Re: [mailop] mx abuse listed in spamhaus by mistake

2020-01-14 Thread John Levine via mailop
In article <083b022641fd49f3ec6e56e190f21663737f4294.ca...@wemonitoremail.com> you write: >Something is infected. I see what's going on. Nothing is infected. I am doing a random survey of .org domain web pages to collect some statistics. Purely by chance it hit a domain which is a C&C sinkhole,

Re: [mailop] mx abuse listed in spamhaus?

2020-01-14 Thread John Levine via mailop
In article <083b022641fd49f3ec6e56e190f21663737f4294.ca...@wemonitoremail.com> you write: >On Tue, 2020-01-14 at 10:44 +, J Orlando Letra via mailop wrote: >> does any one have this problem? >> > >As per https://www.abuseat.org/lookup.cgi?ip=64.57.183.53 the IP was >detected sending or relayi

Re: [mailop] mx abuse listed in spamhaus?

2020-01-14 Thread Stuart Henderson via mailop
On 2020/01/14 12:32, Laura Atkins wrote: > > On 14 Jan 2020, at 11:58, Stuart Henderson via mailop > wrote: > > On 2020/01/14 11:37, Ken O'Driscoll via mailop wrote: > > On Tue, 2020-01-14 at 10:44 +, J Orlando Letra via mailop wrote: > > does any one have this

Re: [mailop] mx abuse listed in spamhaus?

2020-01-14 Thread Laura Atkins via mailop
> On 14 Jan 2020, at 11:58, Stuart Henderson via mailop > wrote: > > On 2020/01/14 11:37, Ken O'Driscoll via mailop wrote: >> On Tue, 2020-01-14 at 10:44 +, J Orlando Letra via mailop wrote: >>> does any one have this problem? >>> >> >> As per https://www.abuseat.org/lookup.cgi?ip=64.57.1

Re: [mailop] mx abuse listed in spamhaus?

2020-01-14 Thread Stuart Henderson via mailop
On 2020/01/14 11:37, Ken O'Driscoll via mailop wrote: > On Tue, 2020-01-14 at 10:44 +, J Orlando Letra via mailop wrote: > > does any one have this problem? > > > > As per https://www.abuseat.org/lookup.cgi?ip=64.57.183.53 the IP was > detected sending or relaying IP traffic which matches a k

Re: [mailop] mx abuse listed in spamhaus?

2020-01-14 Thread Ken O'Driscoll via mailop
On Tue, 2020-01-14 at 10:44 +, J Orlando Letra via mailop wrote: > does any one have this problem? > As per https://www.abuseat.org/lookup.cgi?ip=64.57.183.53 the IP was detected sending or relaying IP traffic which matches a known virus botnet signature. In this case the "ranbyus" virus. So