[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
I got a live one! - Spam source
- Subject: I got a live one! - Spam source
- From: ops.lists at gmail.com (Suresh Ramasubramanian)
- Date: Wed, 25 Nov 2009 11:15:20 +0530
- In-reply-to: <[email protected]>
- References: <[email protected]>
On Wed, Nov 25, 2009 at 8:52 AM, Russell Myba <rusmyba at gmail.com> wrote:
> Looks like of our customers has decided to turn their /24 into a nice little
> space spewing machine. ?Doesn't seem like just one compromised host.
>
> Reverse DNS for most of the /24 are suspicious domains. ?Each domain used in
> the message-id forwards to a single .net which lists their mailing address
> as a PO box an single link to an unsubscribe field.
Sounds like what spamhaus.org calls snowshoe. What /24 would this be?