Vick Khera wrote:
On Wed, May 25, 2016 at 3:02 PM, Erwin Harte <eha...@barracuda.com <mailto:eha...@barracuda.com>> wrote:I did a spot check of a recent attack. The email address was jabradb...@kanawhascales.com <mailto:jabradb...@kanawhascales.com> and it got signed up to 12 lists during May 17 and 18. Amazingly, whoever is on the other end of that address clicked to confirm every one of those confirmation messages. All confirmation clicks appear to come from a netblock owned by Barracuda Networks... Hmm...Which netblock was that? 64.235.144.0/20 <http://64.235.144.0/20>Specifically: 64.235.154.109, 64.235.153.2, 64.235.150.252, 64.235.153.10, 64.235.154.105, 64.235.154.109
Single click through? (as in everything in the URL?) - if so probably automated mail scanning.
-- Michelle Sullivan http://www.mhix.org/ _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
