loic Posted November 17, 2017 Share Posted November 17, 2017 Hi Guys, I noticed a drastic increase of spam e-mails arriving at my inbox after starting reporting the spam e-mails using Spamcop. I usually had around 2 spam messages per Week, now I get 15 per day. First, I was wondering why this has happened. My best guess would be the administrator of the network forwarding the spam report to the Spammer. What do you think? How could that have happened? And then, the bigger question: Do you think it would make more sense to stop reporting the spam and giving the Spammer the impression that the mailbox is unused, again oder would you propose continue reporting the e-mails? Thanks a lot! Link to comment Share on other sites More sharing options...
Lking Posted November 20, 2017 Share Posted November 20, 2017 Sorry for the delay. Your post got lost in the board's spam. JMHO: I would keep reporting. As Spammer Rules #3 states: 'Spammers are stupid.' Why would a semi intelligent spammer add your email address to the spam spew knowing that you will report them to a blocking list? If a dummy does add you to there spamming list, definitely report them! Stupid is suppose to hurt. There are examples of spammers wanting to get even and starting a DOS attack to retaliate, but that would be 100s/hour not just 15/day. Link to comment Share on other sites More sharing options...
petzl Posted November 20, 2017 Share Posted November 20, 2017 On 11/18/2017 at 1:40 AM, loic said: Hi Guys, I noticed a drastic increase of spam e-mails arriving at my inbox after starting reporting the spam e-mails using Spamcop. I usually had around 2 spam messages per Week, now I get 15 per day. First, I was wondering why this has happened. My best guess would be the administrator of the network forwarding the spam report to the Spammer. What do you think? How could that have happened? And then, the bigger question: Do you think it would make more sense to stop reporting the spam and giving the Spammer the impression that the mailbox is unused, again oder would you propose continue reporting the e-mails? Thanks a lot! Sounds you are on a SpamBots list a reporting URL would be helpful TRACKING URL - it may be saved for future reference:https://www.spamcop.net/sc?id=z6415595129zb2aa8cfc675bfb2b9c1f042f08f6cbbcz Link to comment Share on other sites More sharing options...
loic Posted November 21, 2017 Author Share Posted November 21, 2017 15 hours ago, Lking said: Sorry for the delay. Your post got lost in the board's spam. JMHO: I would keep reporting. As Spammer Rules #3 states: 'Spammers are stupid.' Why would a semi intelligent spammer add your email address to the spam spew knowing that you will report them to a blocking list? If a dummy does add you to there spamming list, definitely report them! Stupid is suppose to hurt. There are examples of spammers wanting to get even and starting a DOS attack to retaliate, but that would be 100s/hour not just 15/day. Thank you, Lking. I suppose, you could be right. 11 hours ago, petzl said: Sounds you are on a SpamBots list a reporting URL would be helpful TRACKING URL - it may be saved for future reference:https://www.spamcop.net/sc?id=z6415595129zb2aa8cfc675bfb2b9c1f042f08f6cbbcz I didn't quite understand your reply.... What do you mean? Do you want to see a reporting URL of one of the spams? Link to comment Share on other sites More sharing options...
petzl Posted November 21, 2017 Share Posted November 21, 2017 8 hours ago, loic said: I didn't quite understand your reply.... What do you mean? Do you want to see a reporting URL of one of the spams? YES (your choice) would let one see what is happening more clearly Link to comment Share on other sites More sharing options...
loic Posted November 21, 2017 Author Share Posted November 21, 2017 Of course. I can't see huge similarities in the e-mail source and servers having sent the e-mail except for the obvious way the E-Mails are written: 3-6 lines of text, then in the next line a link. Always the same scheme. I noticed that a large part of the e-mails are sent using PHPMailer, but not all. The servers are different ones using different ip's and being even hosted by different companies. Here are some reporting urls: https://www.spamcop.net/sc?id=z6424411072zd232b415b470fa4259e1b9adc07bf445z https://www.spamcop.net/sc?id=z6424410870z3df7273feac8932690a13ac7f639cf88z https://www.spamcop.net/sc?id=z6424272003zffc5335f80b53c43d806a10d948d3319z https://www.spamcop.net/sc?id=z6424271847zca7e771d5a2945c036c364ac41efdf5dz https://www.spamcop.net/sc?id=z6424271685z1715804dfb5a89a8f3e86cc8271eb56az Thanks a lot for your help and your advise! Link to comment Share on other sites More sharing options...
petzl Posted November 22, 2017 Share Posted November 22, 2017 The sites are shut down, seems no connection, IP's are not identified as botnet? spammer is using different compromised accounts (web servers) to send email http://70.158.118.45http://174.136.55.173/cgi-sys/defaultwebpage.cgi http://185.182.59.59 http://174.136.55.173/cgi-sys/defaultwebpage.cgi 23.91.70.90 NOT A WEB SERVER http://85.214.48.104 spam reports for IP over last 2 days but none further back, so IMO it is you specifically targeted? 70.158.118.45 2 SpamCop reports 185.182.59.59 1 SpamCop report 174.136.55.173 3 SpamCop reports 23.91.70.90 4 SpamCop reports 85.214.48.104 3 SpamCop reports Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.