Hi Axel
On 27.10.22 16:15, Axel Beckert wrote:
I assume that most of these mails looked like this one.
I can confirm that we got an email with the same content on our peering and noc addresses last Friday night, but it was back dated to Tuesday, so it got marked as spam pretty heavily.
Here's a snippet from the headers, I only redacted the mail server's IP, in case they are an unrelated email server.
-------- Received: from unknown (HELO ZmoTAQamBxvqwGzx) ([REDACTED-IP]) by mx4.switch.ch with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Oct 2022 23:38:33 +0200 Received: by ZmoTAQamBxvqwGzx (Postfix, from userid 0) id 5EC8FAA54A; Tue, 25 Oct 2022 19:39:33 +0200 (CEST) From: abuse@cognitive-cloud.com Subject: Abuse report To: noc@switch.ch X-Mailer: mail (GNU Mailutils 3.7) Message-ID: 20221025173933.5EC8FAA54A@ZmoTAQamBxvqwGzx Date: Tue, 25 Oct 2022 19:39:33 +0200 Return-Path: abuse@cognitive-cloud.com X-MS-Exchange-Organization-Network-Message-Id: 1bd4bc1c-d9e4-4c38-08bd-08dab92ce80c Content-Type: text/plain --------
If anything this kind of thing makes the senders seem even less trustworthy.
Best, Joel