Anyone happen to have a contact at Juno/United Online? A sender of ours has an Amazon EC2 IP address in a Received Header and the United Online Feedback Loop is sending abuse reports to EC2. Causing quite a headache. Trying to determine if this is normal behavior.
Here's a copy of the abuse report and a header of the message that apparently triggered it. Hello, You have outstanding reports against your EC2 instance(s) and we are notifying you that we have investigated and observed abusive activity. We last contacted you about this on May 8th and have not received a reply. Details of the implicated instance(s) are below: Reported activity: Email Spam Instance ID: i-00068357cba6bd893 AWS ID: 375581654504 Please review these reports and respond with details of the action(s) you have taken to stop the abusive activity. If you do not consider the activity detailed in these reports to be abusive, please let us know why. The original reports are included at the end of this email for your convenience. Please note that your reply is required within 48 hours. According to the terms of the AWS Customer Agreement (http://aws.amazon.com/agreement/), if your instances continue to violate AWS's Acceptable Use Policy ( http://aws.amazon.com/aup/), we may take action against your resources or account to stop the abusive activity, including suspension or termination of your AWS account. Please remember that you are responsible for ensuring that your instances and all applications are properly secured. Regards, AWS Abuse Case Number: 10022499761 --Beginning of forwarded report(s)-- An Automated Feedback Report was received, indicating you were likely sending spam. The report and the spam emails follow. Arrival-Date: 8 May 2017 Source-IP: 52.200.251.210 Version: 1.0 User-Agent: UOL Feedback Loop 1.0 Feedback-Type: abuse Received: from outbound-bu1.vgs.untd.com (supportmail01.vgs.untd.com [10.181.43.21]) by spamdesk02.vgs.untd.com with SMTP id AABNTBAERAR9EPJ2 for (eow-s...@livespamdesk.prod.untd.com) (sender ( scanmail_failu...@mua.nyc.untd.com)); Mon, 8 May 2017 07:28:31 -0700 (PDT) Received: (qmail 6833 invoked by uid 514); 8 May 2017 14:28:31 -0000 X-Issue-Tag: .catch_spam_mail Delivered-To: xxx Received: from outbound-mail.vgs.untd.com (webmail10.vgs.untd.com [10.181.12.150]) by supportmail01.vgs.untd.com with SMTP id AABNTBAC5AL2N862 for (spamdesk-s...@support.juno.com) (sender ); Mon, 8 May 2017 07:27:39 -0700 (PDT) X-EOW-USER-IP: 108.184.125.235 Received: from mx09.vgs.untd.com (mx09.vgs.untd.com [10.181.44.39]) by maildeliver10.vgs.untd.com with SMTP id AABNTA2JSAFVG7US for (sender (bounces+3446560-c1ed-meyerl1=juno....@email.tumi.com)); Mon, 8 May 2017 05:14:08 -0700 (PDT) Authentication-Results: mx09.vgs.untd.com; DKIM=PASS Received-SPF: Pass Received: from o1678947x49.outbound-mail.sendgrid.net ( o1678947x49.outbound-mail.sendgrid.net [167.89.47.49]) by mx09.vgs.untd.com with SMTP id AABNTA2JRASZGR5J for (sender (bounces+3446560-c1ed-meyerl1=juno....@email.tumi.com)); Mon, 8 May 2017 05:14:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=tumi.com; h=content-type:from:mime-version:subject:to; s=s1; bh=kjj4EgQlYTUyMDWTZRx03kEKFN4=; b=KaXGmwxDh0tBNyEQZO5nkEfUE+G1p 3KZx9r7zWX5XFxThjfm6lvtus2l7yHlHGshA8o2bbxbNum4suZU27LTgcUpH3NM4 nL99wiOghpN4ycme+fyE3u3kEV0AD+i4uzOM+XuP3rntv8modZw0/Lk9QNsrqXX+ Ae+4p7BtDh7pHQ= Received: by filter0471p1mdw1.sendgrid.net with SMTP id filter0471p1mdw1-1576-59106096-5D 2017-05-08 12:12:06.889869039 +0000 UTC Received: from MzQ0NjU2MA (ec2-52-200-251-210.compute-1.amazonaws.com [52.200.251.210]) by ismtpd0005p1iad1.sendgrid.net (SG) with HTTP id ObvsyN0QT3aKB88L3WUhHw for (t...@email.tumi.com); Mon, 08 May 2017 12:12:06.864 +0000 (UTC) Content-Type: multipart/alternative; boundary="401124c35832be06b345fa59ee39dfcbc3863ba0b94730e9911370b78f20" Date: Mon, 8 May 2017 12:12:06 +0000 From: TUMI (t...@email.tumi.com) MIME-Version: 1.0 To: X Message-ID: (obvsyn0qt3akb88l3wu...@ismtpd0005p1iad1.sendgrid.net) X-SG-EID: iruQ7O2ruqJCFfv2S7xGeUWsPUhiQIIsuEqLV32eZcu6gxlVoj2WJhQK6zVR L5AMbOutkYirDr6uRU J6wcJEzrVv1TjQbOVxec8SWx1n1Ub/cQZTgR8+GvVhUuWTqsGbSsrdIfl7xsbmaemtbC 8zgn3OsFzj NZPvZdA5elYB/LuPuYvBg8JLA02n/1EW0UCFL5hjFuU7UwL68ZlAjlsJ1A== X-SG-ID: peAnPsQhEI4avR03XD4uFeINL/6t6hqqgGVECEYWmIxVCvpQrbja0HB/ g4p0Rk2qJ4WKE0EzCvVTo6 ZO/MHyKUL3Kb/GGPgLxmiClu4rBpHcnB5vR7hF8RiRxFA7yKPmG9GaBDzJAA+R8Cm+ EJNEI41JX4V6 frdiRgT24rpNoT/buKTTLtfzYpXXHdsrqIgNiz0w5cblxbJX+xpm+ DLrrmZatBlznKj1W7Ui3bVoDn p5Tc7fBwVYEgH0MBBg/NEc0xHrIoYKoLZMQvgQ41J/mNWmqI3Ldmq7fM8iEpbZLpgNYsgJlk 1onujF UnUJP24PMvD6e8aRYeLIJI3EXSY2xneFwP+SuZ2/ttqNSpLHQhQrH5KgwyOhngGE/iei+ jppBvbBJE wC9xUSgaF1znPPJQ== X-UNTD-BPF: 0537efcf9f2ebe9fbb139babaa13d3371adeaade07df1adb13fab73acaaa cb8aca93dffa37fb732a9f935e33939a5f0f6e5fce7aa357d70f7a7f X-UNTD-BodySize: 110971 X-UNTD-SPF: Pass X-UNTD-DKIM: PASS X-ContentStamp: 3:5:235755003 X-MAIL-INFO: 05373313377ebb77af137e2a2aaf7afb2ee3aabadb97a73b0ede875afabb fb335a5ac3aa93f31e93ea6b4f0b1eea5f5f0b3f9afa638ecace273a4a97 ebe76f232ffeea636bc3c3ae2f0e1f2f4bfb2b4e43fb4efb4b5b7aba9b5a cfcfef5a9b8e473f67577bcee7027fe79f027f43f72e6fd3674e8f2f4377 9a738a9a738a4acb8a5b6a4f3e3f773bcf3f6b3713171ada5e2a9e7edf1a 27df97afce97976f671b7b2f4703032b6f23021f8a3e3eeb4b430e2ee343 fb83cffbbaba33eae7ee2327e7cf0f47677702e78f4e8f038ffe4b2faa1f 2f3bdf2e1f370e2e9a4b2ea7af7373f3736a6bf36aeaea9e8b5fa36e87ab 2a63beabaedfdede1acb 63cbb3d7c3dbf36bf35bf33ac773238b73a3bf0b8bce4f0b43c70b1e47ba cfefbabb7e5a37337e377ebb0fbf2af75eabab1a5ef70afbd32e024b030e 833e0e9a833e338a9fe37333bb83bb X-UNTD-Peer-Info: 167.89.47.49|o1678947x49.outbound-mail.sendgrid.net|o16 78947x49.outbound-mail.sendgrid.net|bounces+3446560-c1ed-meyerl1=juno .c...@email.tumi.com X-UNTD-UBE: -1 Subject: Featuring Russell Westbrook: NBA All-Star Ref # [1M0Gm9f3mt0522r] X-Juno-Message-Id: 1M0Gm9f3mt0522r06Bt X-Other-threads: No X-Thread-Count: 1 X-UNTD-SPAMDESK-TYPE: EOW-SPAM --401124c35832be06b345fa59ee39dfcbc3863ba0b94730e9911370b78f20 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" MIME-Version: 1.0 -- Luke Martinez Team Lead | Email Delivery 520.400.5693
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
