Non-stop spam emails sent from OVH hosted server.

e2bs2k1

I recently got a lot phishing emails from day to day. They all come from OVH ips.
For example(see image)

Do anyone have similar situation? How do you handle this besides using spam filter?

barbaros

https://www.ovhcloud.com/en-ie/abuse/

w3e4r5

just report OVH. case closed

zed

I just let @jar handle all my spam.

nghialele

First of all I thought OVH sending spams 😂

Yeah, abuse report it is my man.

e2bs2k1

@barbaros said:
https://www.ovhcloud.com/en-ie/abuse/

Reported once before. Never get any replies from them..

zmeu

echo '-i origin AS16276' | nc whois.radb.net 43 | grep '^route:'

Regards

cmeerw

@e2bs2k1 said: Do anyone have similar situation? How do you handle this besides using spam filter?

That IP is already listed by a few RBLs, and it doesn't even have a proper Reverse DNS record, so that's an easy one to just reject.

BTW, SendGrid seems to send a lot of spam lately - and that's a lot more difficult to deal with.

jar

@e2bs2k1 said:
I recently got a lot phishing emails from day to day. They all come from OVH ips.
For example(see image)

Do anyone have similar situation? How do you handle this besides using spam filter?

Like this:

deny    message = Mail not accepted from default assigned hostnames
        !authenticated = *
        condition = ${if or{\
                      {match{$sender_helo_name}{\N^vps-.*\.vps\.ovh\.(ca|us|net)$\N}}\
                      {match{$sender_host_name}{\N^vps-.*\.vps\.ovh\.(ca|us|net)$\N}}\
                    }{yes}{no}}
        logwrite = Rejected default OVH hostname: helo=$sender_helo_name host=$sender_host_name from $sender_host_address