Jump to content

Newbie needs help/advice for a very persistent spammer!


amc
 Share

Recommended Posts

I am fairly new at trying to stop/fight spam (about 3-4 months) and maybe I am not doing it right.

For the last 2 months I have been receiving 40-50 spam/phishing emails per day from a couple of distinct places with different IP addresses from South Africa and China (itcdata.net being the biggest problem).

https://www.spamcop.net/sc?id=z6355159379z05d3ad9864c37437982a13d639446dfcz

https://www.spamcop.net/sc?id=z6355155966z09f3767e52b5ef535107d5ffa84d44b0z

https://www.spamcop.net/sc?id=z6355145509z64516755dc0b24f867e19c818aab8c7az

What these spam/phishing emails all have in common is that the links all go to the same IP address 208.64.31.11.  This IP address is Versaweb, Fiberhub, or UltraVPS.  These three companies are all related and run by the same person namely Rob Tyree, aka rob (at) fiberhub (dot) com.

I have tried to get them to slow down or stop with no luck.  I have reported each and every spam every day to Spamcop (dot) net, spam (at) knujon (dot) net, spam (at) uce (dot) gov, abusereports (at) versaweb (dot) com, rob (at) fiberhub (dot) com, phishing (at) godaddy (dot) com, and any company that has an abuse email mentioned in the spam (ex. Walmart, direct TV, Amazon).  None of this appears to help at all.  I am not sure what else I can do.  Any help, suggestions, or advice would be greatly appreciated.

Thanks in advance

 

Link to comment
Share on other sites

  • 1 month later...

I feel Spamcop is not helping much anymore. I think the ONLY means to stop spammers is to just run your own email server and block at will whatever you want. Reasoning, most reports either got o devnull, or are ignored, and in many cases there is not enough reporting threshold to get a block.

Link to comment
Share on other sites

  • 2 weeks later...
On 02/02/2017 at 10:42 AM, amc said:

I am fairly new at trying to stop/fight spam (about 3-4 months) and maybe I am not doing it right.

 

For the last 2 months I have been receiving 40-50 spam/phishing emails per day from a couple of distinct places with different IP addresses from South Africa and China (itcdata.net being the biggest problem).

 

 

https://www.spamcop.net/sc?id=z6355159379z05d3ad9864c37437982a13d639446dfcz

 

https://www.spamcop.net/sc?id=z6355155966z09f3767e52b5ef535107d5ffa84d44b0z

 

https://www.spamcop.net/sc?id=z6355145509z64516755dc0b24f867e19c818aab8c7az

 

What these spam/phishing emails all have in common is that the links all go to the same IP address 208.64.31.11.  This IP address is Versaweb, Fiberhub, or UltraVPS.  These three companies are all related and run by the same person namely Rob Tyree, aka rob (at) fiberhub (dot) com.

 

I have tried to get them to slow down or stop with no luck.  I have reported each and every spam every day to Spamcop (dot) net, spam (at) knujon (dot) net, spam (at) uce (dot) gov, abusereports (at) versaweb (dot) com, rob (at) fiberhub (dot) com, phishing (at) godaddy (dot) com, and any company that has an abuse email mentioned in the spam (ex. Walmart, direct TV, Amazon).  None of this appears to help at all.  I am not sure what else I can do.  Any help, suggestions, or advice would be greatly appreciated.

 

Thanks in advance

 

 

 

Top two reports 137.171.123.19 , 168.1.53.243 are dead

3rd report SpamCop give wrond abuse address 117.51.232.200 ipas [AT] cnnic [dot] cn

Link to comment
Share on other sites

  • 3 weeks later...
On 3/29/2017 at 10:21 AM, KNERD said:

I feel Spamcop is not helping much anymore. I think the ONLY means to stop spammers is to just run your own email server and block at will whatever you want. Reasoning, most reports either got o devnull, or are ignored, and in many cases there is not enough reporting threshold to get a block.

 

These spammers probably advancing too much and always finding another way around.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...