Hi Len,

We have been extremely busy over here, so I haven't had a chance to circle back around, but for the record, volumes are still excessive, and our team is detected malicious, easily identifiable spam on a regular basis..

Received: from o2.hv1nn.shared.sendgrid.net (HELO o2.hv1nn.shared.sendgrid.net) (167.89.100.17)

From: "Mail Server" <fl...@briannterry.cf>


X-SG-EID: vCX7tmYXiV6kNiEMv3qHLBZRLdYJGTdPfZ+ASpLC2jlG9kE530AO6U3R7PsFrIheAMiGeiDLpIrmnS

RtlTY9CPxuYA7jT9E8Ee9Z81oSV3MmJC7ZUECs1XZlAETd6NeSOstLUJ7UQ4jo2Ys24TNjIMqW8x/S

5g6P+GvuzeFiLbRUsQ/krrt44O8WIQGsu5Nn5EjdhrjVbxRlhfjWywOToii0B5jLVHVGPl61bljt1M
 U=

Do you want to circle around to talking about how we can create automated reports of these for your company?

On 2020-08-11 9:22 a.m., Len Shneyder via mailop wrote:
Hello Benoit and Hokan,

Thanks for pointing this out and I'm sorry you're still seeing what sounds like a high volume of phish. I've asked our fraud ops team to investigate this. In the future if you could send suspicious emails to ab...@sendgrid.com <mailto:ab...@sendgrid.com> we will get this handled. Feel free to CC me when you do this to make sure these are handled quickly.

We've instituted some self-limiting features on our front door that should've decreased the overall volume of abuse. This is a stop gap measure as we roll out some other countermeasures in the next few weeks. Could you let me know if you have seen a perceptible drop in volume and velocity between June and July when this was rolled out?

Again, I want to assure you that there is a massive effort happening here to address the problems you are seeing. I'm happy to meet off list and discuss this further and help you understand what we're working on if that would be helpful. Again, thank you for your patience and please don't hesitate to contact me when you see any of these issues arise.

Best,
-L

Len Shneyder
VP Industry Relations
Twilio <https://www.twilio.com/?utm_source=email_signature>
EMAIL   l...@twilio.com <mailto:l...@twilio.com>
TWITTER @LenShneyder <https://twitter.com/LenShneyder>

Message: 6
Date: Tue, 11 Aug 2020 16:53:46 +0200
From: Benoit Panizzon <benoit.paniz...@imp.ch <mailto:benoit.paniz...@imp.ch>>
To: mailop@mailop.org <mailto:mailop@mailop.org>
Subject: [mailop] Delisting request from sendgrid customer about ip
         used in recent phishing campaign.
Message-ID: <20200811165346.4e775...@go.imp.ch <mailto:20200811165346.4e775...@go.imp.ch>>
Content-Type: text/plain; charset=UTF-8

Hi List

o1678912x138.outbound-mail.sendgrid.net <http://o1678912x138.outbound-mail.sendgrid.net/> [167.89.12.138] and IP under
control of sendgrid was repeatedly involved in phishing and other spam
since June.

It ended up being blacklisted @ SWINOG.

Now a sendgrid customers complains to us, that his emails are being
rejected because of this listing.

But that makes me wonder: Doesn't sendgrid deal with such issues like
asking for delisting after blocking the sender itself and re-uses
recently (last phish received on 14. July) 'abused' ip addresses for
other customers?

Mit freundlichen Grüssen

-Benoît Panizzon-
--
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web https://urldefense.com/v3/__http://www.imp.ch__;!!NCc8flgU!Jyb1oWP7APkgX0rrc5NFacUfW0Yu4XeA1B6Dcl0IJWNPlcXIUaIq9196yCI$
______________________________________________________



------------------------------

Message: 7
Date: Tue, 11 Aug 2020 10:20:47 -0500
From: Hokan <ho...@me.umn.edu <mailto:ho...@me.umn.edu>>
To: mailop@mailop.org <mailto:mailop@mailop.org>
Subject: Re: [mailop] Delisting request from sendgrid customer about
         ip used in recent phishing campaign.
Message-ID: <20200811152047.ga7...@me.umn.edu <mailto:20200811152047.ga7...@me.umn.edu>>
Content-Type: text/plain; charset=iso-8859-1

I've instituted short-term blocks of Sendgrid mail several times this year
and started another today because it looks like as much as a third of the
mail they've sent us in the past week has been evil -- mostly phishing.

This is a problem for me because some of the mail Sendgrid sends is
wanted by my users.  I'm thinking about just accepting it all and filing
it into user spam folders.

I see that the IP you mention, Benoit, is currently listed on the SBL and
Spamcop.


On Tue, Aug 11, 2020 at 04:53:46PM +0200, Benoit Panizzon via mailop wrote:
Hi List

o1678912x138.outbound-mail.sendgrid.net
<http://o1678912x138.outbound-mail.sendgrid.net/> [167.89.12.138] and IP under
control of sendgrid was repeatedly involved in phishing and other spam
since June.

It ended up being blacklisted @ SWINOG.

Now a sendgrid customers complains to us, that his emails are being
rejected because of this listing.

But that makes me wonder: Doesn't sendgrid deal with such issues like
asking for delisting after blocking the sender itself and re-uses
recently (last phish received on 14. July) 'abused' ip addresses for
other customers?

Mit freundlichen Grüssen

-Benoît Panizzon-

--
Hokan                                 MEnet, a wholly owned subsidiary of Enet System Administrator         Department of Aerospace Engineering and Mechanics ho...@me.umn.edu <mailto:ho...@me.umn.edu> Department of Mechanical Engineering 612.208.3105 (cell)           Department of Industrial and Systems Engineering



------------------------------

Subject: Digest Footer

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop




--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to