Sign in to follow this  
Followers 0
paulgj

ocn.ad.jp spam

15 posts in this topic

Lately I don't get a huge amount of spam but it seems like almost all the spam I do get ends up being reported to abuse[at]ocn.ad.jp.    There seems to be no letup in the quantity though, so am wondering if ocn.ad.jp is actually a known spammer friendly provider of some kind?

Share this post


Link to post
Share on other sites

I don't know about ocn.ad.jp but it would seem so.

If you would go back to one of the spam you have reported and looking at the reports sent you will find their IP address (SpamCop tracks IP addresses not domains) you could then go to https://www.spamcop.net/w3m?action=map and find the reputation of their IP address.

Share this post


Link to post
Share on other sites

apparently this provider is a major spam gateway, seems like sending spam reports to them is an exercise in futility 

Share this post


Link to post
Share on other sites

Submitting spam does feed the blocklist though.

Share this post


Link to post
Share on other sites
6 hours ago, paulgj said:

apparently this provider is a major spam gateway, seems like sending spam reports to them is an exercise in futility 

 

6 hours ago, paulgj said:

apparently this provider is a major spam gateway, seems like sending spam reports to them is an exercise in futility 

Would help if you gave a trking url?
even a IP address.
In the mean time have no idea what you are on about?

Share this post


Link to post
Share on other sites

I get too many spams latelly from ocn.ad.jp Can we do anything to this provider? Just block all of their clients. That should make them think once their normal clients start complaining for non delivered emails.

Also it is kind of funny. Gmail delivers email from this forum into spam box. Just FYI

 

Edited by lepa71

Share this post


Link to post
Share on other sites

As you can tell from this year long thread, some spammers don't change.  Reporting all spam from ocn.ad.jp and their clients that use IP addresses controlled by them, will help keep their IPs on the SpamCop block list.

1 hour ago, lepa71 said:

Also it is kind of funny. Gmail delivers email from this forum into spam box. Just FYI

Yes, many ISP's use rather dumb filters, based on domain names - not IP addresses, to filter incoming email.  Why someone would think a spammer would include the word 'spam' in their domain name and use that to filter email, I do not know.  I believe you should be able to add SpamCop.net to your white list to over-ride the basic filtering.

Share this post


Link to post
Share on other sites

I also find that a major portion of my spams are coming from their servers and I don't think abuse@ goes anywhere but into their trash. 

The address that I received emails from when I contacted them directly regarding spams is 'abuse_support@ocn.ad.jp' of which the address is listed as the "OCN Internet Security Team".
 

Edited by skydealer
update the address data

Share this post


Link to post
Share on other sites

It's pretty clear this ISP is itself a criminal organization: I've reported an IP address of theirs for sending 419 scam message over 140 times during the past year and it still continues, 3-4 times a day.

Share this post


Link to post
Share on other sites

As a follow up on my post above, I've now filed 300+ reports on 419 scam messages sent from the ocn.ad.jp system.  The content of the messages varies but it's clearly coming from one spammer.  ocn.ad.jp does nothing about it--I get 1-4 scam messages from them every day.  And if you check the Spamcop statistics for the top targets of spam reports, ocn.ad.jp is almost always in the top ten.

 

There are only two logical explanations: either it is an utterly incompetent ISP or it is actively collaborating with 419 scam criminals.

I've begged ocn.ad.jp to block any outgoing mail to my Gmail account but they don't respond.  I've requested that Gmail blacklist them but didn't get a response to that either.  I have a Gmail filter to automatically send any incoming mail from ocn.ad.jp  to the trash but the irresponsibility of this slimeball ISP still annoys me.

Share this post


Link to post
Share on other sites

It is never a good idea or productive to ask a spammer to removed you address from their emailing list.  They view any contact from you as conformation that a real person does read their email and that is success for  them. See Spammer Rules, Rule #1, Finnell's Corollary.

A more direct way to keep these spam out of your inbox is have your ISP block them or use your email app to direct them to a spam folder.  I assume you are reporting your spam to SC.  This may not help you directly, depending on how your ISP handles incoming email, but it does help others filter their email.

Share this post


Link to post
Share on other sites
On 10/12/2017 at 10:24 PM, SteveMetz said:

As a follow up on my post above, I've now filed 300+ reports on 419 scam messages sent from the ocn.ad.jp system.  The content of the messages varies but it's clearly coming from one spammer.  ocn.ad.jp does nothing about it--I get 1-4 scam messages from them every day.  And if you check the Spamcop statistics for the top targets of spam reports, ocn.ad.jp is almost always in the top ten.

 

There are only two logical explanations: either it is an utterly incompetent ISP or it is actively collaborating with 419 scam criminals.

I've begged ocn.ad.jp to block any outgoing mail to my Gmail account but they don't respond.  I've requested that Gmail blacklist them but didn't get a response to that either.  I have a Gmail filter to automatically send any incoming mail from ocn.ad.jp  to the trash but the irresponsibility of this slimeball ISP still annoys me.

send a report to your email address then use the SECRET link contained in it

User-targeted report, see notes, if any.

this will show you replies to your reports if any 

Edited by petzl

Share this post


Link to post
Share on other sites

This OCN network is by far the biggest spam network in the world and they ignore every abuse email received even more so with Spamcop because they send the emails to a non existent email address, the one OCN use is abuse_support@ocn.ad.jp

Still wont do much good because I've reported to much to them they blocked me, still spamming me with hundreds of emails a week mind

Share this post


Link to post
Share on other sites
5 hours ago, salfordian said:

This OCN network is by far the biggest spam network

A tracking URL helps. I get the odd one but not many to escalate try JP Cert always in comment IP address if that IP is AN open PROXY

cirt [at] cyberdefense [ dot ] jp 

[ Additional comments from recipient ]
cncert@cert.org.cn
183.32.221.122 is an open proxy   BOTNET
SEE https://www.abuseat.org/lookup.cgi

SEE ALSO CisCo sites REPUTATION IP LOOKUP
https://www.talosintelligence.com

If Microsoft Windows Defender is available to you, use it!
THEN Change Password

Other BOTNET hosts in this "neighborhood" with spam reports
183.32.220.123 183.32.220.134 183.32.220.135 
183.32.220.137 183.32.220.168 183.32.220.190 
183.32.220.208 183.32.220.213 183.32.220.219 
183.32.220.235 183.32.220.241 183.32.220.243 
183.32.220.245 183.32.220.247 183.32.221.1 183.32.221.5 
183.32.221.74 183.32.221.124 183.32.221.136 183.32.221.145 
183.32.221.160 183.32.221.162 183.32.221.179 
183.32.221.182 183.32.221.186 183.32.221.204 
183.32.221.207 183.32.221.246 183.32.221.248 
183.32.221.255 183.32.222.0 183.32.222.24 183.32.222.29 
183.32.222.31 183.32.222.35 183.32.222.37 183.32.222.44 
183.32.222.57 183.32.222.75 183.32.222.76 183.32.222.92 
183.32.222.93 183.32.222.107 183.32.222.115

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0