andrewRump Posted June 27, 2008 Share Posted June 27, 2008 I get the e-mails below almost on a daily basis. I don't know if this problem is similar to Steven Underwood's: Reporting Site problems, or just me??? or it is something totally different. It looks like spamc[at]embratel.net.br has problems with the (apparently internal) reporting data and they tell me to "Please report this to your system support people" - well definitely not my support people (that's me ), maybe SpamCop (this post) or should this go to embratal? Andrew Delivered-To: x Received: by 10.210.34.19 with SMTP id h19cs96148ebh; Fri, 27 Jun 2008 10:30:23 -0700 (PDT) Received: by 10.110.84.3 with SMTP id h3mr1497896tib.43.1214587821231; Fri, 27 Jun 2008 10:30:21 -0700 (PDT) Return-Path: <mail[at]srv05.embratel.net.br> Received: from c60.cesmail.net (c60.cesmail.net [216.154.195.49]) by mx.google.com with ESMTP id y5si3355649tia.8.2008.06.27.10.30.18; Fri, 27 Jun 2008 10:30:21 -0700 (PDT) Received-SPF: neutral (google.com: 216.154.195.49 is neither permitted nor denied by best guess record for domain of mail[at]srv05.embratel.net.br) client-ip=216.154.195.49; Authentication-Results: mx.google.com; spf=neutral (google.com: 216.154.195.49 is neither permitted nor denied by best guess record for domain of mail[at]srv05.embratel.net.br) smtp.mail=mail[at]srv05.embratel.net.br Received: from unknown (HELO filter8.cesmail.net) ([192.168.1.218]) by c60.cesmail.net with SMTP; 27 Jun 2008 13:30:18 -0400 Received: (qmail 520 invoked by uid 1010); 27 Jun 2008 17:30:17 -0000 Delivered-To: spamcop-net-x[at]spamcop.net Received: (qmail 506 invoked from network); 27 Jun 2008 17:30:17 -0000 X-spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on filter8 X-spam-Level: *********** X-spam-Status: hits=11.1 tests=DRUGS_MUSCLE,FB_CASINO,URIBL_AB_SURBL, URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_RHS_DOB version=3.2.4 Received: from unknown (192.168.1.107) by filter8.cesmail.net with QMQP; 27 Jun 2008 17:30:17 -0000 Received: from srv05.embratel.net.br (200.255.125.55) by mx70.cesmail.net with SMTP; 27 Jun 2008 17:30:17 -0000 Received: (from mail[at]localhost) by srv05.embratel.net.br (8.11.6/8.11.6/EBT) id m5RHUGY23433 for x[at]spamcop.net; Fri, 27 Jun 2008 14:30:16 -0300 Date: Fri, 27 Jun 2008 14:30:16 -0300 Message-Id: <200806271730.m5RHUGY23433[at]srv05.embratel.net.br> From: Abuse Online Error <req-error[at]embratel.net.br> To: x[at]spamcop.net Subject: Error in sending your request X-SpamCop-Checked: X-SpamCop-Disposition: Blocked SpamAssassin=11 X-SpamCop-Whitelisted: req-error[at]embratel.net.br Please report this to your system support people: ****WARNING: ****MESG action=receivemail mailheader=From 3234625376.9beee299[at]bounces.spamcop.net Fri Jun 27 14:30:15 2008 Received: from wks05.rjo.embratel.net.br (wks05.rjo.embratel.net.br [200.255.253.239]) by srv05.embratel.net.br (8.11.6/8.11.6/EBT) with ESMTP id m5RHUFq23421 for <abuse[at]ticket.embratel.net.br>; Fri, 27 Jun 2008 14:30:15 -0300 Received: by wks05.rjo.embratel.net.br (Postfix) id 27F03DE0C8; Fri, 27 Jun 2008 14:30:15 -0300 (EST) Received: from sc-smtp10-inbound.soma.ironport.com (sc-smtp10-inbound.soma.ironport.com [204.15.82.104]) by wks05.rjo.embratel.net.br (Postfix) with ESMTP id BA2F0DE07C for <abuse[at]embratel.net.br>; Fri, 27 Jun 2008 14:30:13 -0300 (EST) Received: from 204-15-82-99.ironport.com (HELO sc-app12.spamcop.net) ([204.15.82.99]) by sc-smtp-vip.soma.ironport.com with SMTP; 27 Jun 2008 10:30:11 -0700 From: "x[at]spamcop.net" <3234625376[at]reports.spamcop.net> To: spamc[at]embratel.net.br Subject: [SpamCop (189.3.105.2) id:3234625376]Win at world`s best cas1no Precedence: list Message-ID: <rid_3234625376[at]msgid.spamcop.net> Date: 26 Jun 2008 16:10:23 -0000 X-SpamCop-sourceip: X-Mailer: http://www.spamcop.net/ v2 X-OSBF-Lua-Score: 27.83/0.00 [W] (v1.5.7b, Spamfilter v1.4) References: <sfid-W20080627-143015-1[at]spamfilter.osbf.lua> name=#[at]reports.spamcop.net uid=x email=x[at]spamcop.net rhost= description=[ SpamCop V2 ] This message is brief for your comfort. Please use links below for details. Email from 189.3.105.2 / 26 Jun 2008 16:10:23 -0000 http://www.spamcop.net/w3m?i=z3234625376z9beee299c2900d4f5eea8a7b7528fe58z 189.3.105.2 is open proxy, see: http://www.spamcop.net/mky-proxies.html [ Offending message ] Return-Path: <esau[at]fcmail.com> Delivered-To: spamcop-net-x Received: (qmail 19692 invoked from network); 26 Jun 2008 16:10:24 -0000 X-spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on blade6 X-spam-Level: *************** X-spam-Status: hits=15.5 tests=FB_CASINO,HTML_MESSAGE,J_CHICKENPOX_32, RCVD_NUMERIC_HELO,RDNS_NONE,SARE_OBFU_CASINO_SUB,URIBL_AB_SURBL,URIBL_BLACK, URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_RHS_DOB version=3.2.4 Received: from unknown (192.168.1.108) by blade6.cesmail.net with QMQP; 26 Jun 2008 16:10:24 -0000 Received: from unknown (HELO 189.3.105.2) (189.3.105.2) by mx71.cesmail.net with SMTP; 26 Jun 2008 16:10:23 -0000 Date: Thu, 26 Jun 2008 14:22:55 +0000 Message-ID: <6748____dden[at]balas> From: "danny detleff" <esau[at]fcmail.com> To: <x> Subject: Win at world`s best cas1no MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_BNq1hpCNC12Ood" X-SpamCop-Checked: X-SpamCop-Disposition: Blocked SpamAssassin=15 This is a multi-part message in MIME format. --=_BNq1hpCNC12Ood Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Be with me and over 2.100.000 players playing and receive 300 Euros = free on your first deposit. --=_BNq1hpCNC12Ood Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> </HEAD> <BODY bgColor=3D#f6FFb9> <A HREF=3D"http://bestrealcasino.com/"> Be with me and over 2.100.000 = players</A> playing and receive 300 Euros free on your first deposit. </BODY> </HTML> --=_BNq1hpCNC12Ood-- date=26 Jun 2008 16:10:23 -0000 warn= mailcat= who=mail debugmode=0 ****SERVER: HTTP/1.1 500 Internal Server Error Date: Fri, 27 Jun 2008 17:30:15 GMT Server: Apache/1.3.24 (Unix) Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <HTML><HEAD> <TITLE>500 Internal Server Error</TITLE> </HEAD><BODY> <H1>Internal Server Error</H1> The server encountered an internal error or misconfiguration and was unable to complete your request.<P> Please contact the server administrator, admin[at]embratel.net.br and inform them of the time the error occurred, and anything you might have done that may have caused the error.<P> More information about this error may be available in the server error log.<P> <HR> <ADDRESS>Apache/1.3.24 Server at srv05.embratel.net.br Port 80</ADDRESS> </BODY></HTML> Failed after 1 tries Thank you Link to comment Share on other sites More sharing options...
SpamCopAdmin Posted June 27, 2008 Share Posted June 27, 2008 It looks like spamc[at]embratel.net.br has problems with the (apparently internal) reporting data and they tell me to "Please report this to your system support people"I have one other user reporting the same thing. I'm completely stumped. I can't duplicate it. All very strange. >- From: "x[at]spamcop.net" <3234625376[at]reports.spamcop.net> >- To: spamc[at]embratel.net.br >- Subject: [spamCop (189.3.105.2) id:3234625376] For one thing, your report 3234625376 was sent to abuse[at]embratel.net.br, not spamc[at]embratel.net.br, so I'm thinking that this is some sort of internal Embratel thing. Beyond that, I don't have a clue. Also... >- From: "x[at]spamcop.net" <3234625376[at]reports.spamcop.net> In case you're not aware, you reveal your email address every time you report spam because it has been entered into the "Full Name" setting in your Preferences. - Don D'Minion - SpamCop Admin - . Link to comment Share on other sites More sharing options...
Farelf Posted June 27, 2008 Share Posted June 27, 2008 Very strange. The original spam seems quite routine - for the benefit of others, the processing would have looked like http://www.spamcop.net/sc?id=z2027465627z4...e91b8138a0fc28z Certainly looking like an Embratel thing I think. Link to comment Share on other sites More sharing options...
andrewRump Posted June 28, 2008 Author Share Posted June 28, 2008 For one thing, your report 3234625376 was sent to abuse[at]embratel.net.br, not spamc[at]embratel.net.br, so I'm thinking that this is some sort of internal Embratel thing. Beyond that, I don't have a clue. Hm, how do I get them to fix their system? Also... >- From: "x[at]spamcop.net" <3234625376[at]reports.spamcop.net> In case you're not aware, you reveal your email address every time you report spam because it has been entered into the "Full Name" setting in your Preferences. I am fully aware I have entered the information - I only tried (unsuccessfully) to munge the information when I posted the e-mail in this forum! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.