Bernhard Schmidt wrote:
Hello everyone,
we (AS12816, LRZ Leibniz Computing Centre Munich, a regional network for scientific and educational entities in the Munich area) are being hit by regular spamruns originated from 80.253.80.0/24 for several months now. This network belongs to
We have seen the same throughout November, but nothing since 30nov.
Unfortunately they are not listed on major RBLs yet because most of them seem not to accept submissions but rather rely on their own spamtraps. I've done some survey among the DENOG users and found that while some of the users have no hit at all, other destinations are heavily targetted. Users outside of the german speaking area don't seem to be affected at all. I'm trying to find a way to submit them to Spamhaus (which we have a paid feed for), but this might take some time.
We use greylisting, which took care of all of it.
/Per Jessen, Herrliberg