Spam Cop

Discussion in 'ISPConfig 3 Priority Support' started by illuder, Mar 9, 2022.

  1. illuder

    illuder Member

    Challenges with hacks and spam on the server continues...
    Is there no paid service or plugin within ISP Config which can easily manage these common problems?

    After just spending 3 days battling off a Wordpress Plugin virus ( https://wordpress.org/support/topic/virus-be-careful/ ), i get hit by the SpamCop message below...

    Admittedly, despite taking whatever neccessary precautions i could on the server, the time spent fighting off these unwanted elements sometimes makes me think if all this hosting is really worth it?
    If there are preferably any modules with GUI within ISPConfig which can easily manage these problems, I will be more than willing to pay for it.
    If its under development, i'll be more than willing to support it.

    Any advice on resolving the below new challenge?
    Tx in advance

    [ SpamCop V5.4.0 ]
    This message is brief for your comfort. Please use links below for details.

    Email from 163.123.183.223 / Sun, 6 Mar 2022 17:34:53 +0100
    https://www.spamcop.net/w3m?i=z7170655010z435f01517082cf2848b3c85ba9fec329z
    163.123.183.223 is open proxy, see: https://www.spamcop.net/mky-proxies.html

    [ Offending message ]
    "From - Mon Mar 7 07:52:28 2022
    "
    X-Account-Key: account3
    X-UIDL: 3867.1646584493
    X-Mozilla-Status: 0001
    X-Mozilla-Status2: 00000000
    X-Mozilla-Keys:
    Return-Path: <[email protected]>
    Received: from localhost [163.123.183.223]
    by b-5.in.mailobj.net [192.168.90.15] with ESMTP
    via ip-206.mailobj.net [213.182.55.206]
    for <x>; Sun, 6 Mar 2022 17:34:53 +0100 (CET)
    Subject: [SPAM] You appeared in 4 searches this week
    X-EA-Recv: time=1646584493;block(0,0,0,0)=0;adbook=0;antispam=1-1
    Bedazzling-Autograph: 84
    Content-ID: html-body
    From: LinkedIn <[email protected]>
    X--Subj: You appeared in 4 searches this week
    Arrangement-Aramco-Polite: 81D6E66C214
    Appealer-Goldfield: ff157e15556
    Message-ID: <[email protected]>
    Ascetics-Suitcases-Quashed: 7abe855de2a23
    Content-Transfer-Encoding: base64
    Date: Sun, 6 Mar 2022 18:34:53 +0000 (UTC)
    MIME-Version: 1.0
    Yawner-Authenticator: 39468
    Content-Type: text/html; charset=UTF-8
    To: "x" <x>

    PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs
    Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h
    bC5kdGQiPiA8aHRtbCB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94aHRtbCIgbGFuZz0i
    ZW4iIHhtbDpsYW5nPSJlbiI+ICAgIA0KPGhlYWQ+ICAgDQo8bWV0YSBodHRwLWVxdWl2PSJDb250
    ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDtjaGFyc2V0PXV0Zi04Ij4gIA0KPG1ldGEgbmFt
    ZT0iSGFuZGhlbGRGcmllbmRseSIgY29udGVudD0idHJ1ZSI+IDxtZXRhIG5hbWU9InZpZXdwb3J0
    IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGg7IGluaXRpYWwtc2NhbGU9MC42NjY2Njc7IHVz
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Yes, https://ispprotect.com/
     
  3. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    That issue is from over a year ago, though I suppose it's possible the site was hacked then and not updated since, and you're just dealing with it now.
    Once you have addressed the actual problem (eg. hacked website/plugins/whatever) and cleaned everything up so the spam has stopped, click the link you posted (https://www.spamcop.net/w3m?i=z7170655010z435f01517082cf2848b3c85ba9fec329z) and select the "spam has stopped" option and submit that.
     

Share This Page