[feedback-report] Abuse Report with no Spam
marc at perkel.com
Thu Jul 12 19:56:44 PDT 2007
OK - Here's a question about abouse reports that don't fit the specs.
I'm now geneating this report to report viruses. I'm able to detect the
presence of viruses without actually receiving the email based only on
the behavior of the virus. What I'm doing is every 6 hours I'm sending a
list of infected computers to abuse. This is the form I'm using now. How
would something like this fit into an ARF model?
This is an automated email courtesy report from the folks at junkemailfilter.com to alert you about computers on your system that are exhibiting behavior that are likely to be infected with a computer virus.
You might want to consider creating a automated script to block port 25 on the IP addresses listed here. We hope this information will help you in determining the source of the problem and shut it down.
If you have any questions or feedback about this virus report or are interesting in learning about our spam filtering technology feel free to contact us. If this is a false positive please accept our apologies and let us know so we can fix the problem.
Marc Perkel - Fearless Leader
Junk Email Filter dot com
support at junkemailfilter.com
A total of 43 IP addresses were caught in the last 6 hours. Here is the list:
==== IP LIST BEGIN ====
===== IP LIST END =====
You might be wondering how we can detect virus infected computers without actually receiving spam from them. The way these computer were caught is that they continually attempted to connect to high numbered fake MX records when low numbered real MX servers were available. Only spammers and virus infected spam bots try to go in the back door first when the front door is open. The IP addresses listed here exhibited that kind of behavior.
The above list of IP addresses have been blacklisted on our DNS blacklist at hostkarma.junkemailfilter.com. The listing will automatically clear 3 days after the virus activity stops. For more information about our DNS Black/White/Yellow lists please visit http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
This virus reporting system is still experimental. We hope you will find this information useful. Working together we can beat the spammers. If you have any feedback we would like to hear from you.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the abuse-feedback-report