SPAMCOP HOME · SPAMCOP FAQ · NEWSGROUPS · FORUM FAQ · WEBMAIL · SSL WEBMAIL · SPAMCOPWIKI


 Other words, data, places -->  SpamCop Pages V  FAQs & Words V  Newsgroups V  WebMail V  News-Recent Stuff V   Poll on menu

------>------> Latest and Current Announcements <------<------

Welcome Guest ( Log In | Register )


There are 21 online users browsing:
1 members and 20 visitors
Google, Yahoo, MSN, lisati

> Latest Discussions
goldeneye @ 02-8-10 11:27
Read: 13   Comments: 1
Farelf @ 02-8-10 01:12
Read: 33   Comments: 1
mrmaxx @ 02-7-10 17:41
Read: 57   Comments: 6
moulty @ 02-7-10 12:03
Read: 52   Comments: 2
xzr1tv @ 02-6-10 12:08
Read: 46   Comments: 1
orlandoc @ 02-5-10 16:45
Read: 83   Comments: 4
mrmaxx @ 02-4-10 06:00
Read: 99   Comments: 5
mrmaxx @ 02-3-10 09:27
Read: 92   Comments: 3
abuse@mydsl.ro @ 02-2-10 02:41
Read: 110   Comments: 3
Cam Belt @ 01-31-10 13:39
Read: 129   Comments: 4
cherrick @ 01-28-10 14:38
Read: 112   Comments: 2
dmgibbs @ 01-28-10 12:25
Read: 171   Comments: 8
Clyde @ 01-27-10 14:33
Read: 110   Comments: 1
Devilwolf @ 01-27-10 12:31
Read: 130   Comments: 5
william_ @ 01-26-10 05:59
Read: 123   Comments: 5
blazius @ 01-25-10 02:53
Read: 126   Comments: 2
mgolden @ 01-22-10 12:37
Read: 148   Comments: 4
turetzsr @ 01-21-10 18:47
Read: 146   Comments: 4
mrwebman @ 01-21-10 13:50
Read: 225   Comments: 10
Esherwood76 @ 01-20-10 11:17
Read: 556   Comments: 33
diburning @ 01-18-10 23:15
Read: 161   Comments: 2
 
> Welcome to Spamcop.net
SpamCop is the premier service for reporting spam. SpamCop determines the origin of unwanted email and reports it to the relevant Internet service providers. By reporting spam, you have a positive impact on the problem. Reporting unsolicited email also helps feed spam filtering systems, including, but not limited to, SpamCop's own service.

Beware of Cheap Imitations - SpamCop.net established 1998


Forum Content by Subject line - LoFi view

> Romanian snow shoe spammers - having trouble with them!
Posted by goldeneye - 02-8-10 11:27 - 1 comments
I am getting bombarded with at least 2 of those per day that are not caught in my e-mail account's spam filter, and they are always image spam, directing to IP addresses in Romania - and usually now in octal IP addresses.

Problem is that the default reporting addresses point back to an abuse address at a domain which is controlled by the spammer network themselves.

Would it be best to report to their upstreams? I can provide IP addresses and AS numbers if necessary, but those should be pretty known to be IP networks/AS numbers that are totally owned by spammers themselves (either bought out or totally stolen). Usually these are /20 or /21 IP blocks, but are known to go to as much as a /16 or /15, based on the IP addresses involved.
Read 13 times - last comment by dra007   

> personal blacklist not being honored?
Posted by mrmaxx - 02-7-10 17:41 - 6 comments
I have one prolific spammer who seems to send me at least three or four messages per day. I have put them in my personal black list, but they are still getting through. I have kept a webmail window open, in case that's the issue, but they are still getting through. How do I get them redirected to held mail if the personal blacklist doesn't stop them? sad.gif
Read 57 times - last comment by StevenUnderwood   

> Rerporting-address escalation/update req for CRNET AS9394
Posted by moulty - 02-7-10 12:03 - 2 comments
A majority of spam seen at two of my reporting addresses is of the Glavmed / "Canadian Pharmacy" variety (counterfeit/placebo/toxic medications and magical sexual-size-and-performance enhancers). Spamvertised domains are typically pointing by DDNS proxy to targets at 58.218.177.253, 61.235.117.75 and 124.248.32.48.

Nearly all in the last week have pointed to the 61.235.117.75. None of these however are newly compromised addresses.

Spamcop directs reports for hosting to spam[at]ccert.edu.cn, abuse[at]anti-spam.cn, and abuse[at]chinatietong.com. These are nonresponsive.

APNIC's WHOIS record for the net which contains 61.235.117.75 includes some better information.

route: 61.232.0.0/14
descr: PACNET (proxy-registered route object)
origin: AS9394
remarks: This route object is for a PACNET customer route which is
being exported under this origin AS.

This route object was created because no existing route
object with the same origin was found, and since some
PACNET peers filter based on these objects this route
may be rejected if this object is not created.

Please contact
abuse[at]pacnet.net if you have any
Concerns regarding spam/Abuses related to this object.


Very actively spammed at present are sites the domains of which are "self-routed" via remote dynamics by "organcamp.ru" -- here's a useful listing from URIBL:

http://rss.uribl.com/ns/organcamp_ru.html

ALL point to 61.235.117.75. A wholesale nip-in-bud by removal of the onerous route-object would be a wonderful thing.

So I am wondering if my peers could include this information and reporting-address in their reports for this spammer - and what if anything I may be able to suggest in order for SC to automate it.
Read 52 times - last comment by moulty   

> Yahoo 'popping' slow to non-existant since 02/05
Posted by xzr1tv - 02-6-10 12:08 - 1 comments
I realize (from a prior note to admin) that popping of mail is on a 'every so often basis', whose time interval gets elongated every time the server says basically "I'm busy, go away"...

However sinze Friday, the popping has been very erratic.
Right now I have mails stting on Yahoo server since Firday 7:37AM (US Eastern)
Once in a while one or 2 make it. Sometimes a batch makes it in.
But I still 150+ in yahoo inbox
SPAMCOP is now showing 'unknown error 24

GMAIL pops fine, and consistent.

Is this on SPAMPCOP's end, or has YAHOO dorked their server farm again?

Thanks!!

Read 46 times - last comment by xzr1tv   

> [Resolved] All inbound messages blocked by Spamcop
Posted by orlandoc - 02-5-10 16:45 - 4 comments
It appears as if all inbound messages to our domain (rrjfs.org) are being bounced back with the following message:

173.9.185.13 does not like recipient.
Remote host said: 550 5.7.1 208.109.78.208 has been blocked by Spamcop
Giving up on 173.9.185.13.

When I test our email server locally using telnet on port 25, I get the same message stating that my INTERNAL ip address being blocked. I am now getting messages stating that my local gateway ip is being blocked by Spamcop as well.

This sounds like a virus to me, but I cannot seem to find any information that matches that my sepecific problem.

Help!
Read 83 times - last comment by Wazoo   

Goto Month

February 2010

  SMTWTFS
»
1
2
3
4
5
6
»
7
8
9
10
11
12
13
»
14
15
16
17
18
19
20
»
21
22
23
24
25
26
27
»
28

> FAQ - Frequently Asked Questiions

The following 'short' list of a few of the most popular Frequently Asked Questions are links to various pages, systems, databases, posts spread across several sub-components, computers, and hosts of various parts of the SpamCop.net system, perhaps best explained by the page at Where to get Help

Why are you here?

What is SpamCop.net?

Admin
Curious
SpamCop User

Original hyper-linked format FAQ
found at ->www.spamcop.net FAQ
Single-page Access to a SpamCop FAQ that incorporates and expands on the above
found at ->Single-page Expanded FAQ

Jump To FAQ Section Links

Below are some selected items/sections from both FAQ lists - for questions not answered, please follow one of the above FAQ links, use the Search function at the top of this screen, hit the newsgroups, or enter the Forum

Introduction to SpamCop for recipients of spam reports
What does a SpamCop Report look like?
I didn't originate the spam. My server might have relayed this message. Why report it to me?

- Lo-Fi Version Time is now: 8th February 2010 - 05:55 PM