-
Posts
2,985 -
Joined
-
Last visited
Content Type
Profiles
Forums
Events
Posts posted by petzl
-
-
46 minutes ago, fliptop said:
OK, I restarted my browser, and after logging into the members area a basic authen window popped up. After logging in, I checked and there were no cookies set in my browser. Only when I navigate to the forum did the cookies start appearing. If the problem persists I'll report back later today.
just noticed a message
Announcement: System Outages Tuesday, October 18, 2022
We will be performing upgrades and replacement of several SpamCop servers on Tuesday, October 18, 2022 between the hours of 08:30 a.m. GMT and 12:00 p.m. GMT (1:30am to 5:00am PDT).
There will be short outages of approximately 15 minutes each where the SpamCop website is not available during this time. Submissions will still be accepted, but processing may be delayed.
Thank you for your patience. -
having to sign in when submitting reports?
Might have to reset cookies maybe? -
5 hours ago, fliptop said:
Hi all - for the past day or so I've been receiving multiple httpd basic authentication requests whenever I submit a spam message. AFAIK basic authen is supposed to remain "logged in" until all instances of the browser window are closed. In my case I'm not closing the browser, just submitting spam as always. Anyone else having this same issue?
Log into your SpamCop Web account check/click your preferences Tab
User Preferences
Report Handling Options
Non-critical, but possibly interesting options for more technical users. Report copies, confirmation dialog selection. -
20 minutes ago, Steve said:
Message blocked
Abuse address not working use CERT
https://www.first.org/members/teams/national_cyber_security_centre-ukforward email include text headers and body
-
6 hours ago, ArtmakersWorlds said:
I could delete mailhosts..
just logon to your SC account go to mailhosts by clicking the Mailhosts Tab, top of page.
Near bottom of page there is a delete host button
Next to it in a Rectangle Box is Select one push the down arrow to see what's there select then push the
delete host button
You have shown a screen shot of Yahoo host being there possibly a old one that no longer works? -
2 hours ago, RobiBue said:
his is the reason why I suggest to remove (or disable if possible) mailhosts.
running the spam through SC without mailhosts results in the following:
https://www.spamcop.net/sc?id=z6777648303z2d57db44fb22bdb9f60865f945db0347z (I canceled the report since it's not mine to report )In his case worth a go
-
5 hours ago, ArtmakersWorlds said:
And again today. https://www.spamcop.net/sc?id=z6777584009zd5b59c27e570171eb65ad415f225b6b0z
No ip address found. Isn't THIS an ip address?????
Received: from 127.0.0.1 your email intranet IP
OR this???
X-Originating-Ip: [185.232.170.246] that's the SOURCE of the spam send abuse report to audit[]ATfirstbyte[DOT]pro
Best to include website registrar like (takes their web site down)
Name: go.havanalinks.com
IP: 185.163.45.75
Domain: havanalinks.com
Registrar Abuse Contact Email: mailto:abuse[AT]namecheap[DOT]com
just forward the spam from your email
At end of forwarded spam email put
>
The full headers of email -
5 hours ago, ArtmakersWorlds said:
And again today. https://www.spamcop.net/sc?id=z6777584009zd5b59c27e570171eb65ad415f225b6b0z
No ip address found. Isn't THIS an ip address?????
Received: from 127.0.0.1
OR this???
X-Originating-Ip: [185.232.170.246]
https://www.spamcop.net/sc?id=z6776891424z3151f4ff6f17ec6674cd0a802b7aa888z
mine from Yahoo starts
10.217.144.139 which is a yahoo mailhost
127.0.0.1 is not
0: Received: from 185.232.170.246 (EHLO stop.tropos.fun) by 10.253.62.157 with SMTP; Tue, 27 Sep 2022 17:31:58 +0000
Hostname verified: stop.tropos.fun
Possible forgery. Supposed receiving system not associated with any of your mailhosts
Will not trust this Received line.
Mailhost configuration problem, identified internal IP as source
Mailhost:
Please correct this situation - register every email address where you receive spam
No source IP address found, cannot proceed.
Add/edit your mailhost configuration
I took the headers and summited looks to me like these headers are not from Yahoo webmail but some dodgy intranet that perhaps receives your email
SpamCop falls over with intranets try to get headers from before the intranet.
This is my pass of your intranet headers
https://www.spamcop.net/sc?id=z6777599959z423eb167bd6ba6754ce713a472177ee7z
The same for
https://www.spamcop.net/sc?id=z6776271039zfd4a06f4ff24d7bc5130f21efb77a7a3z
intranet Received: from 127.0.0.1 -
10 hours ago, Takeo_Ichinose said:
It seems Chinatelecom.cn has nothing to do with this IP range.
Chinese spam report to SpamCop feeds the blocklist then Forward as Attachment
To abuse[AT]12321[DOT]cn
https://12321.cn/report.php -
9 hours ago, Takeo_Ichinose said:
But according to whois.com/whois/43.228.126.0:
Appropriate contact for 43.228.126.0/24 may be netadmin[at]layerstack.comChinese spam report to SpamCop feeds the blocklist, then Forward as Attachment
To abuse[AT]12321[DOT]cn
https://12321.cn/report.php -
4 hours ago, RobiBue said:
To me it seems like you receive your emails through SpamCop, which I do not. With that said, I see that for you it is probably necessary to have the mailhosts set up correctly, and that's where our systems differ, since I get my emails through a different system which does not seem to require mailhosts.
Yes I have SpamCop relay emails to me but not to Yahoo
SpamCop is on my mailhosts and the email I reported came from SpamCop mailhost validation which is Whitelisted (so won't report).
This was not spam but don't have any spam in Yahoo to report, so I sent in the mailhost validation as it was 3 days old SC went no further.
https://www.spamcop.net/sc?id=z6776891424z3151f4ff6f17ec6674cd0a802b7aa888z
would of sent this report to where it should of gone (this was not spam)
Re: 191.101.210.140 (Third party interested in email source)
Internal spamcop handling: (badreports) -
34 minutes ago, RobiBue said:
I agree there, but somehow for ArtmakersWorld it seems broken. So either the fix for him could be
a) delete the mailhosts and reinstate them correctly, or
b) delete the mailhosts (and have none just like I have no mailhosts)I have no mailhosts and have no troubles either
I have never reported spam from yahoo email
Tried on one of the SpamCop Mailhost replies
https://www.spamcop.net/sc?id=z6776891424z3151f4ff6f17ec6674cd0a802b7aa888z
seems to work (I use a VPN) -
15 minutes ago, RobiBue said:
f that is a bad idea, then I would like for someone to tell me why, since I have no mailhost entries in my settings and it all works fine...
If it's not broken don't fix it.
I have used mailhosts since they began and no troubles. -
2 hours ago, ArtmakersWorlds said:
What I need, is step by step... do this, copy that, paste here... like that
all you have to do is go to log into your Yahoo webmail.
then at top of email next to spam click the 3 dots ... and select Raw message select copy that raw message then log into your SpamCop account,
Paste entire spam (headers, blank line, body) into the "process spam" box, once done click the process spam body.
Do not get the headers and body from your email program on your computer (it goes through a network with non-identifiable IP's)
-
4 hours ago, ArtmakersWorlds said:
Petzl, again your not making sense. But I tried clicking on the first two of your links to try and see what your talking about.
Pages will not load.
I'm using Microsoft Windows 10 they load for me?
I use Opera browser and Microsoft Edge the links load in both browsers.
Even tried links on my Indian Made Android Mobile phone, clear on that also -
3 hours ago, ArtmakersWorlds said:
I AM NOT..... REPEAT NOT a computer PROGRAMMER. I DO NOT UNDERSTAND THE HOOPS YOU WANT ME TO JUMP JUST TO SEND IN A PIECE OF GARBAGE EMAIL.
Here it is by pictures there are 3 mail hosts for Yahoo email
Check ALL 3 of them '(default has only one checked?), click proceed
https://ibb.co/WtDrL6P
Your email account will then give 3 links click 1 at a time mine was very quick
https://ibb.co/Xkr5tMR
Your email will get 3 separate messages
https://ibb.co/mBdtQQn
Open 1 at a time then at top of email next to spam click the 3 dots ... and select Raw message
https://ibb.co/31VmfXr
Then paste full body and headers into top/first box
https://ibb.co/NVS2mPV
then repeat for each email
That's it all done
https://ibb.co/ZHf3x3r -
5 hours ago, DaveO8888 said:
I submitted the spam to SpamCop Reporting via email submission and I received a link to complete the submission but SpamCop keeps reporting that there is too much data. How do I resolve this error message?
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6776393772z78e10f875ac3a4b6de92c4eb1dd0a85az45.8.46.152 Romania more than likely don't read reports to the Nations CERT
https://www.first.org/members/teams/ search box put in Romania
Romania's is alerts[AT]dnsc[DOT]ro
You need to upgrade rouge reporting addresses
Cached whois for 172.67.205.81 : abuse[AT]cloudflare[DOT]com are not the registrar which is
Registrar Abuse Contact Email: mailto:abuse[]ATnamecheap[DOT]com
Name: skinwatches.com
IP: 104.21.22.144, 172.67.205.81
Domain: skinwatches.com
Windows programs you need to get better than SpamCop
Both freeware
Domains
http://www.gena01.com/win32whois/
IP
http://www.nirsoft.net/utils/ipnetinfo.html -
4 hours ago, ArtmakersWorlds said:
WHERE????? Exactly what tab on what application are you talking about? What website?
log-on to your web SpamCop account here.
https://www.spamcop.net
or here
https://members.spamcop.net//anonsignup.shtml -
4 hours ago, ArtmakersWorlds said:
Ok, got another one of those odd spam messages that won't go through.
Think I found the tracking URL this time. Here.
https://www.spamcop.net/sc?id=z6776271039zfd4a06f4ff24d7bc5130f21efb77a7a3z
you have set-up your mailhosts?
log-in click tab Mailhosts
click link
"Add new hosts"
Put your full email address in first box (example qwer6ty@yahoo.com)
in second box put in (in this case) yahoo.com or whatever you wish to ID it
Then click box "continue to next step"
Then the providers mail hosts will be listed.
then click Proceed you will be sent a email, just click link in email to verify
that's it, done
-
2 hours ago, moreofless said:
Mailhost configuration problem, identified internal IP as source
click below
Add/edit your mailhost configuration -
19 hours ago, ArtmakersWorlds said:
So, I've gotten (more than a few now) some KOHL'S reward. (I don't, and never have, even shopped a KOHLs EVER.) But when I go to report it I keep getting this.
No source IP address found, cannot proceed.
BEFORE you submit your spam go to page top and copy the SpamCop tracking URL
Then one can read what is going on.
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6776057623z0e01e1041a9ee6e2d6c2d203d31eafd7z -
10 hours ago, DaveO8888 said:
I spend the time to send spam reports to SpamCop but I am not seeing a reduction of spam. I see the same offending ISPs over and over again every day sending the same garbage including malicious links, attachments, and URLs. Does SpamCop really do anything to stop spam or is this reporting a waste of time? I thought that offending ISPs are eventually blacklisted if they continue to allow spam on their networks?
If the ISP's do not react try the countries CERT email address.
https://www.first.org/members/teams/ -
Just forward your SpamCop address to a Gmail account
All SpamCop email does now is forward email it, does not filter.
Gmail seems very good at filtering ham from spam -
1 hour ago, DaveO8888 said:
Hello petzl, I am using the Microsoft Outlook Desktop Client verson 2021 which connects to the Microsoft Exchange server. I send all my SpamCop reports from Outlook Desktop because I can easily access the full headers to include in the submission.
Looking at https://www.spamcop.net/sc?id=z6773098090z7c0129a5864c8a827dd01e12bc380a53z
Received: from 116.204.180.37 (EHLO goodnewoffers.cloud)
by 10.253.234.152 with SMTP;
Thu, 01 Sep 2022 16:02:46 +0000
10.253.234.152 is not a routeable IP address. SpamCop falls over with network received spam.
No reporting address found for 137.255.9.1
in Routing / Report Address Issues
Posted
email from benin telecom 137.255.9.1 no abuse address try their CERT
https://www.first.org/members/teams/bjcsirt