Of course you are talking about these.. (yeah, it's a pandemic over there) and no use reporting them..

Received: from mail0.crzcompany.com (HELO mail0.crzcompany.com) (159.65.131.137)

From: E-mail Server <[email protected]>
Subject: Password Expiry

(Several variations, all similar, and mail0 or rdns0 is a common trait)

We simply use it to confirm that they should be blacklisted..
But most of their space is already marked dirty by many RBL's and filtering services, and there was a thread on this topic already on this list about how even DO isn't recommending their IP space for email I seem to recall.

We just use our dynamic rule engine, and distributed feedback systems so that when any of our technologies or customers systems detect such activity, it's instantly on the bad list if it wasn't already..

We even have an RBL just for Digital Ocean IP Space ;) (Use it in conjunction with other rules, makes for simple way to filter)

But based on the extensive nature of the problem over there, the reputation of their whole network is already degraded in many filtering services.. By now there probably is even a SpamAssassin scoring penalty ;)




On 2021-08-10 12:26 a.m., Popovic Antonie via mailop wrote:
Hi everyone,

I can see a lot of spoofing activity from Digital Ocean servers and I was wondering if someone already tried their abuse report and if it's of any use, if they have control over what happens on their infrastructure.

Or in case we have someone from Digital Ocean here, could you please let me know if there is any point in trying to report the abuse based of the DMARC aggregated reports (a few millions).


Looking forward to hearing your experiences,

Toni
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop



--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to