HeatherReid43 Posted January 20, 2020 Share Posted January 20, 2020 We have been receiving continuous spam from various address hosted on Amazon Web Services and they are sending links hosted on https://storage.googleapis.com as can be seen from the links to the reports below https://www.spamcop.net/sc?id=z6609711481z5f7ff7906030421d35c28ec4fd76ebdfzhttps://www.spamcop.net/sc?id=z6609711460z56c0fcbe123772538e3e59d397f1debbzhttps://www.spamcop.net/sc?id=z6609483256z97380f1a15232897ee82cee7d6f091c0zhttps://www.spamcop.net/sc?id=z6609366126zdb94260fe772eeaeec0b586ccc824df9zhttps://www.spamcop.net/sc?id=z6609256707z4d8a52a2186b2f32c75f647c6fbe356dzhttps://www.spamcop.net/sc?id=z6609256623zc4514931da5788b2acde16bd1ef32c52zhttps://www.spamcop.net/sc?id=z6609256487ze5debd3a12045f5132105bd9b86e0a44zhttps://www.spamcop.net/sc?id=z6609255536z1bc66246264b337428f3bd9706d31cf8zhttps://www.spamcop.net/sc?id=z6609076508ze91cae8abe953370fc6a3018c2562c80zhttps://www.spamcop.net/sc?id=z6609076340zed79e13a21d4a2001db92feb8acfe294zhttps://www.spamcop.net/sc?id=z6609076325z8328d3171b85f6a300450172203866fdzhttps://www.spamcop.net/sc?id=z6609076302z163fdb001049a51856327793ed961f5fzhttps://www.spamcop.net/sc?id=z6609076156z3366ccef95b77d0d76ac7412e7bf677dz any idea how do take care of this and stop the spam source ? Quote Link to comment Share on other sites More sharing options...
gnarlymarley Posted January 21, 2020 Share Posted January 21, 2020 11 hours ago, HeatherReid43 said: any idea how do take care of this and stop the spam source ? Heather, I have been getting that and it is coming from all over amazon's ip ranges. Google seems to have no interest, and neither does amazon. I setup my email server to reject it and they still try to send it. At this point, I am not sure there is a way to stop it without a firewall that can drop the tcp connection before it connects. Right now, I am mainly feeding the blocking list, but the spammer changes to a new IP every few minutes, so blocking based on a single IP seems pointless. If I hear of anything that works, then I can post it here. Quote Link to comment Share on other sites More sharing options...
petzl Posted January 21, 2020 Share Posted January 21, 2020 22 hours ago, HeatherReid43 said: any idea how do take care of this and stop the spam source ? You need to report to abuse[AT]amazonaws[DOT]com from Gmails WebPage Click "Show original" on your gmail WebMail page. you will see the IP that sent it to Gmail SPF: PASS with IP 52.54.105.63 Learn more Forward it to AmazonAWS paste the IP above the text you paste into forwarded message. I paste this above headers and body text Criminal phishing, bogus reply address, bogus unsubscribe (NEVER subscribed), DDoS Banned all Amazon and subsidiaries purchases because of inept AWS abuse responses to AmazonAWS DDoS multiple IP email attacks It looks to me Amazon should block port 25 to prevent viruses and spam tools managing to connect directly from infected machines through your NAT? All those who have access to your network need to scan for malware. If detected change password injection 52.54.105.63 abuseXamazonawsXcom Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.