Jump to content

KNERD

Members
  • Posts

    92
  • Joined

  • Last visited

Posts posted by KNERD

  1. After blocking all of Eonix.net entire IP range, I am now getting the same spam from SpamCrossing.com (aka Hudson Valley Host). I suspect they are in cahoots with each other.

     

    The reasoning is the M.O. is the same as was with Eonix.net

    • sequential IP addresses being used for each spam
    • no action taken with spam
    • spammy sites are still being hosted on Eonix.net

     

    How can we pressure Spamcop to getting more serious with spam blocking with repeat offenders, and lowering the threshold for number of reports to block when they keep getting spam after spam report on the same offender?

     

    Not sure why I even bother with Spamcop anymore as nothing gets done to spammers, and the IP addresses are NEVER on the spamcop block list.

     

     

  2. Let's hope so. It will make them do a little more research into who they are supporting.

     

    SpamCop also needs to step up as their service is losing its clout over spam, and is not strict enough on repeat abusers like Eonix.net, which has seems to have bought an ISP in Eastern Europe to avoid US spam criminal complaints. I have started getting daily spam from them

     

  3. On 5/3/2021 at 11:14 PM, Lking said:

     

    Discovered that RealVNC a "powerful & fully encrypted remote desktop software" that I have been mindlessly using to access an embedded headless Raspberry Pi, requires an operational internet to function. Never mind that both ends are connected to my LAN. An opportunity to do non-communication related things.

    Maybe instead get OpenVPN, or OpenVPN Connect. OpenVPN is completely open source and free, but like many open source projects, not the best docs. For OpenVPN Connect,  two free users, but not fully open source, and has a yearly license for more than two users. It is easy to set up. Neither requires internet to use.

  4. At this point, I just do not believe in those block lists anymore.

     

    I feel the spamcop one is too light on reports (many offenders never even get on the list), and some others are too heavy (never forgets).

     

    I also feel some lists are compromised.  One of them is SORBS. When I was using it, and making reports to spamcop, I would see the offender on the SORBS block list, but still making it into my inbox. Then one day I was wondering why I stopped getting legitimate emails from reputable big companies,   I looked in the maillog to see they were being blocked by SORBS.

     

    I think the best thing to do if you are running your own email server, is to get a full blown server, and block the IP addresses yourself when you keep seeing spam coming from the same provider after sending many reports.

     

    A week ago, I had to rebuild my email server. On that IP address block was the massive IP range of EONIX.net.

    I have not blocked their IP addresses yet, as I seem to be no longer getting any more spam from that provider.

     

     

     

  5. On 2/3/2021 at 8:01 AM, gnarlymarley said:

    One of the biggest issues of this problem is that people might stop relying on one blocking list to stop their spam.  People will move to a scoring system that uses more than one blocking list or else stop using black lists.

    I tried using the SORBES block list, but stopped after I noticed two things. When reporting spam,  Spamcop would show the IP address is on the SORBES list, but still allowed to be sent to my server. The second thing was the SORBES block was blocking legitimate email not on their block list, PayPal, for example.

     

     

  6. Yeah, since I been blocking all of their IP ranges, it been quiet here from Eonix, and Layerhost. I guess I need to update my reject message as it is not very informative on why the message is being rejected.

     

    It been a few months since I got something from Google, but when I did a report, it was sent to abuse@gmail, or something like that. When was the last time you sent a report to Goolag?

    For AWS, yeah, they never do anything about that, so you just have to block their entire IP range. Though on a note, it's been a couple of years since I moved my emails server to a dedicated physical machine with a hosting provider for super cheap. I did not add AWS on this newer email server, and have gotten no spam from AWS at all.

     

  7. 2 hours ago, bretmaverick999 said:

    Correction - On  http://eonix.net/ it lists that their brands are  http://infinitie.net/ and http://serverhub.com/ 

    As for Layerhost it appears to be an unrelated company, but just as spammer friendly. 

    Thanks for that corrected information. I guess Layerhost must of spammed me a lot and did nothing after a lot of spam reports  for me to block them.

     

    I do wonder why you are not getting any more spam from that Ip range. It does make me thing they did a list washing where they just make sure your email address (or server) is not getting spam anymore to stop your complaints. Meanwhile probably still continue to spam,.

  8. 8 hours ago, gnarlymarley said:

    I see different abused addresses on your list such as eonix, layerhost and heficed.

    104.140.0.0/16 net-admin@eonix.net
    104.140.84.0/23 net-admin@eonix.net
    104.148.28.0/24 abusenoc@layerhost.com
    104.206.117.32/27 net-admin@eonix.net
    104.206.96.0/22 net-admin@eonix.net
    104.223.153.0/24 abusenoc@layerhost.com
    170.130.0.0/16 net-admin@eonix.net
    191.101.128.0/21 abuse@heficed.com
    23.228.64.0/18 abusenoc@layerhost.com
    23.231.0.0/17 net-admin@eonix.net
    50.2.0.0/15 net-admin@eonix.net
    50.2.188.0/22 net-admin@eonix.net
    50.2.212.0/22 net-admin@eonix.net

    Layerhost is a brand of Eonix. I am not sure about heficed.com. I must of been getting a lot of spam from them to block. Seems to be from Brazil

     

     

  9. I think all these belong to Eonix. They are entries in my email server blacklist.

     

    104.140.0.0/16
    104.140.84.0/23
    104.148.28.0/24
    104.206.117.32/27
    104.206.96.0/22
    104.223.153.0/24
    170.130.0.0/16
    191.101.128.0/21
    23.228.64.0/18
    23.231.0.0/17
    50.2.0.0/15
    50.2.188.0/22
    50.2.212.0/22

     

×
×
  • Create New...