AlphaCentauri Posted June 13, 2004 Share Posted June 13, 2004 I understand that a large proportion of spam is now being sent by computers infected with worms that allow spammers to get control of them to send out his spam -- so called "zombie machines." I understand that SpamCop doesn't want to get into the virus reporting business, but this is now part of the spam reporting business. For every machine that is infected, hundreds more were protected by antivirus or filtering software. For instance, it is easy to see the worms with MailWasher without even downloading them to have my antiviral program detect them. I have been checking the headers myself, finding the originating IP, and forwarding the headers to the abuse address for the ISP in question. However, I rarely get results, and the worms seem to keep on coming for a given IP for days before stopping. (And once I got arguments from the originating ISP that the worm had not come from their system because the "From" line had a spoofed email address that would have been on another ISP if that were where it were really from -- scary who's in charge of other people's computers sometimes). I doubt the abuse addresses are the best place to send them, anyway. Would SpamCop's reputation get these reports noticed faster? If we sent the worm headers to SpamCop, the ISP could be notified in batches (and maybe to a private address?) and the IP could get special notice on the blacklist as an infected machine. Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.