Jump to content

Parsing truncated


Tesseract
 Share

Recommended Posts

18 minutes ago, Tesseract said:

https://www.spamcop.net/sc?id=z6643995729z6c0b835925fc83fc6ac686ba27423c1fz

The parsing ends almost as soon as it begins, having only looked at one host. Other recent reports have been OK.

this going through a internal network/intranet?

Through email server Ecuador needs password change (no TLS)
190.152.46.226 no abuse address  try CERT https://www.first.org/members/teams/#Ecuador
From Botnet in India
106.210.0.13  
https://www.abuseat.org/lookup.cgi?ip=106.210.0.13

Link to comment
Share on other sites

8 hours ago, Tesseract said:

https://www.spamcop.net/sc?id=z6643995729z6c0b835925fc83fc6ac686ba27423c1fz

 The parsing ends almost as soon as it begins, having only looked at one host. Other recent reports have been OK.

Nothing immediately stands out for me, but I do see an IPv6 address:

whois.ripe.net found abuse contacts for 2a01:4f8:211:2c54::2 = abuse@hetzner.de

Might be good to get the deputies looking at this at deputies[at]admin[dot]spamcop[dot]net.

Link to comment
Share on other sites

The analysis by petzl seems correct (braeburn.macports.org is in my mailhosts). I don't know why the parser would fail on this particular message alone, as it doesn't seem significantly different to many others I've reported successfully. I'll contact the deputies as suggested, thanks.

Link to comment
Share on other sites

2 hours ago, Tesseract said:

The analysis by petzl seems correct (braeburn.macports.org is in my mailhosts). I don't know why the parser would fail on this particular message alone

Interesting, I had submitted a copy to my account without mailhosts and it appears to have worked.

https://www.spamcop.net/sc?id=z6644191965z228c8ee5751b9ef3fba5a127fdc8818fz

When I try to submit with mailhosts, I get the same pause (yes, I know I don't have your mail hosts.)

https://www.spamcop.net/sc?id=z6644192306zf677ca6824be06de2a49d01b38114656z

This would almost indicate maybe the double dot hostname problem.  Hang on, maybe try changing the two dots as below to a single and try submitting again.

Received: from DESKTOP-JQ04P8P..home

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...