My Old Cesmail Address Suddenly Being Heavily Spammed

[Ex_Brit]

So what has changed recently at Cisco or wherever to suddenly open the floodgates and admit a torrent of spam each day? Too many for me to report so have given up and simply delete them all.  They are all addressed to my Cesmail email address and all of course are filtered into a spam folder at my current spam filtering "service", Fastmail, to which all mail gets forwarded now before I POP it out to my desktop..

Anyone else experiencing the same?

[Lking]

did you see:

116 Spams over night from Qtum Main Network??

Dozens of chinese spam emails per day

Seems that SpamCop accounts are experiencing a DoS attack the last few days.

[Ex_Brit]

Sorry I missed those.  I can never seem to get any results using the Search function here.   OK well that answered my question, thanks.

I assume there's no-one investigating this as Cisco seems to wish we would all just disappear, or at least that's the impression I got.

[Lking]

No I haven't made much progress either learning the "art of the search."

[michaelanglo]

12 hours ago, Ex_Brit said:

So what has changed recently at Cisco or wherever to suddenly open the floodgates and admit a torrent of spam each day? Too many for me to report so have given up and simply delete them all.  They are all addressed to my Cesmail email address and all of course are filtered into a spam folder at my current spam filtering "service", Fastmail, to which all mail gets forwarded now before I POP it out to my desktop..

Anyone else experiencing the same?

As Lking notes, many have reported this

 

I too use Fastmail, and have reported them twenty at a time by email using More / Forward as attachment (all the selected items) to the quick magik Spamcop address.

 

Cisco removed the filter sometime back.

 

You can search the Spamcop forums using Google.

[Ex_Brit]

I've tried that and for some reason SC rejects the email.   I'll keep trying as they occur.

[petzl]

16 hours ago, Ex_Brit said:

So what has changed recently at Cisco or wherever to suddenly open the floodgates and admit a torrent of spam each day? Too many for me to report so have given up and simply delete them all.  They are all addressed to my Cesmail email address and all of course are filtered into a spam folder at my current spam filtering "service", Fastmail, to which all mail gets forwarded now before I POP it out to my desktop..

Anyone else experiencing the same?

try again
SpamCop addies are being DoS attacked by botnets
Gmail gives up the ghost when you get 30 spams in a row and disables your account
opened a mail.com account which is picking them up (redirect ALL messages to mail.com and put it in mailhost update )
Use MailWasher to get headers and body always check abuse address as a legacy some/most SC abuse addresses are hard coded in and now obsolete (annoying)
even if everyone reports a few with a boiler plate many of this creeps botnets stand to get taken out.
 

     botnet spewing spam *DoS* attack
URL links are "Joe Jobs" (unassociated with attacks)

SCAN INFECTED COMPUTER FOR MALWARE - THEN Change Password
Cisco site for reputation score
>
>

Completed sample https://www.spamcop.net/sc?id=z6405401576z39e328f0d6fde1de05eae109a3f5c0b2z

183.91.3.27    botnet spewing spam *DoS* attack
URL links are "Joe Jobs" (unassociated with attacks)

SCAN INFECTED COMPUTER FOR MALWARE - THEN Change Password
Cisco site for reputation score

https://www.talosintelligence.com/reputation_center/lookup?search=183.91.3.27
>
 use the "whois"  tab down page to get real abuse address "https://www.talosintelligence.com/reputation_center/lookup?search=183.91.3.27

The real abuse address is "hm-changed@vnnic.net.vn" the others are outdated legacy dust! Trying write in this forum is awkward at best

[Ex_Brit]

Thanks

[petzl]

20 minutes ago, Ex_Brit said:

Thanks

Seems the attacks are from a child porn spammer who don't like being reported

obviously not in jail yet?? or maybe from jail?

[Ex_Brit]

Yes it appears that way. 

I finally got the bulk forwarding as attachment thing to work in Fastmail and SC auto-responder worked as it should.

Not sure what I was doing wrong before.

I should add that Fastmail spam filtering is excellent.

[michaelanglo]

Yes, Fastmail spam filter is fine.

 

However the report by email gets hung up by Spamcop

Bounce error
Your email address, whatever@example.com has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.4.7 - Delivery expired (message too old) 'timeout'
Please ensure your email account is reliable, then click below: 

==

I think Spamcop is working so hard that timeouts occur, my mailbox is fine.

The bounce error disabled reporting so I had to 'click below' and resend all recent email submissions.

To date 359 Qtum 'main network' spams

[petzl]

40 minutes ago, michaelanglo said:

Yes, Fastmail spam filter is fine.

 

However the report by email gets hung up by Spamcop

Bounce error
Your email address, whatever@example.com has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.4.7 - Delivery expired (message too old) 'timeout'
Please ensure your email account is reliable, then click below: 

==

I think Spamcop is working so hard that timeouts occur, my mailbox is fine.

The bounce error disabled reporting so I had to 'click below' and resend all recent email submissions.

To date 359 Qtum 'main network' spams

just signed up to test SpamCop worked sent me a validate no bounce

Will wait for some spam now to see if it handles it
Added fastmail to my host and woking
https://www.spamcop.net/sc?id=z6405529928z25589ab2e428bd776ff914a4b923139ez

[Ex_Brit]

3 hours ago, michaelanglo said:

Yes, Fastmail spam filter is fine.

 

However the report by email gets hung up by Spamcop

Bounce error
Your email address, whatever@example.com has returned a bounce:
Subject: Delivery Status Notification (Failure)
Reason: 5.4.7 - Delivery expired (message too old) 'timeout'
Please ensure your email account is reliable, then click below: 

==

I think Spamcop is working so hard that timeouts occur, my mailbox is fine.

The bounce error disabled reporting so I had to 'click below' and resend all recent email submissions.

To date 359 Qtum 'main network' spams

About the same here.

[petzl]

11 minutes ago, Ex_Brit said:

About the same here.

Well I subscribed for the us$30 a year account
To send spam to SpamCop I just "forward as attachment" (to my super-secret SC reporting address), a bit of a delay but never more than 2-3 minutes
I prefer full reporting to make sure it goes to a working abuse address 
 

[Ex_Brit]

Good.

[michaelanglo]

Also good is that I have seen no Qtum 'main network' spam for 24 hours.

 

Maybe that's all the instigator paid for.

 

A couple of 'confirm email adress' and a 'fax' however.