[afnog] SPAMMER

[Phil Regnauld]

Antonio Godinho (antonio) writes:
> Hi All,
> 
> There is an IP address (41.220.75.3) always trying to attack my mail server 
> to send SPAM. Anyone knows this IP? It has a reverse lookup of mtnngprs.com. 
> with no A record!

	Probably hacked - start my blacklisting/nullrouting it.  Seems filtered
	from here.

	Afrinic whois doesn't indicate who owns the block -- but traceroute
	shows tinet.net.

	mtnngprs.com gives a contact in ZA:

	http://www.mtnbusiness.co.za/Pages/Default.aspx

	Maybe you should contact them ?

	Also found:

	www.mtnngprs.com.	A	41.220.75.126

	but doesn't answer either.