Jump to content

clivel

Members
  • Content Count

    11
  • Joined

  • Last visited

Community Reputation

0 Neutral

About clivel

  • Rank
    Member
  1. In the last half an hour I have just received another wave of bounces just over 13,000 so far and they are still coming in thick and fast. At this rate it will be well over a 100,000 by the end of the day. The last four days have been a nightmare deleting spam has taken up almost all my time. And for awhile I wastedan enormous amount of time trying to report a few hundred of these bounces to spamcop for apparently no point whatsoever. Clive
  2. petzl, Thank you very much for the link to the web site and the suggestion to contact Cert. I have emailed all the addresses on the page as well as Cert hopefully something positive happens soon. This is now getting ridiculous, each day it gets worse and worse during the last two hours I have just received another batch of bounces - 59,177 currently sitting in my spam folder where I have them redirected. That makes the total for today over 82,000 emails and there is still a few hours left in the day. This is more than I have received the whole week so far and it looks as if there is no end in sight. I am extremely disappointed that despite having forwarded hundreds of theses bounces to Spamcop that the server is not black listed, this is an unprecedented flood of spam surely there must be some way I can have the server placed on a blacklist? Clive
  3. Thanks gnarlymarley, that is an excellent idea, but unfortunately I used a shared hosting provider so don't have access to the server. I really don't know what to do right now.Clearly from my perspective reporting the emails to Spamcop has been a complete waste of hours and hours of my time. I woke up this morning to no bounces overnight, once again thinking that the flood of emails may have stopped. No such luck, just as I started composing this message they started pouring in, already up to 12,000 this looks like the worst ATTACK so far!! And I call it an attack because they all originate from 5.172.188.193 and despite abuse@man.olsztyn.pl having received hundreds and hundreds of reports from Spamcop they are doing nothing about it. And the worst is it seems as if the majority of bounces in this latest flood are "Delivery Status Notification (Delay)" which means I can look forward to another 12,000 or so Failures arriving soon. And while I was typing this another few thousand arrived, now up to 23,000 for the morning. Just deleting them takes me ages. I really don't know what to do to try and stop these F*****KNG idiots! Clive
  4. Thanks again gnarlymarley and Lking, That is very helpful. I will continue to report the emails. Unfortunately the time consuming part is not forwarding the emails to Spamcop, it is clicking on the "Report Now" link, waiting a few seconds for the page to load and then having to click the "Send spam report(s) Now Link . I am tearing my hair out over this, I was feeling good earlier today, I received no bounces for a few hours and thought that i had stopped, and then I suddenly received another flood of emails about an hour ago, just over 3000 more arrived in my inbox making the total for today well over 5000. There seems to be no end in sight. Thanks , Clive
  5. Lking and gnalrymarley thanks for the replies. I was under the impression that the SPF record was intended to prevent wholesale bounces to a from address as it is trivially easy for anyone to set the from address to whatever email address they want. I have checked my SPF and it is set to "-all". I haven't really examined the bounces closely. When one is being inundated with this many emails it was all I could do to report a few hundred via spamcop and delete the rest without deleting legitimate emails at the same time. Almost all the bounced emails I am getting are from 5.172.188.193. Spamcop forwards them all to them same abuse@xx.yy.zz address. One would hope that if anyone is actually monitoring the abuse reporting address receiving them that they would have done something to stop this wholesale abuse. Also, I would have thought that by reporting via spamcop, enough reports would eventually have put 5.172.188.193 onto at least one blacklist hopefully causing them to take some sort of action to stop bombarding me with what I consider spam. As you might gather I am not too familiar with the mechanisations of the whole email system, but from what you have both posted it seems as if I am wasting my time reporting any of these emails to spamcop and would be better of simply deleting them. Is that correct? Thanks again, Clive
  6. Hi, Earlier this week a spammer used my email address as the "from" address for a Nigerian Scam type email. As a result, despite having an SPF record, for the past three days I have been receiving 1000's of bounced emails, the majority from one server: 5.172.188.193 (as per the example at the bottom of this message). On Monday I received about 1000 bounces, Tuesday I received 8000 and today it is already up to 2000. I have setup an email filter which I run manually to forward small batches to Spamcop, I then also have to do the "Report Now" manually so I have only been able to actually report a few hundred of these bounces. Despite these 100s of reports forward to the administrator of the offending server they seem to have no intention of fixing it so it is disappointing that the server is not listed on on any blacklists which may be the only way that they take notice: Using best contacts abuse@x.y.z Message is 8 hours old 5.172.188.193 not listed in cbl.abuseat.org 5.172.188.193 not listed in dnsbl.sorbs.net 5.172.188.193 not listed in accredit.habeas.com 5.172.188.193 not listed in plus.bondedsender.org 5.172.188.193 not listed in iadb.isipp.com How many hundreds of reports are necessary before they will appear on a blacklist? Thanks, Clive Return-Path: <> Received: from ser204.sbsb.local ([5.172.188.193]) by mx.perfora.net (mxeueus003 [74.208.5.3]) with ESMTP (Nemesis) id 0MF2Rp-1gDFmq0ZJL-00GJhG for <xxx@yyy.com; Tue, 20 Nov 2018 09:08:51 +0100 From: postmaster@sbsb.local To: xxx@yyy.com Date: Mon, 19 Nov 2018 01:20:48 +0100 MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="9B095B5ADSN=_01D4461B17EC24000000DA6Aser204.sbsb.loca" X-DSNContext: 7ce717b1 - 1194 - 00000002 - 00000000 Message-ID: <4nPPu1OOL00004615@ser204.sbsb.local> Subject: Delivery Status Notification (Failure)
  7. Hello, I am receiving bounced spam which had used my email address as the reply to address. As this bounced spam is unsolicited I report much of it to SpamCop. However many of the reports are not accepted with the following error: Is that because mx.kundenserver.de is not associated with my mailhost? My hosting company is 1and1, I think that mx.kundenserver.de is associated with 1and1. This is the header of the email that generated the error above: This is what SpamCop displays when it processes one of these bounced messages correctly Thanks, Clive
  8. Thanks for the advice Lou, Farelf and lartingyou, Fortunately the bounces seem to be slowing down again, only a half dozen or so in in the last day, so at the moment they are more of an irritation than anything. Yet for some irrational reason I still get so incensed by them, perhaps because I feel so powerless to put an end to it. I have been forwarding many of the emails to the respective domain shortening services, most have been very helpful, unfortunately the two services most frequently used by this spammer mow.so & link.vpn.by have completely ignored all attempts to communicate with them. Thanks again, Clive
  9. Unfortunately I spoke to soon after a day or so the bounced spam started up again. I am at my wits end, every day I receive dozens of bounced emails all spamvertising the site veronyka.co.ua via URL shortening services. This has been carrying on for over a month now and I seem powerless to stop it. I can only guess at just how many of these emails are going out in my name on a daily basis. Reporting the bounced spam to SpamCop has a negligable effect, because the source of the spam is not reported only the server that bounced the message, nor is the URL of the domain shortening service reported. I was hoping that at the very least SpamCop would pick that up. Actually, even if it was picked up by SpamCop, the shortening services would seem to be the weak link effectively insulating the spammer from any repercussions. I really don't know what to do anymore, I have even considered writing to the criminals behind veronyka.co.ua to ask them to please stop using my email address, but unsurprisingly their registration information is not public Any suggestions as how to put an end to this mess would be very much appreciated. Thanks, Clive
  10. Lou and Steve T thanks very much for the responses. For some fortuitous reason the bounces have almost completely dried up today. Only a few "Delayed Mail (still being retried)" coming through. I expect that I will continue to receive these for the next few days, but they will be reported to SpamCop. Thanks, Clive
  11. Hello, I have been experiencing a rather difficult problem over the last week or so and it is steadily getting worse. A spammer is sending out spam using my email address in the from field. As a result, all bounced emails come back to me. Many of the bounced emails return the original email as an attachment which advertises an adult site http://veronyka.co.ua (always via one of the many domain shortening services). As I seem powerless to put a stop to the flood of bounced emails I receive, at the very least I thought that I would report the attached emails to SpamCop Unfortunately these reports are rejected by SpamCop, presumably because my email address is in the from field, I get the following errror: SpamCop v 4.8.2.018 © 2014 Cisco Systems, Inc. All rights reserved. Here is your TRACKING URL - it may be saved for future reference: https://www.spamcop.net/sc?id=z6027951760zfb7bdddfabbcac98282c6e14fe134696z Mailhost configuration problem, identified internal IP as source Mailhost: Please correct this situation - register every email address where you receive spam No source IP address found, cannot proceed. Add/edit your mailhost configuration Finding full email headers Submitting spam via email (may work better) Example: What spam headers should look like Nothing to do. How do I work around this? And if anyone has any ideas for shutting down the spammers or at the very least get them to remove my email address as the source, I would really appreciate it. Thanks, Clive
×