Hi Axel

On 27.10.22 16:15, Axel Beckert wrote:
I assume that most of these mails looked like this one.

I can confirm that we got an email with the same content on our peering and noc addresses last Friday night, but it was back dated to Tuesday, so it got marked as spam pretty heavily.

Here's a snippet from the headers, I only redacted the mail server's IP, in case they are an unrelated email server.

--------
Received: from unknown (HELO ZmoTAQamBxvqwGzx) ([REDACTED-IP])
by mx4.switch.ch with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Oct 2022 23:38:33 +0200
Received: by ZmoTAQamBxvqwGzx (Postfix, from userid 0)
        id 5EC8FAA54A; Tue, 25 Oct 2022 19:39:33 +0200 (CEST)
From: <[email protected]>
Subject: Abuse report
To: <[email protected]>
X-Mailer: mail (GNU Mailutils 3.7)
Message-ID: <20221025173933.5EC8FAA54A@ZmoTAQamBxvqwGzx>
Date: Tue, 25 Oct 2022 19:39:33 +0200
Return-Path: [email protected]
X-MS-Exchange-Organization-Network-Message-Id: 1bd4bc1c-d9e4-4c38-08bd-08dab92ce80c
Content-Type: text/plain
--------

If anything this kind of thing makes the senders seem even less trustworthy.

Best,
Joel

--
Joel Busch, Network

SWITCH
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 30, direct +41 44 268 16 58
https://switch.ch  https://swit.ch/linkedin  https://swit.ch/twitter
_______________________________________________
swinog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Antwort per Email an