SPAMCOP HOME · SPAMCOP FAQ · NEWSGROUPS · FORUM FAQ · WEBMAIL · SSL WEBMAIL · SPAMCOPWIKI


 Other words, data, places -->  SpamCop Pages V  FAQs & Words V  Newsgroups V  WebMail V   Poll on menu

------>------> Latest and Current Announcements <------<------

Welcome Guest ( Log In | Register )

> Site Navigation
· Forum
· SpamCop Dictionary
· SpamCop Glossary
· SpamCop Wiki
· SpamCop Statistics
· SpamCop NNTP Archive
· SpamCop.help NNTP Archive
· SpamCop.mail NNTP Archive
· Today's Active Topics
· Today's Top 10 Posters
· Contact Staff

> Online Users
There are 14 online users browsing:
0 members and 14 visitors
Google, Yahoo, MSN

> Latest Discussions
[Resolved] Is this spam?
Oriolus @ 01-4-09 19:00
Read: 107   Comments: 9
[Resolved] Google is a...
daizzzy @ 01-4-09 07:02
Read: 72   Comments: 3
Driven down by spam?
Farelf @ 01-3-09 21:13
Read: 75   Comments: 3
Headers incomplete - Nothin...
Firefly @ 12-31-08 17:24
Read: 173   Comments: 9
Spammers using my email add...
nbriggs@gmpexpress.net @ 12-31-08 16:07
Read: 99   Comments: 6
How to register 400 + Excha...
berryw @ 12-30-08 19:16
Read: 166   Comments: 10
Spammers using my domain
Norman1961 @ 12-30-08 01:52
Read: 97   Comments: 4
Smart spam
daizzzy @ 12-29-08 23:05
Read: 145   Comments: 7
"New" spammer ploy
Farelf @ 12-29-08 21:26
Read: 156   Comments: 7
What I got for xmas
Wazoo @ 12-28-08 09:46
Read: 121   Comments: 6
This is a scam
PamelaDelafield @ 12-28-08 07:46
Read: 505   Comments: 32
Webmail: External POP Servers
jroberts @ 12-27-08 21:32
Read: 83   Comments: 0
Addin for Outlook 2007 found!
iangregson.com @ 12-26-08 04:57
Read: 99   Comments: 2
CastleCops closes
Farelf @ 12-24-08 12:53
Read: 212   Comments: 5
spam from Hotmail Live and ...
Caduceus @ 12-24-08 08:53
Read: 121   Comments: 4
Secunia PSI
Wazoo @ 12-23-08 23:15
Read: 86   Comments: 0
i received bizarre email......
salamandir @ 12-22-08 19:42
Read: 194   Comments: 11
spam that shows my own address
kmax1940 @ 12-22-08 15:12
Read: 321   Comments: 7
Run server-side rules witho...
appyface @ 12-21-08 14:42
Read: 135   Comments: 2
Somilia vs Nigeria
Devilwolf @ 12-20-08 13:04
Read: 153   Comments: 2
[Resolved] Spamcop Old...
Geek @ 12-20-08 05:08
Read: 139   Comments: 1
 
> Welcome to Spamcop.net
SpamCop is the premier service for reporting spam. SpamCop determines the origin of unwanted email and reports it to the relevant Internet service providers. By reporting spam, you have a positive impact on the problem. Reporting unsolicited email also helps feed spam filtering systems, including, but not limited to, SpamCop's own service.

Beware of Cheap Imitations - SpamCop.net established 1998

Forum Content by Subject line - LoFi view

> Headers incomplete - Nothing to do
Posted by Firefly - 12-31-08 17:24 - 9 comments
Over the past few weeks I have been getting a deluge of spam which the SpamCop email system properly filters into Held Mail, but which I can't report. The report page says:

This header is incomplete. Please supply the full headers of the spam you're trying to report.
No source IP address found, cannot proceed.

I see a source IP in the headers. The Received lines look like this:

Received: from unknown (192.168.1.88)
by blade2.cesmail.net with QMQP; 31 Dec 2008 20:18:44 -0000
Received: from unknown (HELO localhost) (58.220.253.242)
by mxin1.cesmail.net with SMTP; 31 Dec 2008 20:18:41 -0000

Why can't SpamCop identify 58.220.253.242 as the source IP?

Examples:
http://www.spamcop.net/sc?id=z2492328169z5...f8bc0a816f90f6z
http://www.spamcop.net/sc?id=z2492328239z4...e7ebf43b62335az
Read 173 times - last comment by Wazoo   

> How to register 400 + Exchange server environment?
Posted by berryw - 12-30-08 19:16 - 10 comments
I am an admin for a company with 400+ exchange servers. I also have several routing connectors with several servers. This means that an email coming into my account can take several routes.

To boot, reporting spam is generally left up to a handful of people. This means that when I cut and paste headers, it always kills out after the first hop of an unrecognized host. All of my hosts are <hostname>.firmwide.corp.<domain>.com. Is there a way to wildcard this in the mailhosts configuration? The domain/hosts firmwide.corp.<domain>.com is listed, but my parsing still stops when it reaches one of my non-specified (in mailhost config) hosts.
Read 166 times - last comment by SpamCopAdmin   

> Smart spam
Posted by daizzzy - 12-29-08 23:05 - 7 comments
that's the source of spam mail:
QUOTE
Experienced stepmom had never lost http=3A=2F=2Ftdnegfn=2Edeasfyk=2Enet=2F =
a possibliity
to catoch fleshy screw of her native offspring in

but what user sees is this address http tdnegfn.deasfyk.net instead of http=3A=2F=2Ftdnegfn=2Edeasfyk=2Enet=2F =

i didn't delete that mail, so i can send it if you need

btw how do they do it?
Read 145 times - last comment by daizzzy   

> spam that shows my own address
Posted by kmax1940 - 12-22-08 15:12 - 7 comments
We have been getting a lot of spam that shows it is coming from my own email address.
Of course it is not coming from me...

A lot of these emails have the same subject lines...

I log into spamcop and report them as spam...
And they just keep showing up in my inbox.

Anyone know what I can do about this?

I sent in a ticket to spamcop but have not heard back yet...

thanks
k
Read 321 times - last comment by agsteele   

> [Resolved] Spamcop Old Cache of Reporting Addresses?
Posted by Geek - 12-20-08 05:08 - 1 comments
Hi Folks,

In this spam report:
http://www.spamcop.net/sc?id=z2465382478z9...4d9268a71d91c3z

It shows:
QUOTE

Routing details for 113.30.81.230
[refresh/show] Cached whois for 113.30.81.230 : abuse[at]apnic.net. spam[at]apnic.net.
I refuse to bother abuse[at]apnic.net..
Using abuse#apnic.net.@devnull.spamcop.net for statistical tracking.
I refuse to bother spam[at]apnic.net..
Using spam#apnic.net.@devnull.spamcop.net for statistical tracking.
Using last resort contacts abuse#apnic.net.@devnull.spamcop.net spam#apnic.net.@devnull.spamcop.net


When the reporting address for 113.30.81.230 certainly is not abuse[at]apnic.net or spam[at]apnic.net.

Going directly to APNIC shows:

QUOTE

inetnum: 113.30.64.0 - 113.30.127.255
netname: HCLC
descr: HCLC
descr: 395-65 Korea Computer BLDG F3 Sindaebang-dong Dongjak-gu Seoul
descr: **************************************
descr: Allocated to KRNIC Member.
descr: If you would like to find assignment
descr: information in detail please refer to
descr: the KRNIC Whois Database at:
descr: http://whois.nic.or.kr/english/index.htm
descr: **************************************
country: KR
admin-c: SY1751-AP
tech-c: SY1751-AP
status: Allocated Portable
remarks: www.hclc.co.kr
mnt-by: MNT-KRNIC-AP
mnt-lower: MNT-KRNIC-AP
changed: hm-changed[at]apnic.net 20081017
source: APNIC
person: Suyong Yi
nic-hdl: SY1751-AP
e-mail: yisuyong[at]hclc.co.kr
address: 395-65 Korea Computer BLDG F3 Sindaebang-dong Dongjak-gu Seoul, 156-010
phone: +82-2-831-0510
fax-no: +82-2-831-0517
country: KR
changed: hostmaster[at]nida.or.kr 20070920
mnt-by: MNT-KRNIC-AP
source: APNIC
inetnum: 113.30.64.0 - 113.30.127.255
netname: HCLC-KR
descr: HCLC
country: KR
admin-c: HJ661-KR
tech-c: YS661-KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster[at]nic.or.kr
source: KRNIC
person: Han Jung-Yup
address: SEOUL Sindaebang-dong Dongjak-gu Seoul
address: 395-65 Korea Computer BLDG F3
country: KR
phone: +82-2-831-0510
e-mail: jyhan[at]hclc.co.kr
nic-hdl: HJ661-KR
mnt-by: MNT-KRNIC-AP
changed: hostmaster[at]nic.or.kr
source: KRNIC
person: Seo-YoungWoo
address: SEOUL Sindaebang-dong Dongjak-gu Seoul
address: 395-65 Korea Computer BLDG F3
country: KR
phone: +82-2-831-0510
e-mail: noc[at]hclc.co.kr
nic-hdl: YS661-KR
mnt-by: MNT-KRNIC-AP
changed: hostmaster[at]nic.or.kr
source: KRNIC


Did something get messed up in the maintenence? blink.gif

Cheers!
Read 139 times - last comment by SpamCopAdmin   

Goto Month

January 2009

  SMTWTFS
»
1
2
3
»
4
5
6
7
8
9
10
»
11
12
13
14
15
16
17
»
18
19
20
21
22
23
24
»
25
26
27
28
29
30
31

> FAQ - Frequently Asked Questiions

The following 'short' list of a few of the most popular Frequently Asked Questions are links to various pages, systems, databases, posts spread across several sub-components, computers, and hosts of various parts of the SpamCop.net system, perhaps best explained by the page at Where to get Help

Why are you here?

What is SpamCop.net?

Admin
Curious
SpamCop User

Original hyper-linked format FAQ
found at ->www.spamcop.net FAQ
Single-page Access to a SpamCop FAQ that incorporates and expands on the above
found at ->Single-page Expanded FAQ

Jump To FAQ Section Links

Below are some selected items/sections from both FAQ lists - for questions not answered, please follow one of the above FAQ links, use the Search function at the top of this screen, hit the newsgroups, or enter the Forum

Introduction to SpamCop for recipients of spam reports
 What does a SpamCop Report look like?
I didn't originate the spam. My server might have relayed this message. Why report it to me?
- Lo-Fi Version Time is now: 6th January 2009 - 07:47 AM
Invision Power Board - Apple IIGs Powered © 2009  IPS, Inc.