Jump to content

SpamCopAdmin

SpamCop Staff
  • Content Count

    1,655
  • Joined

  • Last visited

Everything posted by SpamCopAdmin

  1. SpamCop already shows that abuse address. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net -
  2. SpamCopAdmin

    emaildirect.com

    Thanks, but I'm thinking the reports will just be given to emaildirect for action. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net -
  3. SpamCopAdmin

    [Resolved] 217.73.224.0/20

    Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  4. SpamCopAdmin

    [Resolved] asahi-net.or.jp

    Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  5. - Client host [195.84.162.34] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?195.84.162.34 195.84.162.34 = socks1.sp247.net was removed from our list on Thursday, October 24, 2013 00:38:33 -0600 because the spam stopped for some reason. I'm sorry to report that the server is sending spam to our spamtraps. We know for a fact that our trap servers accurately record the source IP when they get mail. A spamtrap is an unused address whose sole reason for existence is to see if people will send unsolicited mail to it. Sending mail to nonexistent addresses is proof-positive that email addresses are being added to a mailing list without the address owner's permission. Or the machine has been compromised and is suddenly sending spam. We guard our traps like gold for fear of revealing the email addresses, which is why we don't send any reports about the spam they get, so I'm afraid there aren't many details I can share with you. This partial header is the most I can share with you: Received: from socks1.sp247.net (socks1.sp247.net [195.84.162.34]) by [Our Trap Server] (Postfix) with SMTP id x for <x>; Wed, 23 Oct 2013 Date: Wed, 23 Oct 2013 From: <noreply.cns[at]nasdaqomx.com> Subject: =?utf-8?Q?KONECRANES_OYJ_-_KOLMANNELL?= =?utf-8?Q?A_VUOSINELJ=C3=84NNEKSELL=C These days, the most common problem is backdoor spam sending spyware that has been installed by a Trojan or Worm. The server may be suffering from an open proxy port exploit, or has been compromised by some other means. The reason the mail doesn't show up in your logs is because the spammer uses his own SMTP engine to send the mail after he connects to the open port. - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  6. SpamCopAdmin

    Error when reporting from spamassassin

    I suspect that is from your own service provider. SpamCop doesn't reject email submissions. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net - .
  7. SpamCopAdmin

    Is powercomm.com a spammer domain?

    >- I started parsing those URLs and reporting them along with the spam Argh! Not cool! We can't add anything to the spam for SpamCop to "find" and report. If the URL is only contained in an image (which SpamCop can't read) we can't do anything about it. We can't type it into the spam so the parse can see it. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net - .
  8. SpamCopAdmin

    'Blank' email / bad headers

    The problem is that there is no blank line after the end of the headers and before the start of the body text. Your email client and SpamCop both think there is no text in the message. SpamCop is looking for the full headers in one contiguous block of text, followed by a blank line, which signals the end of the headers, and then followed by the body text of the spam. The parse won't accept headers if there is no body text with them. - Don D'Minion - SpamCop Admin - service[at]admin.spamcop.net .
  9. Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  10. SpamCopAdmin

    Spamvertised info

    Basically, if your web URL appears in an email reported as spam, SpamCop will send a notice about it to your web host. That's all it is, a notice. We don't ask for any action, nor do we threaten any action. It is just a notice. When you are informed about the report, all you have to do is delete the URL and forget about it. If you get the link in the SpamCop report, you can use it to come to our web site and flag the URL as deleted so that SpamCop won't send any more reports about it. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net - .
  11. SpamCopAdmin

    Spamcop wont' report to the NIC

    On the parse page, SpamCop says: "I refuse to bother abuse[at]nic.ru." Generally, SpamCop doesn't like to send reports to nic addresses. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net -
  12. SpamCopAdmin

    SC needs to include resolved IP

    You may have missed this information on the SpamCop parse page... Tracking link: http://sogoodmastering.com/date.html [report history] Host sogoodmastering.com (checking ip) = 213.186.33.87 Resolves to 213.186.33.87 Routing details for 213.186.33.87 [refresh/show] Cached whois for 213.186.33.87 : abuse[at]ovh.net - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net - .
  13. SpamCopAdmin

    Forgot my quick reporting link for MailWaser Pro

    Log into your account here and look for the "submit" address on the "Welcome" page you see when you log in. Replace "submit" with "quick" and you're all set. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net -
  14. SpamCopAdmin

    [Resolved] 5.200.128.0/17

    Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  15. SpamCopAdmin

    [Resolved] 91.229.96.0/22

    Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  16. SpamCopAdmin

    Fake/Forged Failed Mail Notices?

    Probably a spammer is simply forging your email address as the "From" address on his spam. The bounces are being sent "delayed." Instead of refusing mail during the SMTP conversation like it's supposed to, the receiving server is accepting mail with forged headers and then later sending a bounce to what it thinks is the sender, but is in reality a forged return address. Delivery failure notices should be sent by the sending server that failed to deliver the message, not by the receiving server that rejected it. - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  17. The parse gets the date from the "Received" line that contains the source IP. Received: from 91.210.102.166 by rms-us005 with HTTP In this case, no date. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net - .
  18. SpamCopAdmin

    [Resolved] 37.235.128.0/17

    Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  19. Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  20. SpamCopAdmin

    [Resolved] strato.de

    Reports to strato.de have been disabled by admin decision. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net -
  21. SpamCopAdmin

    [Resolved] 90.176.0.0/13 (AS5610)

    Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  22. Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  23. Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
  24. SpamCopAdmin

    website down?

    SpamCop is back up. This is posted on the login page: Scheduled Service Outage The SpamCop.net Reporting Service is scheduled to be offline and unavailable for up to two (2) hours beginning at 8:00 a.m. PDT on Wednesday, October 16, 2013. The reason for the outage is to upload updates to the SpamCop.net Reporting Service. The SpamCop.net website, including spamcop.net, www.spamcop.net, members.spamcop.net and mailsc.spamcop.net will be down during the upgrade. Emailed spam submissions will continue to be accepted but will not be processed during the downtime. Once the service is brought back online you can expect a delay of several hours as the backlog of spam is processed. - Don D'Minion - SpamCop Admin - - Service[at]Admin.SpamCop.net - .
  25. Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net -
×