This is really just a pointer to a blog article published elsewhere on the topic of an annoying Swiss spammer apparently based in Latin America.
Attention all cPanel users.
These posts are about ten years old, yet we still keep receiving boxtrapper spam.
We list it as spam. False accusations about forged sender addresses having sent spam are the only type of spam we list that isn’t Scientific Spam proper. This software (these types of software, including Spam Arrest, misconfigured amavisd-new, etc.) should simply not exist at all.
Endurance (webhostbox.net) did the right thing and suspended the domain names and all services for a variety of Annex Publishers domain names and websites so that IP addresses that had sent Annex Publishers spam could be delisted.
See attached letter.
This post will be edited with responses to the points presented.
Something must have changed over at MX Toolbox as they have started reporting it to people who are using their services that we list the IPs that are being monitored. The listings in question are of any age, from over two years old to very recent.
We’ve reported TargetMol to Benchmark Email several times on Twitter and in email ever since we first listed them two weeks ago. We haven’t received a response.
$ check targetmol.com targetmol.com A 127.0.1.2 TXT "[TARGETMOL] Do you know TargetMol? -Yes, you are spammers, we know you now. [email protected] 20160420"
We started the operation on March 4, 2014, so it has been two years and a day. Thank you all who are listening and who are helping.
Adoption seems to be picking up. At the moment, daily lookups are in the two million range for
bl.scientificspam.net and slightly over three million for
rhsbl.scientificspam.net. During all of 2015 the RHSBL fielded 400M requests and the BL about 175M. In comparison, the monthly totals for January and February 2016 were 100M/month for RHSBL and 50M/month for BL, so we will be surpassing our 2015 figures by the end of April.
We appreciate the trust you are placing in us.
With love from The Internets, Rocket Scientists
A while back, somebody who is not related to us noticed HotCampus.
A few days later, it arrived at a participating university. Professor figures it is spam, because he/she/it has never heard of HotCampus or signed up. Given that HotCampus only started operations roughly two months ago, it’s not altogether surprising.