Spamming PC's noticed faster

This post is over 5 years old, it may be out of date.

CERT-RU, that coordinates RU IT-security incidents, regularly receives reports about PC’s that are distributing spam mail. Often these have been noticed by Senderbase, because the daily mail volume has been much larger than the monthly average. The routers at the Science Faculty log the initialization of an SMTP-connection outside Radboud University. Therefore spamming PC’s often already have been cleaned when CERT-RU gets noticed by an outside party.