Jump to content

Snowbat

Membera
  • Posts

    223
  • Joined

  • Last visited

Posts posted by Snowbat

  1. 23.96.0.0 - 23.103.255.255 is Microsoft but SpamCop reports 23.96.243.76 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".


    https://www.spamcop.net/sc?id=z6728099618z7829a7f39ac508c615c26e782e2b4db8z
    Tracking message source: 23.96.243.76:

    Routing details for 23.96.243.76
    [refresh/show] Cached whois for 23.96.243.76 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 23.96.243.76 = qaqzzaccc3.aposteitudonosmenor.org. (cached)
    abuse net qaqzzaccc3.aposteitudonosmenor.org = postmaster@qaqzzaccc3.aposteitudonosmenor.org, postmaster@aposteitudonosmenor.org


    If reported today, reports would be sent to:

    Re: 23.96.243.76 (Administrator of network where email originates)

    postmaster@aposteitudonosmenor.org
    postmaster@qaqzzaccc3.aposteitudonosmenor.org

  2. 168.61.0.0 - 168.63.255.255 is Microsoft but SpamCop reports 168.61.161.46 directly to the spammer via the broken "Using rdns to route to correct Microsoft department". 

     

    https://www.spamcop.net/sc?id=z6727902759z811be8b59f2e84928dadbd769a44d1d0z

    Tracking message source: 168.61.161.46:

    Routing details for 168.61.161.46
    [refresh/show] Cached whois for 168.61.161.46 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 168.61.161.46 = e33.user-online01.com. (cached)
    abuse net e33.user-online01.com = postmaster@e33.user-online01.com, postmaster@user-online01.com

     

    If reported today, reports would be sent to:

    Re: 168.61.161.46 (Administrator of network where email originates)

    postmaster@user-online01.com
    postmaster@e33.user-online01.com

  3. 20.33.0.0 - 20.128.255.255 is Microsoft but SpamCop reports 20.78.164.136 directly to the spammer via the broken "Using rdns to route to correct Microsoft department". 
     
     
    Tracking message source: 20.78.164.136:

    Routing details for 20.78.164.136
    [refresh/show] Cached whois for 20.78.164.136 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 20.78.164.136 = tqapalxmnv4.ateautlimaprimes.org. (cached)
    abuse net tqapalxmnv4.ateautlimaprimes.org = postmaster@tqapalxmnv4.ateautlimaprimes.org, postmaster@ateautlimaprimes.org

     

     

    If reported today, reports would be sent to:

    Re: 20.78.164.136 (Administrator of network where email originates)

    postmaster@ateautlimaprimes.org
    postmaster@tqapalxmnv4.ateautlimaprimes.org

  4. 168.61.0.0 - 168.63.255.255 is Microsoft but SpamCop reports 168.61.184.97 directly to the spammer via the broken "Using rdns to route to correct Microsoft department". 

    https://www.spamcop.net/sc?id=z6726584799z0d519c8c9a691404bb8ff2c3fed0d349z

     

    Tracking message source: 168.61.184.97:

    Routing details for 168.61.184.97
    [refresh/show] Cached whois for 168.61.184.97 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 168.61.184.97 = op39.movieandfilmes-01.com. (cached)
    abuse net movieandfilmes-01.com = postmaster@movieandfilmes-01.com

  5. 51.140.0.0 - 51.145.255.255 is Microsoft but SpamCop reports 51.141.122.96 directly to the spammer via the broken "Using rdns to route to correct Microsoft department". 

     

    https://www.spamcop.net/sc?id=z6718569013z01d30c17e691d30fef20e9b4b0c1a075z

    Tracking message source: 51.141.122.96:

    Routing details for 51.141.122.96
    [refresh/show] Cached whois for 51.141.122.96 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 51.141.122.96 = acesso146.promoptsparaempresasmkstapp.com. (cached)
    abuse net promoptsparaempresasmkstapp.com = postmaster@promoptsparaempresasmkstapp.com

     

    If reported today, reports would be sent to:

    Re: 51.141.122.96 (Administrator of network where email originates)

    postmaster@promoptsparaempresasmkstapp.com

  6. 52.224.0.0 - 52.255.255.255 is Microsoft but SpamCop reports 52.229.112.211 directly to the spammer via the broken "Using rdns to route to correct Microsoft department". 

     

    https://www.spamcop.net/sc?id=z6718048482zc0d4d60e589e71cc1eba35a93a7f3394z

    Tracking message source: 52.229.112.211:

    Routing details for 52.229.112.211
    [refresh/show] Cached whois for 52.229.112.211 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 52.229.112.211 = envio8.faturasbrs8.com. (cached)
    abuse net envio8.faturasbrs8.com = postmaster@faturasbrs8.com, postmaster@envio8.faturasbrs8.com

     

    If reported today, reports would be sent to:

    Re: 52.229.112.211 (Administrator of network where email originates)

    postmaster@envio8.faturasbrs8.com
    postmaster@faturasbrs8.com

  7. 52.145.0.0 - 52.191.255.255 is Microsoft but SpamCop reports 52.161.110.39 directly to the spammer via the broken "Using rdns to route to correct Microsoft department". 

     

    https://www.spamcop.net/sc?id=z6717777156zd038dc104a3c1ec847edd6dc1373dbf9z

    Tracking message source: 52.161.110.39:

    Routing details for 52.161.110.39
    [refresh/show] Cached whois for 52.161.110.39 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 52.161.110.39 = envio2.dadright4.org. (cached)
    abuse net envio2.dadright4.org = postmaster@envio2.dadright4.org, postmaster@dadright4.org

     

    If reported today, reports would be sent to:

    Re: 52.161.110.39 (Administrator of network where email originates)

    postmaster@dadright4.org
    postmaster@envio2.dadright4.org

  8. 40.74.0.0 - 40.125.127.255 is Microsoft but SpamCop reports 40.115.103.8 directly to the spammer via the broken "Using rdns to route to correct Microsoft department". 

     

    https://www.spamcop.net/sc?id=z6717774072zd2310dc431fade28171b310f81407065z

    Tracking message source: 40.115.103.8:

    Routing details for 40.115.103.8
    [refresh/show] Cached whois for 40.115.103.8 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 40.115.103.8 (getting name) no name
    host 40.115.103.8 = envio4.24horasaviso-id7.online. (old cache)
    abuse net envio4.24horasaviso-id7.online = postmaster@envio4.24horasaviso-id7.online, postmaster@24horasaviso-id7.online

     
    If reported today, reports would be sent to:

    Re: 40.115.103.8 (Administrator of network where email originates)

    postmaster@24horasaviso-id7.online
    postmaster@envio4.24horasaviso-id7.online

  9. 20.33.0.0 - 20.128.255.255 is Microsoft but SpamCop reports 20.106.161.153 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6717774043z62801a6934694da34178a0bc549a535az

    Tracking message source: 20.106.161.153:

    Routing details for 20.106.161.153
    [refresh/show] Cached whois for 20.106.161.153 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 20.106.161.153 (getting name) no name
    host 20.106.161.153 = envio1.buscaseupedidoagbr04.online. (old cache)
    abuse net envio1.buscaseupedidoagbr04.online = postmaster@buscaseupedidoagbr04.online, postmaster@envio1.buscaseupedidoagbr04.online

     

    If reported today, reports would be sent to:

    Re: 20.106.161.153 (Administrator of network where email originates)

    postmaster@envio1.buscaseupedidoagbr04.online
    postmaster@buscaseupedidoagbr04.online

  10. 40.74.0.0 - 40.125.127.255 is Microsoft. Reports should go to abuse@microsoft.com but SpamCop reports 40.74.135.247 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".
     
    Tracking message source: 40.74.135.247:

    Routing details for 40.74.135.247
    [refresh/show] Cached whois for 40.74.135.247 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 40.74.135.247 = bonus76.plusmktocomunicate4app.com. (cached)
    abuse net plusmktocomunicate4app.com = postmaster@plusmktocomunicate4app.com

     

    If reported today, reports would be sent to:

    Re: 40.74.135.247 (Administrator of network where email originates)

    postmaster@plusmktocomunicate4app.com

  11. 40.74.0.0 - 40.125.127.255 is Microsoft but SpamCop reports 40.114.46.111 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".
     
    Tracking message source: 40.114.46.111:
    Routing details for 40.114.46.111
    [refresh/show] Cached whois for 40.114.46.111 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 40.114.46.111 = as2.avisoclienteonline.com. (cached)
    abuse net as2.avisoclienteonline.com = postmaster@avisoclienteonline.com, postmaster@as2.avisoclienteonline.com

     

    If reported today, reports would be sent to:

    Re: 40.114.46.111 (Administrator of network where email originates)

    postmaster@as2.avisoclienteonline.com
    postmaster@avisoclienteonline.com

  12. 40.74.0.0 - 40.125.127.255 is Microsoft but SpamCop reports 40.116.65.20 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".
     
    Tracking message source: 40.116.65.20:

    Routing details for 40.116.65.20
    [refresh/show] Cached whois for 40.116.65.20 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 40.116.65.20 = envio6.faturareal08.online. (cached)
    abuse net envio6.faturareal08.online = postmaster@envio6.faturareal08.online, postmaster@faturareal08.online

     
    If reported today, reports would be sent to:

    Re: 40.116.65.20 (Administrator of network where email originates)

    postmaster@faturareal08.online
    postmaster@envio6.faturareal08.online

  13. 20.33.0.0 - 20.128.255.255 is Microsoft but SpamCop reports 20.101.72.135 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".
     
    Tracking message source: 20.101.72.135:

    Routing details for 20.101.72.135
    [refresh/show] Cached whois for 20.101.72.135 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 20.101.72.135 (getting name) no name
    host 20.101.72.135 = envio9.formaunica10.online. (old cache)
    abuse net envio9.formaunica10.online = postmaster@envio9.formaunica10.online, postmaster@formaunica10.online

     

    If reported today, reports would be sent to:

    Re: 20.101.72.135 (Administrator of network where email originates)

    postmaster@formaunica10.online
    postmaster@envio9.formaunica10.online

  14. 40.64.0.0 - 40.71.255.255 is Microsoft but SpamCop reports 40.71.166.2 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".
     
    Tracking message source: 40.71.166.2:

    Routing details for 40.71.166.2
    [refresh/show] Cached whois for 40.71.166.2 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 40.71.166.2 = envio4.consultfatura04.online. (cached)
    abuse net envio4.consultfatura04.online = postmaster@envio4.consultfatura04.online, postmaster@consultfatura04.online

     

    If reported today, reports would be sent to:

    Re: 40.71.166.2 (Administrator of network where email originates)

    postmaster@consultfatura04.online
    postmaster@envio4.consultfatura04.online

  15. 40.74.0.0 - 40.125.127.255 is Microsoft but SpamCop reports 40.80.155.206 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6714992420z36fc20264e3a90f206936dcecc069558z

    Tracking message source: 40.80.155.206:

    Routing details for 40.80.155.206
    [refresh/show] Cached whois for 40.80.155.206 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 40.80.155.206 = envio6.novasfaturabr09.online. (cached)
    abuse net envio6.novasfaturabr09.online = postmaster@envio6.novasfaturabr09.online, postmaster@novasfaturabr09.online

     

    If reported today, reports would be sent to:

    Re: 40.80.155.206 (Administrator of network where email originates)

    postmaster@novasfaturabr09.online
    postmaster@envio6.novasfaturabr09.online

  16. 13.64.0.0 - 13.107.255.255 is Microsoft but SpamCop reports 13.91.129.244 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".
     
    Tracking message source: 13.91.129.244:

    Routing details for 13.91.129.244
    [refresh/show] Cached whois for 13.91.129.244 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 13.91.129.244 (getting name) no name
    host 13.91.129.244 = envio6.novafaturaversao07.online. (old cache)
    abuse net envio6.novafaturaversao07.online = postmaster@envio6.novafaturaversao07.online, postmaster@novafaturaversao07.online

     

    If reported today, reports would be sent to:

    Re: 13.91.129.244 (Administrator of network where email originates)

    postmaster@novafaturaversao07.online
    postmaster@envio6.novafaturaversao07.online

  17. 52.224.0.0 - 52.255.255.255 is Microsoft but SpamCop reports 52.235.37.152 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6714812239z6183fc5c816611c6932fd5531074fafdz

    Tracking message source: 52.235.37.152:
    Routing details for 52.235.37.152
    [refresh/show] Cached whois for 52.235.37.152 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 52.235.37.152 = id64.pessoafisicadigital.com. (cached)
    abuse net pessoafisicadigital.com = postmaster@pessoafisicadigital.com

     

    If reported today, reports would be sent to:

    Re: 52.235.37.152 (Administrator of network where email originates)

    postmaster@pessoafisicadigital.com

  18. 40.74.0.0 - 40.125.127.255 is Microsoft but SpamCop reports 40.112.218.153 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6714499754z44e853ff48921d7b17a09c6c464dece9z

    Routing details for 40.112.218.153
    [refresh/show] Cached whois for 40.112.218.153 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 40.112.218.153 = esferacomvc5.avisoexpresso.org. (cached)
    abuse net esferacomvc5.avisoexpresso.org = postmaster@avisoexpresso.org, postmaster@esferacomvc5.avisoexpresso.org

     

    If reported today, reports would be sent to:

    Re: 40.112.218.153 (Administrator of network where email originates)

    postmaster@esferacomvc5.avisoexpresso.org
    postmaster@avisoexpresso.org

  19. 20.180.0.0 - 20.191.255.255 is Microsoft but SpamCop reports 20.191.230.87 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6714487640z526f19cc83cdc7fb7921c835b3fb40d6z

    Tracking message source: 20.191.230.87:

    Routing details for 20.191.230.87
    [refresh/show] Cached whois for 20.191.230.87 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 20.191.230.87 (getting name) no name
    host 20.191.230.87 = protesto09.cartoriooficial.com. (old cache)
    abuse net cartoriooficial.com = postmaster@cartoriooficial.com

     

    If reported today, reports would be sent to:

    Re: 20.191.230.87 (Administrator of network where email originates)

    postmaster@cartoriooficial.com

  20. 20.192.0.0 - 20.255.255.255 is Microsoft but SpamCop reports 20.199.120.113 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".
     
     
    Tracking message source: 20.199.120.113:

    Routing details for 20.199.120.113
    [refresh/show] Cached whois for 20.199.120.113 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 20.199.120.113 = as109.debito-online-cliente.com. (cached)
    abuse net debito-online-cliente.com = postmaster@debito-online-cliente.com

     

    If reported today, reports would be sent to:

    Re: 20.199.120.113 (Administrator of network where email originates)

    postmaster@debito-online-cliente.com

  21. 20.33.0.0 - 20.128.255.255 is Microsoft but SpamCop reports 20.101.39.254 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6714239228z4485eaf4d4888ba057410bfd2c0d5f98z

    Tracking message source: 20.101.39.254:

    Routing details for 20.101.39.254
    [refresh/show] Cached whois for 20.101.39.254 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 20.101.39.254 (getting name) no name
    host 20.101.39.254 = ad45.debito-online-cliente.com. (old cache)
    abuse net debito-online-cliente.com = postmaster@debito-online-cliente.com

     

    If reported today, reports would be sent to:

    Re: 20.101.39.254 (Administrator of network where email originates)

    postmaster@debito-online-cliente.com

  22. 52.224.0.0 - 52.255.255.255 is Microsoft but SpamCop reports 52.229.120.216 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6714239225za5238a374c266336ce7159803886f197z

    Tracking message source: 52.229.120.216:

    Routing details for 52.229.120.216
    [refresh/show] Cached whois for 52.229.120.216 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 52.229.120.216 (getting name) no name
    host 52.229.120.216 = ad67.debito-online-cliente.com. (old cache)
    abuse net debito-online-cliente.com = postmaster@debito-online-cliente.com

     

    If reported today, reports would be sent to:

    Re: 52.229.120.216 (Administrator of network where email originates)

    postmaster@debito-online-cliente.com

  23. 20.33.0.0 - 20.128.255.255 is Microsoft but SpamCop reports 20.98.201.26 directly to the spammer via the broken "Using rdns to route to correct Microsoft department".

     

    https://www.spamcop.net/sc?id=z6713935423zcdfa33c9dcb42fe2107c8c8af9e99631z

    Tracking message source: 20.98.201.26:

    Routing details for 20.98.201.26
    [refresh/show] Cached whois for 20.98.201.26 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 20.98.201.26 (getting name) no name
    host 20.98.201.26 = envio7.sessaobfilmesbr4.com. (old cache)
    abuse net envio7.sessaobfilmesbr4.com = postmaster@envio7.sessaobfilmesbr4.com, postmaster@sessaobfilmesbr4.com

     

    If reported today, reports would be sent to:

    Re: 20.98.201.26 (Administrator of network where email originates)

    postmaster@sessaobfilmesbr4.com
    postmaster@envio7.sessaobfilmesbr4.com

  24. 52.224.0.0 - 52.255.255.255 is Microsoft but SpamCop reports 52.235.30.65 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.
     
    Tracking message source: 52.235.30.65:

    Routing details for 52.235.30.65
    [refresh/show] Cached whois for 52.235.30.65 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 52.235.30.65 = ab66.notificasaocliente.com. (cached)
    abuse net notificasaocliente.com = postmaster@notificasaocliente.com

     

    If reported today, reports would be sent to:

    Re: 52.235.30.65 (Administrator of network where email originates)

    postmaster@notificasaocliente.com

  25. 52.224.0.0 - 52.255.255.255 is Microsoft but SpamCop reports 52.249.195.146 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.

    https://www.spamcop.net/sc?id=z6713630058z88159b8f8e92f7a262a9fa4f06bdcac3z

    Tracking message source: 52.249.195.146:

    Routing details for 52.249.195.146
    [refresh/show] Cached whois for 52.249.195.146 : abuse@microsoft.com
    Using best contacts abuse@microsoft.com
    Using rdns to route to correct Microsoft department
    host 52.249.195.146 = envio.segundeffaturasbrr07.com. (cached)
    abuse net envio.segundeffaturasbrr07.com = postmaster@envio.segundeffaturasbrr07.com, postmaster@segundeffaturasbrr07.com

     

    If reported today, reports would be sent to:

    Re: 52.249.195.146 (Administrator of network where email originates)

    postmaster@segundeffaturasbrr07.com
    postmaster@envio.segundeffaturasbrr07.com

×
×
  • Create New...