Jump to content

petzl

Memberp
 View Profile  See their activity

  • Posts

    2,983

  • Joined

  • Last visited

 Content Type 

Posts posted by petzl

    Is the filtering service broken?

    in SpamCop Lounge

    Posted

    1 hour ago, RobiBue said:

    I did receive a mailbox bounce for my gmail account, but when I tested it, it worked, so I went ahead and claimed "problem solved" and was able to parse and send reports. 

    Bounce error
Your email address, x-x-x-x-x@gmail.com has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.3.0 - Other mail system problem 550-'5.7.26 The MAIL FROM domain [bounces=

Please ensure your email account is reliable, then click below:
[Problem Resolved]
News: (Last Modified: 12/10/2022, 11:15:23 AM -0600)

    albeit I do not receive confirmations, so it is possible that SC is blocking gmail....
    (as this is already the second time I have had to reset the bounce count...)

    This is to do with SpamCop email not forwarding email to accounts

    Mine is a Gmail one.

    No reporting addresses found for 190.92.179.156

    in Routing / Report Address Issues

    Posted · Edited by petzl

    1 hour ago, ArtmakersWorlds said:

    Hey I have been suddenly getting 6 or more a day from this a2webhosting or hosting.com site.   Of course spamcop comes up with the dreaded devnul meaning they don't care.   I tried forwarding directly to them replacing the # for @   which USUALLY works but not for them.  It comes back with I have to sign in, log in, create a ticket.

    Need a SpamCop Tracking URL at TOP of page BEFORE you submit or in the dark?
    https://www.spamcop.net/sc?id=z6796324856z92e4a4d4454d22c4f2a16bb8e35bc09az

    Is the filtering service broken?

    in SpamCop Lounge

    Posted · Edited by petzl

    5 hours ago, mikeobrien said:

    I haven't gotten any email via Spamcop since last night some time.  My actual mailbox is working fine.  Anyone else seeing this problem?

    Sent a test not bouncing but not yet received?
    Now 3 hours nothing?

    My email has been hacked and it is so old that I can not log in to change the password

    in Routing / Report Address Issues

    Posted · Edited by petzl

    Easiest way is to open a SpamCop (SC) account it's free and simple to use.
    https://www.spamcop.net/anonsignup.shtml 
    Learn how to get full headers and text body (text only )then just copy and past it into the SC text box and push submit after it's been parsed and YOU check it's probably correct. (not from someone you know they will get "browned" off)
    BEFORE you submit collect the "SpanCop tracking url" at top of page save it/them in a text APP like notepad.
    If you wish to report it yourself spam cop will tell you where to send it just by putting the received IP only into text box.
    You will get the hang of it after a few reported spams, should be all you need for starters to put spammers out of business maybe jail.

    My email has been hacked and it is so old that I can not log in to change the password

    in Routing / Report Address Issues

    Posted · Edited by petzl

    3 hours ago, tkdrake said:

    These people that have my password are send naked photos to people for clickbait using my email. 

    As you still receive these emails from a account you don't send from, report it as abuse, go further report obscenity's as child porn spam to abuse,
    as you are unlikely  a pediatrician, you don't know and not qualified to judge if it's not!
    I haven't been sent porn for years now so it works and should shut down spammers access to your account, but not email through it.
    my boiler plate to add to abuse report. Keep the ">" and blank line below, at end of boiler plate, keeps the word wrapping intact!
    Put boiler plate text at top of report, or if in a SpamCop report in the notify text box for abuse desk.

    Quote

    RESET PASSWORD
    Child porn spammer 
    pictures under 18 or made to look under 18
    NO PROOF OF AGE available! 
    SENT TO MINORS
    > 

     

    My email has been hacked and it is so old that I can not log in to change the password

    in Routing / Report Address Issues

    Posted · Edited by petzl

    1 hour ago, tkdrake said:

    Yes they have my password and I have no way to change it . 

    I get these same boilerplate spam often just ignore it!
    https://www.spamcop.net/sc?id=z6796324856z92e4a4d4454d22c4f2a16bb8e35bc09az
    Not good that you recognise you password as yours
    You not answered if it's it's a SpamCop account?
    If not ring your ISP to send a reset password to your/their email address

    Get Threatening Emails From My Account

    in SpamCop Lounge

    Posted · Edited by petzl

    5 hours ago, Ex_Brit said:

    Thanks that sets my mind at rest.  As it’s so common it speaks volumes about the security at cesmail’s servers.

    If you used the new owners of cesmail, now Cisco servers, you would not even see it, Some SpamCop users like to pull the wings off spammers.
    So spam filtering is turned off.
    I not only report such spammers to the ISP but also to the sending Nations authorities, even if sent via a Botnet the ISP logs the IP where that is sent from, so would then be mentioned to the authorities of the IP's country, they then would track it further. The loon stands to be caught, but legal processes are slow!
    If it's thought the Bitcoin spammer has a bit of wealth he may even be extradited to a Moroccan justice system (41.141.94.156) !

    Get Threatening Emails From My Account

    in SpamCop Lounge

    Posted · Edited by petzl

    2 hours ago, Ex_Brit said:

    Periodically I receive emails to & from my cesmail email address saying due to a trojan my “device” has been hacked.  It possibly started either after I reported a strange email abyear or so ago, or after I almost got an infection which Malwarebytes Pro intercepted and cleaned.  I now use McAfee to protect my PC & iPhone/iPad. The email asks for money but I delete them immediately.  I don’t believe what they say as I frequently do full scans with WD, MBAM Pro (now installed but kept inactive), and McAfee.

    Thoughts anyone? 

    Pretty common. 
    https://www.spamcop.net/sc?id=z6796324856z92e4a4d4454d22c4f2a16bb8e35bc09az
    I just use windows defender which is pretty good. Sometimes I do a free scan with SpyHunter (never buy it)

    Can I keep my Mailhosts and still report spam?

    in Mailhost Configuration of your Reporting Account

    Posted

    10 hours ago, DaveO8888 said:

    I have my email accounts registered with SpamCop.  I continue to receive spam from mostly foreign IP hosting addresses.  I don't want to remove my mailhosts in SpamCop but after adding them I cannot report spam by either email submission or webform.  I get a "Possible Forgery/Nothing to do" message and when I try to report the spam I get a "No Data/Too Much Data" message.  If I delete my mailhosts in SpamCop I am again able to report all spam.  Is there any way to report spam without deleting mailhosts? Alternatively, does the report generated show the originating host IP's?

    SpamCop v 5.4.0 © 2023 Cisco Systems, Inc. All rights reserved.
    Here is your TRACKING URL - it may be saved for future reference:
    https://www.spamcop.net/sc?id=z6795733209z8f0052ac2d21f8dea58eb42362b9045dz

    That email is ready to report?

    Not hosted but there is a spamvertized site

    in Routing / Report Address Issues

    Posted

    2 hours ago, Hanco said:

    hkdps.piarliye.com 
    Pings at 88.214.26.85

    My browser or ISP has the IP blocked?
    Sometimes it's a good idea to be smarter than the BOT SpamCop and send a report yourself
    Seems there are no websites running from that IP now?
    https://www.lookip.net/ip/88.214.26.85

    Failed Domain Lookup.
    Hostname:    hkdps.piarliye.com
    Domain:    piarliye.com

    Querying root.rwhois.net:4321 for piarliye.com...
    Can not resolve host 'root.rwhois.net'

    Querying whois.crsnic.net for piarliye.com...
       Domain Name: PIARLIYE.COM
       Registry Domain ID: 2752432800_DOMAIN_COM-VRSN
       Registrar WHOIS Server: whois.namecheap.com
       Registrar URL: http://www.namecheap.com
       Updated Date: 2023-01-19T14:42:20Z
       Creation Date: 2023-01-19T14:42:15Z
       Registry Expiry Date: 2024-01-19T14:42:15Z
       Registrar: NameCheap, Inc.
       Registrar IANA ID: 1068
       Registrar Abuse Contact Email:  mailto:abuse[AT]namecheap[DOT]com
     

    Mailhost configuration problem, identified internal IP as source

    in SpamCop Reporting Help

    Posted · Edited by petzl

    2 hours ago, Mikey2 said:

    Thanks for the second set of eye Petzl.  Your analysis seems correct, but I do not know how I can change my IP for email, as it belongs to AOL.   I guess I either have to give up this email address or stop reporting spam to fix this?  I don't have any control over the provider's email IP, to the best of my knowledge.

    I have Internet provided by Frontier.com (local telco), which was Verizon.  Verizon dumped their email several years ago over to AOL, which I am forced to use their User Interface mail relay. 

    My Malware VPN is turned off when I try to report spam.  I do use OpenDNS DNS servers, 208.67.222.222 with backup 208.67.222.220 if that matters?

    Not sure about AOL do they have web mail? If so try direct reporting spam from that.
    It looks to me like AOL are using a badly configured email intranet server?
    I only use Gmail Webmail, without problems
    A  VPN should not affect SpamCop reporting, however some websites have a blacklist of VPN IP's and deny access.
    I mainly use a VPN except like now in morning I read "news", then I have it off as my VPN IP's are blocked for such sites.

    Mailhost configuration problem, identified internal IP as source

    in SpamCop Reporting Help

    Posted

    1 hour ago, Mikey2 said:

    SpamCop v 5.4.0 © 2023 Cisco Systems, Inc. All rights reserved.
    Here is your TRACKING URL - it may be saved for future reference:
    https://www.spamcop.net/sc?id=z6794918584zedd0b52588ee71ebe70d76c09f8d9840z

    your email provider is a intranet  (10.215.172.81) is listing as "received from" IP  178.170.47.16 which is the spammer?
    https://check.spamhaus.org/listed/?searchterm=178.170.47.16
    Your IP address is either exhibiting suspect behavior, is misconfigured, or has a poor sending reputation.

    Mailhost missing, and I can't add it

    in Mailhost Configuration of your Reporting Account

    Posted

    5 hours ago, Scott_R said:

    Not sure what you mean. Below is the email I received. Many times now, I have clicked on the first link (after "Please return this complete email, preserving full headers and the special
    tracking codes below.  Visit this address:") and copied/pasted the full headers and body of that email into the field there. When I do so, I get the message  "Test email processed succesfully.
    Please re-visit the mailhost menu and make sure you have registered mailhosts for all your email addresses." etc.

    And when I go back to the mailhost menu, the address that i was just told was processed successfully is not there.

    I have also forwarded (as an attachment) to the address under "Alternately...." Also no change.

    Seems to me you have done this correctly?
    https://www.spamcop.net/fom-serve/cache/397.html

    You need to contact SpamCop
    https://www.spamcop.net/ces/contact.shtml

    Mailhost missing, and I can't add it

    in Mailhost Configuration of your Reporting Account

    Posted · Edited by petzl

    8 hours ago, Scott_R said:

    I've repeatedly tried to add an address (a verizon.net account, administered by AOL). The test email is sent through mx-aol.mail.gm0.yahoodns.net.

    I copy/past the whole email (header and body) to the field in the link provided, and am then told "Test email processed successfully."

    But the mailhost never appears on the Mailhosts page. What's going on? I've tried this a half-dozen times as well as forwarding the email instead of using the form.

    The emails you get from SpamCop (often a number) give you a link you need to click each one to verify only then will your Mailhosts be updated

    Mailhost configuration problem, identified internal IP as source

    in SpamCop Reporting Help

    Posted · Edited by petzl

    2 hours ago, scottNY said:

    "https://www.spamcop.net/w3m?action=checkblock&ip=93.115.96.156
    will be delisted automatically in approximately 6 hours.
    Other hosts in this "neighborhood" with spam reports
    93.115.96.56 93.115.96.171 "

    The above is SpamCop Blocklist works like a radar, when certain mathematically number of spam IP's hit it it lists that IP for at least 24 hours.
    If your Outlook headers are wrong  but the same as AOL?
    (try copying and pasting AOL webmail headers to SpamCop report page to make sure)

    Mailhost configuration problem, identified internal IP as source

    in SpamCop Reporting Help

    Posted

    2 hours ago, scottNY said:

    Thanks for the clear direction, Petzl.  Here is what you asked for.  https://www.spamcop.net/sc?id=z6792151867z023f771c3fe755a1a45ad824025053f2z

    Here is the header information with my email address hidden:

    Received: from 127.0.0.1 by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com pod-id atlas--production-gq1-69c878588f-lqv2b.gq1.yahoo.com with HTTP; Sat, 31 Dec 2022 03:34:10 +0000
    Return-Path: <return@liveisgood.shop>
    X-Originating-Ip: [93.115.96.156]

    You using Yahoo email?
    What is your email client  seems headers are mangled?

    Go to Mailhosts and send update them
    the mail is from a spammer and gets blocked
    https://www.spamcop.net/w3m?action=checkblock&ip=93.115.96.156
    will be delisted automatically in approximately 6 hours.
    Other hosts in this "neighborhood" with spam reports
    93.115.96.56 93.115.96.171

    Mailhost configuration problem, identified internal IP as source

    in SpamCop Reporting Help

    Posted

    On 12/30/2022 at 7:27 AM, scottNY said:

    Thanks. I understand that 127.0.0.1 is an internal loopback IP all computers use. How come I get regularly get spam [it always includes "yahoo" in the email header properties dialog] and uses 127.0.0.1 as the sender IP? It isn't coming from my PC and if I try to submit to Spamcop manually, it bounces back. I hope I am explaining this correctly.

    Try reporting one via SpamCop and before you submit at top of reporting page will be a SpamCop "Tracking URL" copy it and post it here may help solve?
    Here is your TRACKING URL - it may be saved for future reference:
    https://www.spamcop.net/sc?id=z6783981921z3874a5706b7057f2b6578e022311dddfz

×
×
  • Create New...