[nsp-sec] Our external SMTP server is being hammered - ACK 855 + Info

[White, Gerard]

Greetings.

First off, ACK 855

Second, it appears you've been heavily targeted by a Spam Cannon run whose HTTP based C&C is here:

AS      | IP               | AS Name
32475   | 99.198.110.114   | SINGLEHOP-INC - SingleHop

POST /main.php HTTP/1.1
Host: advantastar.us


Hope that helps...

GW
855 - Bell Aliant


-----Original Message-----
From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Joel Rosenblatt
Sent: Wednesday, July 08, 2009 4:29 PM
To: nsp-security at puck.nether.net
Subject: [nsp-sec] Our external SMTP server is being hammered

----------- nsp-security Confidential --------