Jump to content
Sign in to follow this  
goldeneye

Reporting address for 170.117.122.82?

Recommended Posts

This is at least the third email I got with a URL that refers to that IP when parsed - and it isn't the IP block - it is the particular, specific IP.

http://www.spamcop.net/sc?id=z4091158454zd...be4371c5ddac7fz

Whatever that reporting e-mail that is (dgoulakos[at]optima.org), it doesn't sound right at all and it's bounced 6 out of 7.

Not only that, but ARIN claims that the 170.117.0.0/17 block is that particular contact.

Another snowshoe spam artist - such idiocy...

Share this post


Link to post
Share on other sites

SpamCop knows the address is bouncing our mail. That's why the reports are being sent to dgoulakos#optima.org[at]devnull.spamcop.net for statistical tracking.

Mail sent to "devnull" addresses is going to the trash. It is the act of sending the email that feeds our stats, so sending the report to the trash works just fine for our purposes.

- Don D'Minion - SpamCop Admin -

- service[at]admin.spamcop.net -

.

Share this post


Link to post
Share on other sites
SpamCop knows the address is bouncing our mail. That's why the reports are being sent to dgoulakos#optima.org[at]devnull.spamcop.net for statistical tracking.

Mail sent to "devnull" addresses is going to the trash. It is the act of sending the email that feeds our stats, so sending the report to the trash works just fine for our purposes.

Parsing input: 170.117.122.82

No recent reports, no history available

So why no reports available? just asking :blush:

Share this post


Link to post
Share on other sites
...I think that entire 170.117.0.0/17 is rogue or stolen, especially that POS IP address 170.117.122.82.
Well, since the host owner Optima is rejecting reports, that's a reasonable assumption.

Here is what Robtex "sees" from that IP address currently:

http://www.robtex.com/ip/170.117.122.82.html

(lots and lots of spammy domains showing there)

Since this is "only" a spamvertizer, SC is never going to make much of an impact - especially since the mail carrying the links (SC's actual target) are from diverse sources, possibly a botnet. Elliot Health Systems/Optima is US registered I think, this stuff needs to be reported to US authorities (FTC) by an affected US resident (such as you) to test whether there is any illegality. That's maybe a bit tricky in this case, the link to the spam is the "payload", not the sender. All seems pretty self-evident to "us" but there'd be no lawyers if everything was really as simple as it looks.

Or you could try complaining upstream to the 170.117.0.0/17 owner, colosseum.com which looks like verizon with an abuse address abuse-mail[at]verizonbusiness.com. Again, they may not be primarily geared to deal with spamsite hosting. Who would dream those spammers would have the audacity to operate that way?

Share this post


Link to post
Share on other sites
Parsing input: 170.117.122.82

No recent reports, no history available

So why no reports available? just asking :blush:

Because the IP is not a spam source, it's a web host. The SpamCop stats apply to the web URL that was reported, not the host IP, which is only used to determine who to send the report to.

- Don D'Minion - SpamCop Admin -

.

Share this post


Link to post
Share on other sites
Because the IP is not a spam source, it's a web host. The SpamCop stats apply to the web URL that was reported, not the host IP, which is only used to determine who to send the report to.

Thanks that explains it. Sometimes researching IP's and wondered why

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×