Jump to content

please help ASAP spamcop blacklisted my ISP


cheryl

Recommended Posts

please help ASAP spamcop blacklisted my ISP. my ISP has now shut off my account. until i get spamcop to UNBLACKLIST TDL (my isp) is there a phone number for spamcop??

can someone email me at cheryl[at]spamcop.net?

Link to comment
Share on other sites

No one here can offer much help without some more specific data. SpamCop doesn't block Domains, ISP's, etc .. e-mail sources are the tagets in the SpamCopDNSbl ... From the sounds of your version of your ISP's actions, it could be seen as a suggestion that you've been reporting yourself/your own ISP? Perhaps a nice note to Deputies at admin.spamcop.net might help to answer somethings, but they will also need much more explicit data. Is this the place you're talking about? If so, this includes data needed for someone else to help.

Registrant:

The Diamond Lane (TDL-DOM)

2415 Radley Court #2

Hayward, CA 94545

US

Domain Name: TDL.COM

Administrative Contact:

Nicolaus, Mary (MAN2) maryann[at]tdl.com

The Diamond Lane

2415 Radley Court #1

Hayward, CA 94545

US

(510) 293-0633 fax: 999 999 9999

Technical Contact:

Nicolaus, Don M. (DN) don[at]TDL.COM

2415 RADLEY CT STE 1

HAYWARD, CA 94545-1148

US

(510)293-0633 fax: (510)782-4738

Record expires on 06-Dec-2007.

Record created on 05-Dec-1994.

Database last updated on 9-Apr-2004 12:34:58 EDT.

Domain servers in listed order:

NS.TDL.COM 206.180.224.2

NS2.HE.NET 216.218.131.2

Trace www.tdl.com (206.180.225.34) ...

64.200.150.174 RTT: 91ms TTL:144 (sntcca1wcx1-hurricane-pos.wcg.net bogus rDNS: host not found [authoritative])

64.71.129.86 RTT: 91ms TTL:144 (pos1-3.gsr12416.fmt.he.net ok)

64.71.128.181 RTT: 97ms TTL:144 (pos4-0.gsr12012.sjc.he.net ok)

216.218.223.186 RTT: 94ms TTL:144 (f0-0-7.br1.sjc.he.net ok)

216.218.222.110 RTT: 96ms TTL:144 (No rDNS)

206.180.225.34 RTT: 97ms TTL:239 (www.tdl.com ok)

Recursive queries supported by this server

Query for 34.225.180.206.in-addr.arpa type=255 class=1

34.225.180.206.in-addr.arpa PTR (Pointer) www.tdl.com

225.180.206.in-addr.arpa NS (Nameserver) ns.tdl.com

225.180.206.in-addr.arpa NS (Nameserver) ns2.he.net

ns.tdl.com A (Address) 206.180.224.2

ns2.he.net A (Address) 216.218.131.2

Link to comment
Share on other sites

YES that is the TDL i was talking about. he called me today and said "because you are forwarding your mail from www.sbdwebdesign.com to spamcop.net and you are getting alot of spam, they have put TDL into a black hole. and until you get us out of that black hole, we are taking your account off the internet" i asked him what on earth I did wrong??! he said that because my email was being forwarded to spamcop, that it looked like the spam was actually coming from TDL's machine. many many spammers have used my email address as spam :-( im not doing ANYTHING :( how can i send a message to admin.spamcop.net?

he forwarded me this message.

Date:

Fri, 9 Apr 2004 09:44:56 -0700 (PDT)

From:

"root" <root[at]tdl.com>  Add to Address Book

To:

itsmecheryl[at]yahoo.com

Subject:

[spamCop (206.180.227.98) id:873993194]Oh V[at]iagra! (fwd)

---------- Forwarded message ----------

Date: 9 Apr 2004 00:23:01 -0000

From: Cheryl <873993194[at]reports.spamcop.net>

To: abuse[at]tdl.com

Subject: [spamCop (206.180.227.98) id:873993194][iso-8859-1] Oh

V[at]iagra!

[ SpamCop V1.3.4 ]

This message is brief for your comfort. Please use links below for

details.

Email from 206.180.227.98 / 9 Apr 2004 00:23:01 -0000

http://www.spamcop.net/w3m?i=z873993194ze8...92c9d056a9c13ez

[ Offending message ]

Return-Path: <staciebrewstergn[at]tiscali.co.uk>

Delivered-To: x

Received: (qmail 28083 invoked from network); 9 Apr 2004 00:23:01 -0000

Received: from unknown (192.168.1.101)

by blade6.cesmail.net with QMQP; 9 Apr 2004 00:23:01 -0000

Received: from shell3.tdl.com (206.180.227.98)

by mailgate.cesmail.net with SMTP; 9 Apr 2004 00:23:01 -0000

Received: from julian.uwo.ca (m185.net195-132-194.noos.fr

[195.132.194.185])

by shell3.tdl.com (8.12.10/8.12.10) with ESMTP id i390MrnU003011

for <x>; Thu, 8 Apr 2004 17:22:56 -0700

Message-ID: <4075_________1ED5[at]tiscali.co.uk>

MIME-Version: 1.0

Date: Fri, 09 Apr 2004 00:18:16 +0000

Subject: =?iso-8859-1?b?T2ggVkBpYWdyYSE=?=

User-Agent: Mozilla/5.001 (windows; U; NT4.0; en-us) Gecko/25250101

To: x

From: "Stacie Brewster" <staciebrewstergn[at]tiscali.co.uk>

Content-Type: text/html

Content-Transfer-Encoding: 8bit

X-spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on blade6

X-spam-Level: ****

X-spam-Status: hits=4.7 tests=HTML_70_80,HTML_COMMENT_RATIO,

HTML_IMAGE_ONLY_02,HTML_MESSAGE,LOCAL_DRUGS_MALEDYSFUNCTION,

LOCAL_DRUGS_MALEDYSFUNCTION_OBFU,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY

version=2.63

X-SpamCop-Checked: 192.168.1.101 206.180.227.98 195.132.194.185

X-SpamCop-Disposition: Blocked bl.spamcop.net

<html><body>

<center><!--bdr0fp37c89--><a

href="http://www.kjkopu.com/v/"><!--sriq1onu6HJZBU8P4--><img src="http://www.mjhgd.com/forty.gif" height="200"

width="400" border=""></a></center>

</font>

</html></body>

Link to comment
Share on other sites

First immediate situation in the spam parse is:

Possible forgery. Supposed receiving system not associated with any of your mailhosts

Will not trust anything beyond this header

206.180.227.98 not listed in dnsbl.njabl.org

206.180.227.98 not listed in cbl.abuseat.org

206.180.227.98 not listed in dnsbl.sorbs.net

Forgery detected, or mailhost configuration incomplete. Please verify source IP identified.

So did you ever get involved with the mail-host thing? Did you follow through to completion, to include doing some manual parsing to insure that things were resolved correctly?

I copied your spam, ran it through, and came up with the following target, vice your TDL.com address;

Re: 195.132.194.185 (Administrator of network where email originates)

To: abuse[at]noos.fr (Notes)

To: abuse[at]noos.net (Notes)

spammers have used my email address as spam

As said before, only IP addresses are at issue, not "e-mail addresses"

how can i send a message to admin.spamcop.net

Again .. Deputies at admin.spamcop.net

Link to comment
Share on other sites

the next issue may be due to something called "recently discovered sending mail" as the listing doesn't currently show any "recent mail activity" ??

206.180.227.98 listed in bl.spamcop.net (127.0.0.2)

Since SpamCop started counting, this system has been reported less than 10 times by less than 10 users. In the past 74.0 days, it has been listed 2 times for a total of 26 hours

In the past week, this system has:

Been reported as a source of spam less than 10 times

And this again, is possibly something the Deputies can take a look at, verify, possibly handle.

Link to comment
Share on other sites

Well, according to the parse here:

1: Received: from shell3.tdl.com (206.180.227.98) by mailgate.cesmail.net with SMTP; 9 Apr 2004 00:23:01 -0000

SpamCop received mail from 206.180.227.98

Hostname verified: shell3.tdl.com

2: Received: from julian.uwo.ca (m185.net195-132-194.noos.fr [195.132.194.185]) by shell3.tdl.com (8.12.10/8.12.10) with ESMTP id i390MrnU003011 for <x>; Thu, 8 Apr 2004 17:22:56 -0700

Possible forgery. Supposed receiving system not associated with any of your mailhosts

Will not trust anything beyond this header

206.180.227.98 not listed in dnsbl.njabl.org

206.180.227.98 not listed in cbl.abuseat.org

206.180.227.98 not listed in dnsbl.sorbs.net

Forgery detected, or mailhost configuration incomplete. Please verify source IP identified.

Note that this occurs even for accounts not configured to use Mailhost. Does this mean that use of Mailhost is now mandatory?
Link to comment
Share on other sites

Note that this occurs even for accounts not configured to use Mailhost. Does this mean that use of Mailhost is now mandatory?

No idea, although the recent content change on the "front reporting page" sure seems to hint that it's close. However, I ran it through to a much happier conclusion using a free reporting account ...

Dropped a note to Ellen to check on Cheryl's behalf ....

Link to comment
Share on other sites

wow, im reading what you are writing and its SO OVER MY HEAD :-(

all I know is that I hired spamcop to filter the crap out. and now it looks like someone thinks I am sending the crap. and someone thinks TDL hasn't controled my crap. LOL

thank you for emailing Ellen. Im really trying to understand what you are talking about. but its all very over me. Im no techie by any means.

Link to comment
Share on other sites

PS. I have only used "quick report and immedialty trash" because I dont understand all the other stuff. I dont report everything. just once in a while. So maybe I was reporting 'myself' on accident? because people were using my IP address?? how would they do that?

maybe it looked like it was from my IP address because i was having all the mail from www.sbdwebdesign.com to spamcop?

Im sorry Im so DENSE lol

Link to comment
Share on other sites

I have only used "quick report and immedialty trash"

Unfirtunately, that is an option that has been recommended against by other users many times in the past <g>

So maybe I was reporting 'myself' on accident?

and this is exactly why

When it works, it works great. When something goes wrong, well <g>

In this case, especially with the mail-hosting thing possibly involved, you'd normally be referred to the SpamCop owner's posted link asking for volunteers, issues, and problem reports at http://forum.spamcop.net/forums/index.php?showtopic=723 .... but if the dialog thus far has you confused ... but you might want to try reading through as much of that as you can stand anyway ... it might explain the situation you're in and why the SpamCop parser stopped where it did on the spam offered as your sample. Noting that the mail-host thing is an attempt to solve the issue you may have gotten yourself wrapped up in (and a number of other issues, but trying to keep the confusion level down <g>)

Link to comment
Share on other sites

you've been very helpful (I think <g>) and Im trying to follow. ok you've convinced me to not report spam that way anymore. (heck if i could just get out from under this mess, I'd do the HULA) and i like spamcop. I read that webpage you gave but um. I feel like I am walking in on a converstaion that I have no idea what it means.

right now all I care abotu is that TDL gets off the blacklist and they turn my website back on. after that, im going to read around this place like crazy trying to figure this all out. and be a more responsible reporter.

ive tried sending messages to spamcop and Deputies so... do you think that will help my immediate urgent problem?

Link to comment
Share on other sites

you've been very helpful (I think <g>)

Of course, I've got my fingers crossed that you aren't actually my dearly beloved of 24+ years of marriage followed by 8+ years of divorce <g> ... so if you noticed some of the hesitation in my typing <g>

I'd do the HULA

huh-oh ... a possible refernce to one of my/our tours in Hawaii?

feel like I am walking in on a converstaion that I have no idea what it means

Hi Cheryl, welcome to the club <g>

sending messages to spamcop and Deputies so... do you think that will help

I can only say that they will look at the "evidence" and go from there. Of course, I will point out that Ellen for instance asks that some specific issues be brought to her attenton (via the Deputies address) but then also cautions that "they" are way behind on their e-mail ... and now you've mentioned multiple e-mails you sent, there's the one I sent ... ummmm, maybe hope "we" haven't ticked anyone off yet by asking them to research the same item over and over <g> On the other hand, she's never responded directly to me, just pops in with whatever her answer/suggestions are and moves on ...

So have fun reading while waiting <g>

Link to comment
Share on other sites

oh no! you're on to me! he he

how could someone divorce someone as nice as you? doesn't make sense to me!

U know, im way too impatient for this tech stuff.

doesn't help to have my ISP making threats and breathing down my neck. which wouldn't be so bad if thier breath wasn't so bad :)

Link to comment
Share on other sites

On the other hand, she's never responded directly to me, just pops in with whatever her answer/suggestions are and moves on ...

See <g> .... of course, there's that bit of assumption that Ellen did work her magic there <g> It might be that there has been enough "traffic" measured from there to automatically drop this IP off the list (just not enough detail on the BL page for "us" to guess ...

Sorry, should have done this before posting .. send your ISP to http://www.spamcop.net/w3m?action=checkblo...=206.180.227.98 to see the current status.

Link to comment
Share on other sites

Ellen the magic maker, and her faithful assistant, wazoo :-) thank you to steven too!

thank you all for your help!

wazoo, i think i sent a personal message but im not sure if I did it right LOL either way my email is cheryl[at]spamcop

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...