Menu
Reply
  • 5
  • 0
  • 0
Joining in
852 Views
Message 1 of 8
Flag for a moderator

Spambots again

Hi,

I can't send e-mails via Outlook or Mail and I have been following similar posts in the Community to try to resolve.  In particular, I've looked at https://www.spamhaus.org/lookup and https://community.virginmedia.com/t5/Security-matters/Searching-for-Spambots-on-your-network/td-p/40... but with no success.

Spamhaus tells me that the last detection was 3 days ago and says " The observed forged HELO identification was skoj.tc.rcwh.ruujlkeqfqzoi.com."

I have downloaded Wireshark and run a trace on my laptop and on the network as a Hotspot as suggested but there have been no results

What else can I do?

I have a PC and a laptop (both Windows 10), two phones and two tablets (Android) on the network.  Defender, Avast AV and Spybot have failed to find anything but the previous posts suggest that is not unusual.

0 Kudos
Reply
  • 6.48K
  • 1.24K
  • 1.76K
Very Insightful Person
Very Insightful Person
850 Views
Message 2 of 8
Flag for a moderator

Re: Spambots again

Hello

When following the instructions did you also do the part where you set you PC or laptop as a hotspot and connect you mobiles wireless to the hotspot, as if the PC comes up clean then there is something else that is causing the triggering of the spam detection on SpamHaus.

Regards Mike

I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more

Have I helped? Click Mark as Helpful Answer or use Kudos to say thanks

0 Kudos
Reply
  • 5
  • 0
  • 0
Joining in
838 Views
Message 3 of 8
Flag for a moderator

Re: Spambots again

Hello Mike,

Yes, I followed the advice, set up the Hotspot, connected all the Android devices and ran Wireshark again.  It was running for a few hours but would it detect anything if the last Spamhaus detection was 3 days ago?

I've also checked to see if any new Apps have been installed recently that might be causing a problem and can find none

Steve

0 Kudos
Reply
  • 5
  • 0
  • 0
Joining in
675 Views
Message 4 of 8
Flag for a moderator

Re: Spambots again

Hi,

My IP Address was removed from Spamhaus last week and Outlook functioned perfectly.  The problem has now returned and, checking Spamhaus, I find the my IP is listed in CSS for Wednesday Sept 16 at 18:52 and listed in CBL for Friday Sept 18 at 08:55.

The puzzle is: I have been away from Tuesday, Sept 15 until today, Friday Sept 18 at around 17:10.  During my absence, the PC and laptop have been switched off and the phones and tablets have been away from the house.  The only thing left connected to the router is my HIVE controller for the central heating.  Could this be causing the problem?

0 Kudos
Reply
  • 1.22K
  • 21
  • 84
Moderator
Moderator
464 Views
Message 5 of 8
Flag for a moderator

Re: Spambots again

Hi Horse19,

We've been looking into this recently. Are you still having a problem with your IP being listed?

Let us know and we can look to sort this out for you.

Many thanks,
Dan_M

The do's and don'ts. Keep the community welcoming for all. Follow the house rules


0 Kudos
Reply
  • 5
  • 0
  • 0
Joining in
452 Views
Message 6 of 8
Flag for a moderator

Re: Spambots again

Hi Dan,

Thanks for the response.

The September 16 listing disappeared shortly after my last post and everything worked well until it was blocked again on Monday 28 Sept.  Spamhaus now says that the last detection occurred September 27 2020 at 13:37 (UTC).  It also says - "The observed forged HELO identification was pjul.mwk.ttnlg.qpwdyzwirdozci.com." if that helps.

I can get round the problem using a VPN but, clearly, it is not a long term solution and any help you can give would be appreciated.

Regards, Steve

0 Kudos
Reply
  • 1.22K
  • 21
  • 84
Moderator
Moderator
343 Views
Message 7 of 8
Flag for a moderator

Re: Spambots again

Hi there, 

 

We've updated the lists again so this shouldn't be a problem anymore. We are still investigating how we can avoid this sort of thing in future though. Please do let us know if you continue to have issues!

 

Many thanks, 

Dan_M

The do's and don'ts. Keep the community welcoming for all. Follow the house rules


  • 5
  • 0
  • 0
Joining in
336 Views
Message 8 of 8
Flag for a moderator

Re: Spambots again

Many thanks,
I'd noticed that I was no longer blocked on Spamhaus and Outlook was working satisfactorily. All non essential devices have been disconnected from the network for now so will reconnect one by one to see if there are any further problems.
Steve
0 Kudos
Reply