Hi, >> They all seem to be coming from IP's all by the same netblock owner. >> >> Here are some of them, but there are many many more.. It just started like >> 5 days ago. >> >> 66.96.253.241 >> 64.120.241.228 >> 66.197.142.29 >> 66.197.142.23 >> 66.197.207.152 >> 66.197.177.174 >> 64.191.61.25 >> >> OrgName: Network Operations Center Inc. > > *nod* I recently flagged them as a nuisance netblock owner in the > internal DNSBL[1] here. I've been seeing them for years.
Do you have a method for collecting them, or is it done manually? How do you calculate the netblock, or do you just block the specific IP or the whole class C? Have you included those which are on the Spamhaus block list? http://www.spamhaus.org/drop/drop.txt Alas, the IPs mentioned above aren't on that list. Thanks for the work on your DNSBL. Definitely have to implement that. Perhaps I'll just start with blocking outright at the SMTP level. Thanks, Alex
