Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-19 Thread James Hoddinott via mailop
Hi Sebastian, It doesn't look like we got your actual remediation requests (am guessing you never got a confirmation email) but I was able to identify your IP based on your email address and have remediated it for you now.IP has been listed in CSI since the end of June when we saw a snowshoe attac

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-18 Thread Sebastian Arcus via mailop
On 17/09/2024 12:15, Sebastian Arcus via mailop wrote: Hello list. In the last few days Virgin Media in UK (@virginmedia.com, @ntlworld.com) have started to bounce emails from one of the domains I manage. There isn't a lot to go on - as being a 550 message, there isn't any info about being bla

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Sebastian Arcus via mailop
On 17/09/2024 16:19, Matt Vernhout wrote: Random thought - Have you validated that their email authentication is configured properly for the mail they are sending? originprobate.com "spf":     "record": "v=spf1 mx -all",     "valid": true,     "dns_lookups": 1,  

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Matt Vernhout via mailop
Random thought - Have you validated that their email authentication is configured properly for the mail they are sending? originprobate.com "spf": "record": "v=spf1 mx -all", "valid": true, "dns_lookups": 1, "dns_void_lookups": 0, "warnings": [], "parsed": { "pass":

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Sebastian Arcus via mailop
On 17/09/2024 14:50, Stuart Henderson wrote: On 2024/09/17 13:57, Sebastian Arcus via mailop wrote: On 17/09/2024 12:36, Peter N. M. Hansteen wrote: From the symptoms you describe, I would say this matches somebody running a joejob (https://en.wikipedia.org/wiki/Joe_job) campaign and most lik

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Sebastian Arcus via mailop
On 17/09/2024 14:06, Peter N. M. Hansteen wrote: On Tue, Sep 17, 2024 at 01:57:03PM +0100, Sebastian Arcus via mailop wrote: On 17/09/2024 12:36, Peter N. M. Hansteen wrote: From the symptoms you describe, I would say this matches somebody running a joejob (https://en.wikipedia.org/wiki/Joe_

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Stuart Henderson via mailop
On 2024/09/17 13:57, Sebastian Arcus via mailop wrote: > On 17/09/2024 12:36, Peter N. M. Hansteen wrote: > > From the symptoms you describe, I would say this matches somebody running > > a joejob (https://en.wikipedia.org/wiki/Joe_job) campaign and most likely > > bought a bottom of the barrel sp

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Peter N. M. Hansteen via mailop
On Tue, Sep 17, 2024 at 01:57:03PM +0100, Sebastian Arcus via mailop wrote: > On 17/09/2024 12:36, Peter N. M. Hansteen wrote: > > From the symptoms you describe, I would say this matches somebody running > > a joejob (https://en.wikipedia.org/wiki/Joe_job) campaign and most likely > > bought a bo

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Sebastian Arcus via mailop
On 17/09/2024 12:36, Peter N. M. Hansteen wrote: From the symptoms you describe, I would say this matches somebody running a joejob (https://en.wikipedia.org/wiki/Joe_job) campaign and most likely bought a bottom of the barrel spamto: list with a generous helping of outdated or never-existed-in-

Re: [mailop] Virgina Media in UK bouncing emails with "550 Mailbox unavailable"

2024-09-17 Thread Peter N. M. Hansteen via mailop
From the symptoms you describe, I would say this matches somebody running a joejob (https://en.wikipedia.org/wiki/Joe_job) campaign and most likely bought a bottom of the barrel spamto: list with a generous helping of outdated or never-existed-in-the-first-place addresses. DMARC reporting might he