Get your Amazon Gift Card? fightspam.ca

It’s Xmas time, so of course this is the time of year when people try to take advantage, have you ever got one of those surprise Amazon Gift Cards in the email? Well, here is an example of what hit … Continue reading

Posted in Informative | Tagged , , , , | Leave a comment

How easy it is for spammers to get IP(s)

It used to be the spammer’s favourite trick was to use virus’s, trojans etc to take over home computers to send spam, but spammers have found that often it is easier just to order IP Space. Some hosting companies look … Continue reading

Posted in Informative | Tagged , , , | Leave a comment

Linode Outbreaks, why PTR Important

Today’s report is about Linode, but of course this could be about many different providers, and is a reason why the ability to block emails based on the PTR records is important, and it is best when it can be … Continue reading

Posted in Informative, Uncategorized | Tagged , , , | Leave a comment

Rejecting ‘before’ SMTP processes

It is always surprising how much benefit you can get by blocking at the edge, on very simple rule sets, and how much load can be reduced. Of course it depends on your implementation, sometimes that means blocking at the … Continue reading

Posted in Informative | Tagged , , , , , , , | Leave a comment

RIPE Bulgaria, what is going on?

While we all see occasional false information used by spammers to get hosting IP Space, in an age where IPv4 addresses are scarce you always wonder when large swathes of brand new IP space are used for spamming. And in … Continue reading

Posted in Informative | Tagged , , , , | Leave a comment

SoftLayer spam increase

While every hosting company has challenges with preventing spam outbreaks, and some do better than others, we occasionally see a trend that indicates a larger issue. This could be related to a general security issue, or a systemic deficiency. And … Continue reading

Posted in Informative | Tagged , , , , , | Leave a comment

Very Large BOT activates

As of about 36 hours ago, another large bot activated in order to send spam and perform dictionary attacks. And as usual, this could have been mitigated if more ISP’s blocked port 25 outbound. This BOT was substantial enough to … Continue reading

Posted in Informative | Tagged , , , | Leave a comment

Hosting companies and spammer signups

Some hosting companies never end up on our radar, as they have systems in place to catch customers who sign-up for IP Space and VPS’s just to start spamming, but there are others who seem to constantly have problems with … Continue reading

Posted in Uncategorized | Tagged , , , , | Leave a comment

Another reason why ENZU should provide proper ‘rwhois’

So who is behind this outbreak. Of course you would expect their own monitoring systems would pick this up, before it started slamming ISP’s with bulk email… 23.245.171.126 : imfw.privatejetsvcs.com 23.245.171.128 : vfilter1.privatejetsvcs.com 23.245.171.145 : delawarekidney.telecomconnecting.com 23.245.171.146 : analab.telecomconnecting.com 23.245.171.147 … Continue reading

Posted in Informative | Tagged , , , , | Leave a comment

Why do Cel Networks leave port 25 open?

As a new trojan heads around the world attacking phones to use them to send spam, it is surprising that cel networks don’t lock down port 25 as well. Cel phones are roaming devices typically, and should use port 587 … Continue reading

Posted in Uncategorized | Leave a comment