SPAM for nanog@ senders
NANOGers, Have you got email from 'dating.support@csvwebsupport.com’ immediately after you post to nanog@? First time I thought it’s coincidence, but today when I got it, it’s hardly one ;) Topic is '[#WHB-257-41491]: Re: XXXXXX’ where XXXX is subject taken from last e-mail. I understand there’s need to connect people in hard, COVID times, but I doubt automated spam sender has good intentions with that regard ;) So.. somebody is scrapping this list to feed their spamming lists :/ — ./
I did yeah, annoying. Best Regards, Octolus On 9/21/2020 12:50:54 PM, Łukasz Bromirski <lukasz@bromirski.net> wrote: NANOGers, Have you got email from 'dating.support@csvwebsupport.com’ immediately after you post to nanog@? First time I thought it’s coincidence, but today when I got it, it’s hardly one ;) Topic is '[#WHB-257-41491]: Re: XXXXXX’ where XXXX is subject taken from last e-mail. I understand there’s need to connect people in hard, COVID times, but I doubt automated spam sender has good intentions with that regard ;) So.. somebody is scrapping this list to feed their spamming lists :/ — ./
Dear Łukasz, others, Can you please send any suspecious emails (including headers) to the mailing list admin team at geeks@nanog.org? We'll try to figure out if it happens through an existing subscription. Kind regards, Job (hat: NANOG geeks) On Mon, Sep 21, 2020 at 12:51:44PM +0200, Octolus Development wrote:
I did yeah, annoying.
Best Regards, Octolus On 9/21/2020 12:50:54 PM, Łukasz Bromirski <lukasz@bromirski.net> wrote: NANOGers,
Have you got email from 'dating.support@csvwebsupport.com’ immediately after you post to nanog@? First time I thought it’s coincidence, but today when I got it, it’s hardly one ;)
Topic is '[#WHB-257-41491]: Re: XXXXXX’ where XXXX is subject taken from last e-mail.
I understand there’s need to connect people in hard, COVID times, but I doubt automated spam sender has good intentions with that regard ;)
So.. somebody is scrapping this list to feed their spamming lists :/
— ./
Job, I already taught my SpamAssasin and then deleted them, and my Postfix is no longer taking submission from the IP from which they were sent - 216.176.196.72. They seem to be using correct sending host according to SPF record (host spamtitan.csvwebsupport.com validates using 'dating.support@csvwebsupport.com’). Let me unblock them again and see if they’ll continue doing so, hopefully I’ll be able to help. I’m sending this email just to (hopefully) trigger the same behavior, and will follow up with you separately. Apologies for the noise for the rest of subscribers. -- Łukasz Bromirski CCIE R&S/SP #15929, CCDE #2012::17, PGP Key ID: 0xFD077F6A
Hi Randy,
On 22 Sep 2020, at 00:14, Randy Bush <randy@psg.com> wrote:
I already taught my SpamAssasin and then deleted them
:0 * ^From:.*@csvwebsupport.com | /usr/bin/mail -s 'Screw You' dating.support@csvwebsupport.com < ~/screw-you.txt
I’m using different technique. I like tarpitting such scums to death. Record holders keep their SMTP bots connected for weeks ;) But good old punch in the face works wonders too :) — ./
On 21/Sep/20 12:47, Łukasz Bromirski wrote:
NANOGers,
Have you got email from 'dating.support@csvwebsupport.com’ immediately after you post to nanog@? First time I thought it’s coincidence, but today when I got it, it’s hardly one ;)
Topic is '[#WHB-257-41491]: Re: XXXXXX’ where XXXX is subject taken from last e-mail.
I understand there’s need to connect people in hard, COVID times, but I doubt automated spam sender has good intentions with that regard ;)
So.. somebody is scrapping this list to feed their spamming lists :/
Been happening to me since several weeks into lockdown. It went by a different name before. Now, it's "Dating". But the chase is the same. Mark.
participants (5)
-
Job Snijders -
Mark Tinka -
Octolus Development -
Randy Bush -
Łukasz Bromirski