I lost some #emails due to a problem with #Spamhaus and #Hetzner during the last few days.
So anyone running a #mailserver using those providers should better have a look at this and check their logs/configuration: https://www.spamhaus.org/resource-hub/email-security/query-the-legacy-dnsbls-via-hetzner/

Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab

https://krebsonsecurity.com/2025/02/notorious-malware-spam-host-prospero-moves-to-kaspersky-lab/

#InterisleConsultingGroup #Ne'er-Do-WellNews #ALittleSunshine #TheComingStorm #KasperskyLab #ProsperoOOO #ZachEdwards #Ransomware #GootLoader #Securehost #SilentPush #SocGholish #Intrinsec #AlfaBank #BEARHOST #spamhaus #Kentik

Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab https://krebsonsecurity.com/2025/02/notorious-malware-spam-host-prospero-moves-to-kaspersky-lab/ #InterisleConsultingGroup #Ne'er-Do-WellNews #ALittleSunshine #TheComingStorm #KasperskyLab #ProsperoOOO #ZachEdwards #Ransomware #GootLoader #Securehost #SilentPush #SocGholish #Intrinsec #AlfaBank #BEARHOST #spamhaus #Kentik

Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab - One of the most notorious providers of abuse-friendly “bulletproof” web hosting fo... https://krebsonsecurity.com/2025/02/notorious-malware-spam-host-prospero-moves-to-kaspersky-lab/ #interisleconsultinggroup #neer-do-wellnews #alittlesunshine #thecomingstorm #kasperskylab #prosperoooo #zachedwards #ransomware #gootloader #securehost #silentpush #socgholish #intrinsec #alfabank #bearhost #spamhaus #kentik

Falls hier jemand sonst noch #Mailserver bei #Hetzner betreibt, und DNSBLs von #Spamhaus verwendet: Schaut mal in eure Logs, ob ihr wegen Spamhaus nicht gerade alle Mails ablehnt.

Ich hab das bei mir gerade nur gemerkt, weil mir eine nette Person auf Mastodon geschrieben hat...

Weitere Infos: https://www.spamhaus.org/resource-hub/email-security/query-the-legacy-dnsbls-via-hetzner/

Anyone else with #selfhosted #mail experiences issues with #spamhaus lists today?

Ugh, someone on my mail server's *shared* IPv6 /64 is misbehaving again and getting me listed in #SpamHaus by association. Might need to pick up shop from #Dreamhost finally. I keep putting it off because its fixed price cheap and moving is a hassle but so is a hosting config where you can't modify the size of the hard drive you created your instance with or get your own /56.

When it comes to domain abuse, phishing, and cybercrime, Spamhaus' Top Contributor"Equalizer" doesn't just track threats - they neutralize them. They work tirelessly to:

Shut down phishing networks
Shut down ASNs
Identify & report domain abuse at “large scale”
Collaborate with law enforcement agencies

Over the last 30 days "Equalizer" has submitted 20,431 domains to Spamhaus. That's an increase of +2,595%! And we sincerely thank you for your efforts.

If you're in the cybersecurity trenches, join the Spamhaus Threat Intel Community as a contributor. Share insights, report cybercrimes and play your part to "equalize" (sorry, we couldn't resist) the battlefield.

You can learn more on how to submit malicious or suspicious raw source, IPs, domains, and URLs here https://submit.spamhaus.org

The more we collaborate as a community, the stronger we are.

UPDATE | We've had to make the difficult decision to reschedule tomorrow's YouTube Live with Roman and Carel Bitter, CEO at Spamhaus Technology, as one of our presenters is still unwell.

We're sorry for any inconvenience caused, as we know how tricky it can be to juggle a busy schedule!

The good news is that you won't have to wait too long - new date/time below:

February 12th
10 AM EST | 3 PM GMT | 4 PM CET

Here's a reminder of the link to join
https://www.youtube.com/live/dRmqWob3WSk

Hit "notify me" on YouTube to ensure you don't miss it.

Our YouTube Live with Spamhaus has a new date!

February 5th
10 AM EST | 3 PM GMT | 4 PM CET

Roman and Carel will be back, fully recharged, and ready to answer your questions!

Here's a reminder of the link to join
https://www.youtube.com/live/dRmqWob3WSk

Hit "notify me" on YouTube to make sure you don't miss it

Join us Jan 23rd at 10am EST | 3pm GMT | 4pm CET on YouTube LIVE!

Roman Hüssy, will be joined by Carel Bitter, CEO at Spamhaus, to answer your questions. Want to know more about our alliance, history, or what the future holds? Bring your questions and we’ll do our best to answer them!

Here’s the link to join (click “notify me” to mark it in your calendar ):

https://youtube.com/live/dRmqWob3WSk?feature=share

PS. We’ve never done a live before so it should be fun!!

abuse.ch and Spamhaus share a significant history together . Today, we are really excited to share this video where we talk about our alliance

We share the importance of putting community at the heart of everything we do, and the impact we’re making Take a look and see why this collaboration is so important for our community.

Watch now here: https://youtu.be/20qfQWgOQXQ

I’ve started sending #email again for the first time in years. I quit after #Google and #Microsoft ruined it & set a shitty trend (#spamhaus, etc) that others follow.

#OVH seems to be one of very few providers that will allow my mail server to connect to for sending.

Chinese network chinanet-zj ranks #1 for hosting IPs associated with exploited devices after a +352% increase in detections. That’s 197,138 detections over the last 30 days...

...as well as 1510 Spamhaus Blocklist (SBL) listings!!!

SBL listings: https://check.spamhaus.org/sbl/listings/chinanet-zj/

Indian telecoms provider BSNL, or Bharat Sanchar Nigam Limited ranks #5 for hosting IPs associated with exploited devices after a +298% increase in detections. That's 49,195 detections over the last 30 days...

...as well as 644 Spamhaus Blocklist (SBL) listings!!

Spamhaus reputation statistics
https://www.spamhaus.org/reputation-statistics/networks/exploit/

bsnl.in SBL listings
https://check.spamhaus.org/sbl/listings/bsnl.in

Top 3 Countries Hosting Botnet C&C's:

China → 425 detections
United States → 239 detections
Hong Kong → 138 detections

Top 3 Countries with the Most Active Distribution Sites on URLHaus:

China → 20,450 sites
India → 16,880 sites
Russia → 7,934 sites

Spamhaus reputation statistics:
 https://www.spamhaus.org/reputation-statistics/countries/botnet/

Malware Digest | URLHaus:
 https://www.spamhaus.org/malware-digest/#urlhaus

Wer #Blocklisten für #OPNsense sucht, wird hier fündig.

#Spamhaus #Firehol

https://iplists.firehol.org/

https://github.com/firehol/blocklist-ipsets/tree/master

This month, tedata.net is #3 for networks hosting IPs associated with exploited devices with a +29% increase and 66,203 detections....

....as well as 29 Spamhaus Blocklist (SBL) listings. 

Spamhaus reputation statistics: https://www.spamhaus.org/reputation-statistics/networks/exploit/  

SBL listings: https://check.spamhaus.org/sbl/listings/tedata.net/