-
Posts
2,983 -
Joined
-
Last visited
Content Type
Profiles
Forums
Events
Posts posted by petzl
-
-
52 minutes ago, ninth said:
Also on spam.dnsbl.sorbs.net
Hitting spam traps which mean dictionary attack and or email poison scraped from spamtrap websites
-
13 hours ago, Nada Ameen said:
Plz do it ASAP
149.72.126.143 stop criminal phishing spam going through it
https://www.spamcop.net/w3m?action=checkblock&ip=149.72.126.143
Other hosts in this "neighborhood" with spam reports
149.72.125.190 149.72.125.201 149.72.125.233
sendgrid.com refusing abuse reports don't help either
Get a Gmail account my advice -
5 hours ago, Jeff_G said:
Just IMO,
-Captain Obvious
(SC contributor since 2006)I've been assimilated by Google yes they electronically read your mail classify it if seen/tagged to be not pro-government report you secretly to NSA/FBI/DOJ'IRS and so on but for spam from ham it's second to none. Any gmail spam to gmail user is quickly made dead by reporting it as phishing.
random big tech spying article,
https://thehill.com/opinion/technology/3703490-why-wont-government-release-results-of-investigation-into-big-techs-privacy-practices/ -
5 minutes ago, ninth said:
Speaking of the classic satirical examples of dreadful customer service the dead parrot sketch summed up the frustrations...
I didn't want to work in a petshop
I wanted to be a lumberjack
I liked the Finnish national Anthem
-
1 hour ago, Lking said:
😁
Bet one won't like spam after that spam on the other hand is delicious
-
But I like spam (NOT)!
History for spam fighters -
On 4/26/2023 at 9:16 AM, anyone8 said:
News: (Last Modified: 4/25/2023, 4:05:15 PM -0700)
System Outages
Some users are experiencing issues with connecting to SpamCop and receiving
various errors when trying to parse and report spam. We are aware of the issues,
caused by internal infrastructure problems. Our Network Operations teams are
working hard to get this resolved.
Thank you for your patience.SpamCop Seems working effortlessly now.
-
19 hours ago, ninth said:
Thanks for the advice mate but I'm not keen on anything google when they earn a trillion dollars a second and can't give me more than the noreply template Gspam. I'll keep flicking the offending messages to SC because they find ways to report I didn't know about and even if they fall on deaf ears I still shared on the block lists and forum.
SpamCop Seems working effortlessly now.
Up to you, but sending spam as attachment is quick and easy (abuse desk can also electronically parse it)
Don't help if the abuse desk don't care! -
SpamCop reporting site very slow after waiting..... Waiting another sign in appears.... then another.... then another?
-
On 4/24/2023 at 9:00 PM, Hanco said:
What is the significance of doing that? Thanks
"Forwarding as attachment" the subject line is empty, after IP put "phishing" or spam
Just makes it clear the originating IP -
15 hours ago, ninth said:
Tried that with my latest serial pest and the pointy heads asked me to use their legal or cloud form but it's a google mail server IP abuse report?
Yes usually web forms are incoherent and take a lot of time to work out- then they are ignored!
I only use Gmail, if spam is sourced from Gmail clicking the "report phishing" seems to work. -
59 minutes ago, Scott_R said:
I've been getting a load of these from the same sender; is there a way I can get an abuse address so I can attempt to forward the emails myself, with the thought that me maybe contacting them directly might get some results?
Google pointy heads don't want spam reports from SpamCop
Just send as attachment from your email that received them to network-abuse[AE]google[DOT]com
The spammer already has your email, that's what I do it is not necessary to use SpamCop
Just put IP you got it from in email subject, 209.85.214.194 -
On 4/16/2023 at 12:48 AM, moreofless said:
I am not a technical person. I just report dangerous email which could cause people to lose their life savings. Many times I get the "nothing to do" response. I just use the "view raw message" option in Yahoo. Again I am not a technical person. Why doesn't Spamcop work with Yahoo to fix this. Maybe if someone related to someone at Spamcop has their life savings stolen, they will deal with this issue?
Here is another example:
https://www.spamcop.net/sc?id=z6807401641zb026a79dc12f33350c624431f21d85cdzJust sent myself a message to Yahoo and and copied the raw message from it's webmail page worked fine
https://www.spamcop.net/sc?id=z6807597384zf3b351db4e33709708f1ac2d403f29f9z
So IMO it's your email program screwing up the headers
That's presuming your mailhosts are set-up correctly? -
33 minutes ago, moreofless said:
I have no idea what I have to do to "sort out his "mailhosts" problem". I get a phishing email, I click "view raw message" and copy paste that to Spamcop. I am not a technical person and I should not have to be to report dangerous phishing email.
Doubt if anyone can help you here, best if you get a more computer savvy friend over to take a look.
Send a fresh yahoo track though and I will see if I can parse it. Your old tracks have expired -
On 9/18/2022 at 10:39 AM, RobiBue said:
this last one, when I ran it through without mailhosts, came from a google system. Unfortunately google doesn't like to work with SC and the reports get sent to a "garbage bin" but still count as spam towards the IP address and it gets listed in the Block List...
I'm posting the example here because it's too old to submit
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6776170797z8dd80ccdfa3288da9b205c61cab5b9bczTracking message source: 209.85.217.52:Snip
209.85.217.52 not listed in iadb.isipp.comSORBS (spam and Open Relay Blocking System) has the IP address listed
and Spamcop has 209.85.0.0/16 listed with 47072 spam reports! and that's why I believe that google bounces spam reports....
Until "moreofless" can sort out his "mailhosts" problem nothing can be done.
I use Yahoo, not for email but need/like access to local streaming TV, but for a while getting a lot of spam now nothing,
suspect Facebook are not keeping emails secure?
Reporting it through SpamCop has stopped the spam always worked for me! -
10 hours ago, Steve said:
So can the deputies modify the parser to have reports sent to abuse AT terratransit DOT de?
Yes if one reads this but SpamCop is now plagued with this legacy issue. Some still work better/accurately than"Arin"
So a big job/problem
abuse.net is now a bogus bot that just stamps abuse@domian. many don't use abuse because spambots pick it up and flood it. -
1 hour ago, Steve said:
https://www.spamcop.net/sc?id=z6806908673z04b1a724626bf46fe4806f1e9634969fz
Abuse POC for above IP address is invalid.
This abuse address was set in 8/22/2005 by abuse[AT]ipplanet[DOT]net which no longer exists
This is now a common issue SpamCop made these change permanent instead of 12 monthly
The now abuse address is
abuse[AT]terratransit[DOT]de -
1 hour ago, Steve said:
But when I query the above IP address on the ripe database site: I get abuse AT cloudbackbone DOT net as the responsible POC (the responsible ORGANIZATION is listed as CGI GLOBAL LIMITED)? Meanwhile, if I try to send a test email to noc AT cloudbackbone DOT net, Gmail's mailer-daemon tells me that the mailbox is full.
QuoteSpamCop is not allowed to send abuse reports to "abuse AT cloudbackbone DOT net "
But you can *forward* it from your spammed account!
Include text of headers/body
Just head it
Phishing
http://45.156.27.61 NO REGISTRAR spam level is very high (Russia)
https://talosintelligence.com/reputation_center/lookup?search=45.156.27.61#ip-addresses
>
Put > below you header text then the "headers/body" -
1 hour ago, Steve said:
Sent it there/filled out the abuse form on their site. Is there a way for the deputies to fix this so that the parser displays the correct POC (abuse AT namecheap DOT com)?
I104.149.94.155 has now put up a abuse address before it did not have one!
Except for the Registrar!
See for yourself
https://www.spamcop.net/sc?id=z6806535550z579ecc3525f12541f3b77e0a47c005d7z
The spam level from that IP is now zero before it was Critical
https://talosintelligence.com/reputation_center/lookup?search=104.149.94.155#whois
Seems your report hit a nerve. -
2 hours ago, Steve said:
https://www.spamcop.net/sc?id=z6806535550z579ecc3525f12541f3b77e0a47c005d7z
Upon manually reporting a spam email (tracking link above) to postmaster AT psychz DOT net, Yahoo's mailer-daemon replied with this:
Also, upon querying the IP address via ARIN, in the Note field of the POC section of the query, this was writteChecking IP: 104.149.94.155...
Name: tr-acosh.aeskelly.com
IP: 104.149.94.155
Domain: aeskelly.com
Registrar Abuse Contact Email: mailto:abuse[AT]namecheap[DOT]com -
5 hours ago, pusser_uk said:
Thanks gnarlkeymarley. Maybe other answers will be forthcoming too.
Just log into your SpamCop Web account, click preferences, then click add fuel.
-
27 minutes ago, Warden said:
What is your interpretation of the headers excerpt I provided?
Don't mean it is SpamCop's IronPort server stamping "[SUSPECTED scam]" in subject line!
I get a lot email forwarded through SpamCop's email server never happened to me,
including real spam. Gmail do stamp malicious email SpamCop does not filter for spam!
https://ibb.co/RcJbTNY -
2 hours ago, mrwebman said:
I'm getting this notice when I login to Spamcop web interface:
Bounce error
Your email address, my email address has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.4.7 - Delivery expired (message too old) 550-'Reverse DNS verification fa=How do I fix a reverse DNS issue like this? The mail server's DNS records look fine to me but I must be missing something.
Thanks
Your ISP can do this not you.
-
1 hour ago, Henry Bowman said:
Well, now I'm bumfuzzled.
I reported the spam to Spamcop just by mailing it to spamcop, same as I do all the other spam I get. Spamcop presumably sent it to the "proper" address using the same algorithms it uses for every mail source. And I got this notice back from one of the hosting providers that seems to say "nope, fetch another rock."
It sounds like you're using some kind of tool to analyze the spam that is similar to but different from the one spamcop uses.
If I was going to do that for my spam, why would I use spamcop at all? And/or HOW would I use spamcop at all with it?
Not that I really want to process all my own spam by hand. Plus, Windows software is no good to me at all.
When SpamCop was first "created" ISP's did react to websites using their IP's now they leave that to their domain registrar.
Why I don't know possibly legal reasons?
But with SpamCop and that Windows program I suggested you can get a registrar abuse address, copy and paste to your SpamCop report!
If their is no Registrar then it would be the IP that needed reporting (in comments put "no Registrar ")
There are websites that will show the Registrar.
https://who.is
Need to whitelist a specific IP
in SpamCop Blocklist Help
Posted
SpamCop stops when the spam going through IP stops after 24 hours.
At present 9 hours to go
https://mailsc.spamcop.net/w3m?action=checkblock&ip=149.72.126.143