Ex_Brit

My Old Cesmail Address Suddenly Being Heavily Spammed

16 posts in this topic

So what has changed recently at Cisco or wherever to suddenly open the floodgates and admit a torrent of spam each day? Too many for me to report so have given up and simply delete them all.  They are all addressed to my Cesmail email address and all of course are filtered into a spam folder at my current spam filtering "service", Fastmail, to which all mail gets forwarded now before I POP it out to my desktop..

Anyone else experiencing the same?

Edited by Ex_Brit

Share this post


Link to post
Share on other sites

Sorry I missed those.  I can never seem to get any results using the Search function here.   OK well that answered my question, thanks.

I assume there's no-one investigating this as Cisco seems to wish we would all just disappear, or at least that's the impression I got.

Share this post


Link to post
Share on other sites

No I haven't made much progress either learning the "art of the search."

Share this post


Link to post
Share on other sites
12 hours ago, Ex_Brit said:

So what has changed recently at Cisco or wherever to suddenly open the floodgates and admit a torrent of spam each day? Too many for me to report so have given up and simply delete them all.  They are all addressed to my Cesmail email address and all of course are filtered into a spam folder at my current spam filtering "service", Fastmail, to which all mail gets forwarded now before I POP it out to my desktop..

Anyone else experiencing the same?

As Lking notes, many have reported this

 

I too use Fastmail, and have reported them twenty at a time by email using More / Forward as attachment (all the selected items) to the quick magik Spamcop address.

 

Cisco removed the filter sometime back.

 

You can search the Spamcop forums using Google.

Share this post


Link to post
Share on other sites

I've tried that and for some reason SC rejects the email.   I'll keep trying as they occur.

Share this post


Link to post
Share on other sites
16 hours ago, Ex_Brit said:

So what has changed recently at Cisco or wherever to suddenly open the floodgates and admit a torrent of spam each day? Too many for me to report so have given up and simply delete them all.  They are all addressed to my Cesmail email address and all of course are filtered into a spam folder at my current spam filtering "service", Fastmail, to which all mail gets forwarded now before I POP it out to my desktop..

Anyone else experiencing the same?

try again
SpamCop addies are being DoS attacked by botnets
Gmail gives up the ghost when you get 30 spams in a row and disables your account
opened a mail.com account which is picking them up (redirect ALL messages to mail.com and put it in mailhost update )
Use MailWasher to get headers and body always check abuse address as a legacy some/most SC abuse addresses are hard coded in and now obsolete (annoying)
even if everyone reports a few with a boiler plate many of this creeps botnets stand to get taken out.
 

     botnet spewing spam *DoS* attack
URL links are "Joe Jobs" (unassociated with attacks)

SCAN INFECTED COMPUTER FOR MALWARE - THEN Change Password
Cisco site for reputation score
>
>

Completed sample https://www.spamcop.net/sc?id=z6405401576z39e328f0d6fde1de05eae109a3f5c0b2z

183.91.3.27    botnet spewing spam *DoS* attack
URL links are "Joe Jobs" (unassociated with attacks)

SCAN INFECTED COMPUTER FOR MALWARE - THEN Change Password
Cisco site for reputation score

https://www.talosintelligence.com/reputation_center/lookup?search=183.91.3.27
>
 use the "whois"  tab down page to get real abuse address "https://www.talosintelligence.com/reputation_center/lookup?search=183.91.3.27

The real abuse address is "hm-changed@vnnic.net.vn" the others are outdated legacy dust! Trying write in this forum is awkward at best

Edited by petzl

Share this post


Link to post
Share on other sites

Thanks

Share this post


Link to post
Share on other sites
20 minutes ago, Ex_Brit said:

Thanks

Seems the attacks are from a child porn spammer who don't like being reported

obviously not in jail yet?? or maybe from jail?

Share this post


Link to post
Share on other sites

Yes it appears that way. 

I finally got the bulk forwarding as attachment thing to work in Fastmail and SC auto-responder worked as it should.

Not sure what I was doing wrong before.

I should add that Fastmail spam filtering is excellent.

Edited by Ex_Brit

Share this post


Link to post
Share on other sites

Yes, Fastmail spam filter is fine.

 

However the report by email gets hung up by Spamcop


Bounce error
Your email address, whatever@example.com has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.4.7 - Delivery expired (message too old) 'timeout'
Please ensure your email account is reliable, then click below: 

==

I think Spamcop is working so hard that timeouts occur, my mailbox is fine.

The bounce error disabled reporting so I had to 'click below' and resend all recent email submissions.

To date 359 Qtum 'main network' spams

Share this post


Link to post
Share on other sites
40 minutes ago, michaelanglo said:

Yes, Fastmail spam filter is fine.

 

However the report by email gets hung up by Spamcop


Bounce error
Your email address, whatever@example.com has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.4.7 - Delivery expired (message too old) 'timeout'
Please ensure your email account is reliable, then click below: 

==

I think Spamcop is working so hard that timeouts occur, my mailbox is fine.

The bounce error disabled reporting so I had to 'click below' and resend all recent email submissions.

To date 359 Qtum 'main network' spams

just signed up to test SpamCop worked sent me a validate no bounce

Will wait for some spam now to see if it handles it
Added fastmail to my host and woking
https://www.spamcop.net/sc?id=z6405529928z25589ab2e428bd776ff914a4b923139ez

Share this post


Link to post
Share on other sites
3 hours ago, michaelanglo said:

Yes, Fastmail spam filter is fine.

 

However the report by email gets hung up by Spamcop


Bounce error
Your email address, whatever@example.com has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.4.7 - Delivery expired (message too old) 'timeout'
Please ensure your email account is reliable, then click below: 

==

I think Spamcop is working so hard that timeouts occur, my mailbox is fine.

The bounce error disabled reporting so I had to 'click below' and resend all recent email submissions.

To date 359 Qtum 'main network' spams

About the same here.

Share this post


Link to post
Share on other sites
11 minutes ago, Ex_Brit said:

About the same here.

Well I subscribed for the us$30 a year account
To send spam to SpamCop I just "forward as attachment" (to my super-secret SC reporting address), a bit of a delay but never more than 2-3 minutes
I prefer full reporting to make sure it goes to a working abuse address 
 

Share this post


Link to post
Share on other sites

Good.

Share this post


Link to post
Share on other sites

Also good is that I have seen no Qtum 'main network' spam for 24 hours.

 

Maybe that's all the instigator paid for.

 

A couple of 'confirm email adress' and a 'fax' however.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now