Steve

https://www.spamcop.net/sc?id=z6892951213zb63f6e4d8eab8744c73323c82d4deb01z Manually reporting spam in above tracking link to abuse AT ttnet DOT net DOT tr (SC's parser determines this is one of the abuse POCs for this IP address) results in Gmail's mailer-daemon returning with this result: Running a query through RIPE doesn't show that email address as a POC: https://apps.db.ripe.net/db-web-ui/query?bflag=false&dflag=false&rflag=true&searchtext=91.220.182.196&source=RIPE Refreshing the cache does nothing to remove this address from the parse. Can the Deputies remove this address (abuse AT ttnet DOT net DOT tr) as the domain is no longer active? As determined by the RIPE query, abuse AT doruk DOT net DOT tr is the correct abuse POC for this IP address. Steve

Does anyone know if reports sent to sewr@senpluspluseop.onmicrosoft.com are read or ignored?

I use Last Pass for my password manager.

Upon manually reporting the email referenced in the tracking link (I received the same email twice today from the same email address and IP address), Gmail's mailer-daemon replies with this: Querying the IP address (200.62.229.190) on LACNIC Whois only displays the email address gestion.ip AT claro DOT com DOT pe. SC parses the email and determines that this is a last resort contact. Is there any way to contact LACNIC to get them to update the abuse POC? Steve

SC's parser determined that abuse AT vividwireless DOT com DOT au is the responsible party for the above IP address. But when querying it on APNIC's site, it says that abuse AT optusnet DOT com DOT au is the abuse contact (and is an Optusnet IP address). For any of the Optusnet spam I've received, SC's parser would automatically deliver a result of abuse_sc AT optusnet DOT com DOT au. Tracking URL: https://www.spamcop.net/sc?id=z6883707653ze0a2ff6d67316ea0d5c8517df5690f95z Steve

abuse AT sphere DOT ad DOT jp is the invalid contact (SC's parser determined this address to be one of several responsible for handling abuse reports for the above IP address. The others are abuse AT xrea DOT com, postmaster AT digi-rock DOT com, abuse AT sakura DOT ad DOT jp and abuse AT digi-rock DOT com) Tracking URL: https://www.spamcop.net/sc?id=z6883013206z2874abc91aba362e311dfbdb7d0e2341z The other addresses I forwarded the report to didn't result in me receiving an email like the one above, so I'm assuming those addresses are valid. Steve

Sent a report to both super AT plala DOT or DOT jp and postmaster AT plala DOT or DOT jp. Steve

The last few spam email reports I sent (I manually report spam emails originating from Plala's network rather than through SC) regarding spam originating from Plala's network to super AT plala DOT or DOT jp have not resulted in replies from one of their agents informing me that the user had appropriate action taken against them. I've never not received a reply to a spam email I reported to them. I unfortunately no longer have any replies to a spam email I reported to them to provide. Here is the tracking URL for the last email I reported to them through SC (12/27/23): https://members.spamcop.net/mcgi?action=gettrack&reportid=7307895648 https://members.spamcop.net/mcgi?action=gettrack&reportid=7299159596 11/19/23 tracking url https://members.spamcop.net/mcgi?action=gettrack&reportid=7298399113 11/16/23 tracking url https://members.spamcop.net/mcgi?action=gettrack&reportid=7294994591 11/2/23 tracking url Steve

Even SC's parser redirects reports from abuse AT microsoft DOT com to report_spam AT hotmail DOT com. Well, at least until it was recently changed to sewr [AT] senpluspluseop [DOT] onmicrosoft [DOT] com.

According to Gmail's mailer-daemon, malware AT mnemo DOT com doesn't exist, yet SC's parser dev/nulls this address. https://www.spamcop.net/sc?id=z6877159915z6bfdd31b37f0c6be4d2b2f3fb9c2bc3e

From SC, but if you report manually through email (for SG) or Amazon (via their report form or email to abuse AT amazonaws DOT com). They respond and take action as they see fit.

I'm not saying that SC's parser displayed that. I'm just confused as to why no explanation was given as to why the parser just dev/nulls the reports to Sendgrid's abuse address by default. Well, I did manually report the spam/unwanted email to abuse AT sendgrid DOT com and got this:

Why is is SC dev/nulling reports to Sendgrid? There's no explanation when parsing emails sent from a Sendgrid customer. https://www.spamcop.net/sc?id=z6864665553z76b4173c8cadf5ce84d01efaa688126ez It usually says something to the effect of "Reports disabled for abuse AT x DOT com/net, etc. ("x" referring to the domain the email was sent from), for emails, (not specifically Sendgrid) but no explanation by the parser is given.

Now that the parser has been updated to reflect the correct abuse POC (irt AT nic DOT or DOT kr), SC's parser refuses to forward spam to that address?🤔😑🤨😡🤬 https://www.spamcop.net/sc?id=z6857548165z7e7c70a47f487652bf4ce763cf932b91z Having said that, was there any reason for me to even contact the Deputies to have them update the address in the first place?!?!?!?

But they don't, so I'm not sure why that address shows up as the POC for abuse reports when irt AT nic DOT or DOT kr is the correct POC for abuse reports.

SC's parser for this IP address (115.71.14.193) determined that tech AT daouidc DOT com is the responsible party to deal with spam reports but Gmail is unable to connect to their server when I manually attempt to report the spam to that address: Tracking URL: https://www.spamcop.net/sc?id=z6857143701z88958ab2f99e8a67e0cb58bf69907cacz I have also queried the IP address myself and got these addresses: irt AT nic DOT or DOT kr, infra-tech AT daou DOT co DOT kr and hostmaster AT nic DOT or DOT kr and also forwarded said spam email TO those addresses. No option is available on SC's report form to refresh the cache for this address (tech AT daouidc DOT com) to show the correct abuse POC for the above IP address which is: irt AT nic DOT or DOT kr.

https://www.spamcop.net/sc?id=z6844998451z8a3e57d09628b5f5968d0180733cc8aaz SC's parser is sending spam reports to search-apnic-not-arin AT apnic DOT net (search-apnic-not-arin#apnic DOT net AT devnull DOT spamcop DOT net) for IP address 43.229.13.202 when abuse AT bcc DOT gov DOT bd is the correct abuse POC? APNIC Query

https://www.spamcop.net/sc?id=z6806908673z04b1a724626bf46fe4806f1e9634969fz Abuse POC for above IP address is invalid. Gmail is unable to forward reports when reporting manually to abuse AT ipplanet DOT com. This is the mailer-daemon response: It seems the domain no longer exists as referenced here: All that's there is this link (https://www.moneyquestions.com/contact.html which redirects to http://www.cddz.com/contact-us when you click on the Contact Owner link below) and a copyright message Routing details for said IP address Can the deputies modify the parser to have reports sent to abuse AT terratransit DOT de and noc AT hostinger DOT com as that's what RIPE determines? TerraTransit AG is the responsible party to handle abuse reports for this IP address.

Message not delivered There was a problem delivering your message to abuse@ipplanet.com. See the technical details below. LEARN MORE The response was: The recipient server did not accept our requests to connect. Learn more at https://support.google.com/mail/answer/7720 [ipplanet.com 15.197.142.173: timed out] [ipplanet.com 3.33.152.147: timed out]

So can the deputies modify the parser to have reports sent to abuse AT terratransit DOT de?

https://www.spamcop.net/sc?id=z6806908673z04b1a724626bf46fe4806f1e9634969fz Abuse POC for above IP address is invalid. Gmail is unable to forward reports when reporting manually to abuse AT ipplanet DOT com. This is the mailer-daemon response: It seems the domain no longer exists as referenced here: All that's there is this link (https://www.moneyquestions.com/contact.html which redirects to http://www.cddz.com/contact-us when you click on the Contact Owner link below) and a copyright message Routing details for said IP address Can the deputies modify the parser to have reports sent to abuse AT terratransit DOT de and noc AT hostinger DOT com as that's what RIPE determines? TerraTransit AG is the responsible party to handle abuse reports for this IP address.

https://www.spamcop.net/mcgi?action=gettrack&reportid=7254298430 Petzl, I used the app you suggested for determining the registrar for a given IP address. This is result of querying 45.156.27.61: But when I query the above IP address on the ripe database site: I get abuse AT cloudbackbone DOT net as the responsible POC (the responsible ORGANIZATION is listed as CGI GLOBAL LIMITED)? Meanwhile, if I try to send a test email to noc AT cloudbackbone DOT net, Gmail's mailer-daemon tells me that the mailbox is full. I tried sending the spam to noc AT cloudbackbone DOT net and got an auto reply back from yandex's mailer-daemon with the subject Undelivered Mail Returned to Sender:

Sent it there/filled out the abuse form on their site. Is there a way for the deputies to fix this so that the parser displays the correct POC (abuse AT namecheap DOT com)?

https://www.spamcop.net/sc?id=z6806535550z579ecc3525f12541f3b77e0a47c005d7z Upon manually reporting a spam email (tracking link above) to postmaster AT psychz DOT net, Yahoo's mailer-daemon replied with this: Also, upon querying the IP address via ARIN, in the Note field of the POC section of the query, this was written:

No reporting address was found for the above IP address. Running a query through whois.krnic.net resulted in this Abuse POC: assi AT lxn DOT co DOT kr. Running it again through whois.apnic.net provided these POCs: irt AT nic DOT or DOT kr and hostmaster AT nic DOT or DOT kr. https://www.spamcop.net/sc?id=z6806048399z8972a595fdd4abf0812422b68a40c74ez