlist via https://abuse.privacy4all.org; from=<[email protected]> to=<x> proto=ESMTP helo=<loveboom.sa.com>

Abuse contacts:

Registrar Abuse Contact Email: [email protected] (does not work sav Abuse auto reply comes from a blocked UBE sendgrid range)

Owner of SA.com & RU.COM RFC2142 [email protected]

—
Abuse Team Privacy4all.org
GDPR Note: any evidence we provide in a report will be limited or redacted