Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-21 Thread Atro Tossavainen via mailop
Cher M CARON

> Sorry but I represent OVH email team (not abuse), I have no power and 
> visibility on stuff out our email offer perimeter.

This is understood.

> As I say in private, the abuse form https://www.ovh.com/abuse/#!/ permit to 
> report spam problems. It ensure to abuse team enough information to check and 
> block.

If a ticket system does not allow email input with similar outcomes
it has to be considered as broken.

I had one that did (Request Tracker v2.x) at a former workplace ever
since September 11, 2001 (but I disclaim responsibility for the follow-up
effects later that day), and I was late to the game when I installed it
then.

> Moreover you will receive a ticket number and a notification when it’s close.

This should be possible irrespective of whether tickets are opened by
webform, email, phoning in, or other channels I didn't even think to
mention yet.

> To be honest I follow the Dima case but not your case. If I start to handle 
> abuse cases out of normal process it will be the mess…

It is true. However, OVH appears to have somewhat of a systemic problem,
and any amount of Mailop'ers writing to you or to Romain does not solve
that. The normal process needs to be improved quite a bit.

Amicalement,
-- 
Atro Tossavainen, Founder, Partner
Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635)
Tallinn, Estonia
tel. +372-5883-4269, http://www.koliloks.eu/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-21 Thread Pierre-Edouard Caron via mailop
Hello Hans-Martin,

Sorry but I represent OVH email team (not abuse), I have no power and 
visibility on stuff out our email offer perimeter.

As I say in private, the abuse form https://www.ovh.com/abuse/#!/ permit to 
report spam problems. It ensure to abuse team enough information to check and 
block.
Moreover you will receive a ticket number and a notification when it’s close.

To be honest I follow the Dima case but not your case. If I start to handle 
abuse cases out of normal process it will be the mess…
I ask abuse this morning and any report have been done for the IPs you mention.

Regards,

Pierre-Edouard Caron
Devops Email team
OVHCloud

De : mailop  De la part de Hans-Martin Mosner via 
mailop
Envoyé : lundi 20 juin 2022 07:35
À : mailop@mailop.org
Objet : Re: [mailop] OVH contact required - 54.38.34.203 - 
vps-28239cc9.vps.ovh.net

Am 15.06.22 um 10:40 schrieb Pierre-Edouard Caron via mailop:
I’m not aware about their process but I know that they wait multiples reports 
before to block.
They are improving the pipeline to give more notifications that the report have 
been handle.


I've reported a list of a few dozen IPs at OVH that are clearly used by one 
snowshoe spammer to Pierre-Edouard and to abuse@OVH, but to no effect.

Apparently "improving the pipeline" does not involve "working on the issues", 
maybe "deciding on a color scheme for abuse reporting web form" is eating up 
all of the committe meeting time? :-)

Cheers,
Hans-Martin
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-21 Thread Hans-Martin Mosner via mailop

Am 20.06.22 um 20:25 schrieb Hans-Martin Mosner via mailop:

Am 20.06.22 um 07:35 schrieb Hans-Martin Mosner via mailop:
I've reported a list of a few dozen IPs at OVH that are clearly used by one snowshoe spammer to Pierre-Edouard and to 
abuse@OVH, but to no effect.


Today I see an effect, very nice. All of those (including the ones that I didn't report yet because I only saw them 
later) are gone. Thumbs up! 


Spoke too early. Looks like the spammer just removed recipients from their list whose host isn't reachable (because they 
are in our IP block list). Still sending to other recipients, though, so apparently not terminated by OVH.


So thumbs down again. And sorry for self-responses, I'll stop now.

Cheers,
Hans-Martin

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-20 Thread Hans-Martin Mosner via mailop

Am 20.06.22 um 07:35 schrieb Hans-Martin Mosner via mailop:
I've reported a list of a few dozen IPs at OVH that are clearly used by one snowshoe spammer to Pierre-Edouard and to 
abuse@OVH, but to no effect.


Today I see an effect, very nice. All of those (including the ones that I didn't report yet because I only saw them 
later) are gone. Thumbs up!


There are some more to go, though :-)

Cheers,
Hans-Martin

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-19 Thread Hans-Martin Mosner via mailop

Am 15.06.22 um 10:40 schrieb Pierre-Edouard Caron via mailop:


I’m not aware about their process but I know that they wait multiples reports 
before to block.
They are improving the pipeline to give more notifications that the report have 
been handle.

I've reported a list of a few dozen IPs at OVH that are clearly used by one snowshoe spammer to Pierre-Edouard and to 
abuse@OVH, but to no effect.


Apparently "improving the pipeline" does not involve "working on the issues", maybe "deciding on a color scheme for 
abuse reporting web form" is eating up all of the committe meeting time? :-)


Cheers,
Hans-Martin
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-15 Thread Michael Peddemors via mailop
Yes, in general, despite comments to this mailing list, OVH responses to 
spam/threats from their IP space is sorely lacking, still to this date.


Still seeing incredible volumes of compromised servers, snowshoe 
spammers, phishing attacks and C servers with very slow take downs.




On 2022-06-15 01:40, Pierre-Edouard Caron via mailop wrote:

Hello,

I transfer the request directly to our abuse team (as It concern virtual 
server and not OVH email offer I have no power).
I’m not aware about their process but I know that they wait multiples 
reports before to block.
They are improving the pipeline to give more notifications that the 
report have been handle.


I hope it will help you.

Regards,

Pierre-Edouard Caron

Devops Email Team

OVHCloud

*De :* mailop  *De la part de* Romain via mailop
*Envoyé :* lundi 13 juin 2022 13:34
*À :* Dima Gomonyk 
*Cc :* mailop 
*Objet :* Re: [mailop] OVH contact required - 54.38.34.203 - 
vps-28239cc9.vps.ovh.net


Did you tried https://www.ovh.com/abuse/#!/ 
<https://www.ovh.com/abuse/#!/> ?


Le lun. 13 juin 2022 à 13:31, Dima Gomonyk via mailop <mailto:mailop@mailop.org>> a écrit :


A VPS on 54.38.34.203 IP - vps-28239cc9.vps.ovh.net
<http://vps-28239cc9.vps.ovh.net> host is doing something stupid and
quite bad - spoofing a bunch of domains, including some I'm overseeing.

abuse@, postmaster@, hostmaster@ addresses of the OVH are not
responding over the last two weeks. Would be grateful for a contact,
or ping me directly if you're from OVH.

-- 


*Dima Gomonyk*

/Email Deliverability Specialist, SMTP/

This email, its contents and attachments contain information from
Ziff Davis, Inc. and/or its affiliates which may be privileged,
confidential or otherwise protected from disclosure. The information
is intended to be for the addressee(s) only. If you are not an
addressee, any disclosure, copy, distribution or use of the contents
of this message is prohibited. If you have received this email in
error, please notify the sender by reply email and delete the
original message and any copies.

___
mailop mailing list
mailop@mailop.org <mailto:mailop@mailop.org>
https://list.mailop.org/listinfo/mailop
<https://list.mailop.org/listinfo/mailop>


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop




--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-15 Thread Pierre-Edouard Caron via mailop
Hello,

I transfer the request directly to our abuse team (as It concern virtual server 
and not OVH email offer I have no power).
I’m not aware about their process but I know that they wait multiples reports 
before to block.
They are improving the pipeline to give more notifications that the report have 
been handle.

I hope it will help you.

Regards,

Pierre-Edouard Caron
Devops Email Team
OVHCloud

De : mailop  De la part de Romain via mailop
Envoyé : lundi 13 juin 2022 13:34
À : Dima Gomonyk 
Cc : mailop 
Objet : Re: [mailop] OVH contact required - 54.38.34.203 - 
vps-28239cc9.vps.ovh.net

Did you tried https://www.ovh.com/abuse/#!/ ?

Le lun. 13 juin 2022 à 13:31, Dima Gomonyk via mailop 
mailto:mailop@mailop.org>> a écrit :

A VPS on 54.38.34.203 IP - 
vps-28239cc9.vps.ovh.net<http://vps-28239cc9.vps.ovh.net> host is doing 
something stupid and quite bad - spoofing a bunch of domains, including some 
I'm overseeing.

abuse@, postmaster@, hostmaster@ addresses of the OVH are not responding over 
the last two weeks. Would be grateful for a contact, or ping me directly if 
you're from OVH.
--
Dima Gomonyk
Email Deliverability Specialist, SMTP


This email, its contents and attachments contain information from Ziff Davis, 
Inc. and/or its affiliates which may be privileged, confidential or otherwise 
protected from disclosure. The information is intended to be for the 
addressee(s) only. If you are not an addressee, any disclosure, copy, 
distribution or use of the contents of this message is prohibited. If you have 
received this email in error, please notify the sender by reply email and 
delete the original message and any copies.
___
mailop mailing list
mailop@mailop.org<mailto:mailop@mailop.org>
https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] OVH contact required - 54.38.34.203 - vps-28239cc9.vps.ovh.net

2022-06-13 Thread Romain via mailop
Did you tried https://www.ovh.com/abuse/#!/ ?

Le lun. 13 juin 2022 à 13:31, Dima Gomonyk via mailop  a
écrit :

> A VPS on 54.38.34.203 IP - vps-28239cc9.vps.ovh.net host is doing
> something stupid and quite bad - spoofing a bunch of domains, including
> some I'm overseeing.
>
> abuse@, postmaster@, hostmaster@ addresses of the OVH are not responding
> over the last two weeks. Would be grateful for a contact, or ping me
> directly if you're from OVH.
> --
> *Dima Gomonyk*
>
> *Email Deliverability Specialist, SMTP *
>
>
> This email, its contents and attachments contain information from Ziff
> Davis, Inc. and/or its affiliates which may be privileged, confidential or
> otherwise protected from disclosure. The information is intended to be for
> the addressee(s) only. If you are not an addressee, any disclosure, copy,
> distribution or use of the contents of this message is prohibited. If you
> have received this email in error, please notify the sender by reply email
> and delete the original message and any copies.
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop