Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-14 Thread Michael Rathbun via mailop
On Fri, 14 Aug 2020 10:40:40 -0500, Mickey Chandler via mailop wrote: >And yet ESPs, like many other businesses, can sometimes look at abuse >desk operations as a cost center, not as a core functionality. It's >way easier to justify paying for new salespeople who will bring in >several times thei

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-14 Thread Mickey Chandler via mailop
I'm going to preface this email by saying that I do, in fact, run an abuse desk. I'm the director of the policy enforcement team for my employer, an ESP that everyone knows. I'm not going to mention them by name because anything that I say here is based upon my own thoughts, opinions, and experienc

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-14 Thread Steve Freegard via mailop
On 14/08/2020 02:14, Ángel via mailop wrote: I don't think it's rocket science. As an ESP, you have a series of customers. For each customer, you should have a table of their validated domains (you do have a process for validating domains, right?). Each customer must place and shall only place

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-13 Thread Hans-Martin Mosner via mailop
Am 13.08.20 um 19:28 schrieb Al Iverson via mailop: > On Thu, Aug 13, 2020 at 11:34 AM Hans-Martin Mosner via mailop > wrote: >> Mails to abuse@ should be handled quickly without being CC'd to a VP. It's >> the abuse desks job to stop abuse ASAP. If they are understaffed or don't >> have authori

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-13 Thread Ángel via mailop
On 2020-08-13 at 18:27 +0200, Hans-Martin Mosner via mailop wrote: > The first thing you need to do is to know your customers. Don't send > out mails on behalf of someone you don't really know, period. > > > Apparently some customers themselves are victims of hacks now, so that > alone would not

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-13 Thread Al Iverson via mailop
On Thu, Aug 13, 2020 at 11:34 AM Hans-Martin Mosner via mailop wrote: > > Mails to abuse@ should be handled quickly without being CC'd to a VP. It's > the abuse desks job to stop abuse ASAP. If they are understaffed or don't > have authority to stop spamming senders then there's an organizationa

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-13 Thread Hans-Martin Mosner via mailop
Am 11.08.20 um 18:22 schrieb Len Shneyder via mailop: > Hello Benoit and Hokan, > > Thanks for pointing this out and I'm sorry you're still seeing what sounds > like a high volume of phish. I've asked our > fraud ops team to investigate this. In the future if you could send > suspicious emails to

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-12 Thread Tim Bray via mailop
On 11/08/2020 20:41, Matt Harris via mailop wrote: We'd been using sendgrid in production for some stuff, but we're looking at changing that now because it seems like their lack of concern regarding abuse on their platform will lead to more and more deliverability issues as time g

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Matt Harris via mailop
On Tue, Aug 11, 2020 at 2:21 PM Michael Orlitzky via mailop < mailop@mailop.org> wrote: > In the past few months there have been several threads on mailop and > similar lists (sdlu, spamassassin-users, nanog, ...) complaining about > how SendGrid doesn't seem to do anything at all to stop the ongo

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Michael Orlitzky via mailop
On 2020-08-11 16:53:46, Benoit Panizzon via mailop wrote: > > Now a sendgrid customers complains to us, that his emails are being > rejected because of this listing. > > But that makes me wonder: Doesn't sendgrid deal with such issues like > asking for delisting after blocking the sender itself a

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Adam D. Barratt via mailop
On Tue, 2020-08-11 at 09:22 -0700, Len Shneyder via mailop wrote: > Thanks for pointing this out and I'm sorry you're still seeing what > sounds like a high volume of phish. I've asked our fraud ops team to > investigate this. In the future if you could send suspicious emails > to ab...@sendgrid.co

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Len Shneyder via mailop
il_signature> EMAIL l...@twilio.com TWITTER @LenShneyder <https://twitter.com/LenShneyder>Message: 6 Date: Tue, 11 Aug 2020 16:53:46 +0200 From: Benoit Panizzon To: mailop@mailop.org Subject: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign. Mes

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Hans-Martin Mosner via mailop
Am 11.08.20 um 16:53 schrieb Benoit Panizzon via mailop: > Hi List > > o1678912x138.outbound-mail.sendgrid.net [167.89.12.138] and IP under > control of sendgrid was repeatedly involved in phishing and other spam > since June. > > It ended up being blacklisted @ SWINOG. > > Now a sendgrid customers

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Hokan via mailop
I've instituted short-term blocks of Sendgrid mail several times this year and started another today because it looks like as much as a third of the mail they've sent us in the past week has been evil -- mostly phishing. This is a problem for me because some of the mail Sendgrid sends is wanted by

[mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Benoit Panizzon via mailop
Hi List o1678912x138.outbound-mail.sendgrid.net [167.89.12.138] and IP under control of sendgrid was repeatedly involved in phishing and other spam since June. It ended up being blacklisted @ SWINOG. Now a sendgrid customers complains to us, that his emails are being rejected because of this lis