Hello Benoit and Hokan, Thanks for pointing this out and I'm sorry you're still seeing what sounds like a high volume of phish. I've asked our fraud ops team to investigate this. In the future if you could send suspicious emails to ab...@sendgrid.com we will get this handled. Feel free to CC me when you do this to make sure these are handled quickly.
We've instituted some self-limiting features on our front door that should've decreased the overall volume of abuse. This is a stop gap measure as we roll out some other countermeasures in the next few weeks. Could you let me know if you have seen a perceptible drop in volume and velocity between June and July when this was rolled out? Again, I want to assure you that there is a massive effort happening here to address the problems you are seeing. I'm happy to meet off list and discuss this further and help you understand what we're working on if that would be helpful. Again, thank you for your patience and please don't hesitate to contact me when you see any of these issues arise. Best, -L Len Shneyder VP Industry Relations [image: Twilio] <https://www.twilio.com/?utm_source=email_signature> EMAIL l...@twilio.com TWITTER @LenShneyder <https://twitter.com/LenShneyder>Message: 6 Date: Tue, 11 Aug 2020 16:53:46 +0200 From: Benoit Panizzon <benoit.paniz...@imp.ch> To: mailop@mailop.org Subject: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign. Message-ID: <20200811165346.4e775...@go.imp.ch> Content-Type: text/plain; charset=UTF-8 Hi List o1678912x138.outbound-mail.sendgrid.net [167.89.12.138] and IP under control of sendgrid was repeatedly involved in phishing and other spam since June. It ended up being blacklisted @ SWINOG. Now a sendgrid customers complains to us, that his emails are being rejected because of this listing. But that makes me wonder: Doesn't sendgrid deal with such issues like asking for delisting after blocking the sender itself and re-uses recently (last phish received on 14. July) 'abused' ip addresses for other customers? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web https://urldefense.com/v3/__http://www.imp.ch__;!!NCc8flgU!Jyb1oWP7APkgX0rrc5NFacUfW0Yu4XeA1B6Dcl0IJWNPlcXIUaIq9196yCI$ ______________________________________________________ ------------------------------ Message: 7 Date: Tue, 11 Aug 2020 10:20:47 -0500 From: Hokan <ho...@me.umn.edu> To: mailop@mailop.org Subject: Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign. Message-ID: <20200811152047.ga7...@me.umn.edu> Content-Type: text/plain; charset=iso-8859-1 I've instituted short-term blocks of Sendgrid mail several times this year and started another today because it looks like as much as a third of the mail they've sent us in the past week has been evil -- mostly phishing. This is a problem for me because some of the mail Sendgrid sends is wanted by my users. I'm thinking about just accepting it all and filing it into user spam folders. I see that the IP you mention, Benoit, is currently listed on the SBL and Spamcop. On Tue, Aug 11, 2020 at 04:53:46PM +0200, Benoit Panizzon via mailop wrote: > Hi List > > o1678912x138.outbound-mail.sendgrid.net [167.89.12.138] and IP under > control of sendgrid was repeatedly involved in phishing and other spam > since June. > > It ended up being blacklisted @ SWINOG. > > Now a sendgrid customers complains to us, that his emails are being > rejected because of this listing. > > But that makes me wonder: Doesn't sendgrid deal with such issues like > asking for delisting after blocking the sender itself and re-uses > recently (last phish received on 14. July) 'abused' ip addresses for > other customers? > > Mit freundlichen Grüssen > > -Benoît Panizzon- -- Hokan MEnet, a wholly owned subsidiary of Enet System Administrator Department of Aerospace Engineering and Mechanics ho...@me.umn.edu Department of Mechanical Engineering 612.208.3105 (cell) Department of Industrial and Systems Engineering ------------------------------ Subject: Digest Footer
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
