UUNet contact for security spambot?

Suresh Ramasubramanian suresh at outblaze.com
Mon Jan 5 16:51:18 UTC 2004


Jay Hennigan  [1/5/2004 10:14 PM] :

> Mail comes from "secmbox3 at uu.net" with a return path of "eagleeye at uu.net".

I'm getting these too, because whoever it is has been a bit too clever 
for his own good.

Like - the ARIN contact for a netblock is foo at email.com, where email.com 
is a freemail service that we run.

This genius at uunet takes the foo at email.com, determines that email.com 
admins can be best reached at postmaster at email.com, and sends us reports 
about an IP that we have zero control over.

Totally dumb, of course ... but luckily not at the sort of volume that 
is generated by zone alarm type GWF [1] software.

	srs

[1] Goober With Firewall

-- 
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations



More information about the NANOG mailing list