Jump to content
Sign in to follow this  
priruss

Spamcop devnulling Valid Reports?

Recommended Posts

I'm getting inundated by spam containing links pointing to IPs 157.231.100.50 and 157.231.100.51. The closest I can get a traceroute to get to these IPs is:

TraceRoute from Network-Tools.com to 157.231.100.50

Hop (ms) (ms) (ms) IP Address Host name

1 24 0 0 206.123.64.46 -

2 0 0 0 64.124.196.225 xe-4-2-0.er2.dfw2.us.above.net

3 25 0 0 64.125.27.81 xe-0-1-0.cr2.dfw2.us.above.net

4 0 0 0 64.125.31.86 xe-0-2-0.er3.dfw2.us.above.net

5 0 0 0 64.124.193.221 64.124.193.221.t01263-01.above.net

6 1 1 1 198.154.100.146 switchport1.hostwindsdns.com

7 0 0 0 157.232.64.2 -

8 Timed out Timed out Timed out -

9 Timed out Timed out Timed out -

10 Timed out Timed out Timed out -

11 Timed out Timed out Timed out -

Trace aborted.

hostwindsdns.com is obviously an upstream DNS provider for these IPs. So why when I add abuse[at]hostwindsdns.com to my spam complaints is Spamcop not allowing them to be sent? I'll happily accept correction if hostwindsdns.com isn't involved, but please tell me why they would show up on the traceroute as an upstream if they're not. And, if they're not the DNS provider, then who is?

Edit: Some tracking URLs for these turds:

http://www.spamcop.net/sc?track=http%3A%2F...511b3cb62f75%2F

http://www.spamcop.net/sc?track=http%3A%2F...8b3a98606593%2F

http://www.spamcop.net/sc?track=http%3A%2F...SM3FMNTDMMLC%2F

http://www.spamcop.net/sc?track=http%3A%2F...RWGM4DENDCG4%2F

Edited by priruss

Share this post


Link to post
Share on other sites
<snip>

hostwindsdns.com is obviously an upstream DNS provider for these IPs. So why when I add abuse[at]hostwindsdns.com to my spam complaints is Spamcop not allowing them to be sent?

<snip>

...Could you show us what was presented to you that indicates that the report was not sent? I can't remember ever seeing SpamCop refuse to send reports to one of the "Public standard report recipients" I added unless the report was too old.

...Parenthetically, FWIW, you can always construct your own complaints to abuse[at]hostwindsdns.com, you needn't rely on SpamCop to do it for you.....

[edit]

...Ah, reading your post more carefully, I see that you are trying to report a spamvertized link. SpamCop isn't really geared to expend much effort on such links; its primary goal is to identify the spam source, which is to say the source of the e-mail. You may want to look into products whose primary purpose is to report spamvertized links, such as Knujon and Complainterator. For more on SpamCop's philosophy regarding spamvertized links, please see the SpamCop FAQ (links to which appear near the top left of each SpamCop Forum page) article labeled "SpamCop reporting of spamvertized sites - some philosophy." Another entry that is relevant is the SpamCop Wiki article "Reporting spam websites."

Edited by turetzsr

Share this post


Link to post
Share on other sites

I'm getting inundated by spam containing links pointing to IPs 157.231.100.50 and 157.231.100.51.

That comes back to:

157.231.100.50 - Geo Information

IP Address 157.231.100.50

Host 157.231.100.50

Location US, United States

City San Bernardino, CA 92408

Organization Health Data Sciences Corporation

ISP Health Data Sciences Corporation

AS Number AS13354 EBL Global Networks, Inc.

Latitude 34°07'80" North

Longitude 117°25'78" West

But aflmc.ssc.af.mil makes it to be an official US Air Force address, although it would seem to be obsolete. The Air Force Logistics Management Center became the Air Force Logistics Management Agency in 1993. It's not clear that it's stated parent command SSC currently exists.

Share this post


Link to post
Share on other sites

abuse[at]hostwindsdns.com appears to be bouncing our email. I reset the bounce counter to see if the bouncing has stopped.

SpamCop won't send mail to an address that bounces.

The type of report (source IP vs URL) you're asking SpamCop to send is irrelevant. SpamCop will send the report unless there is a specific reason not to, such as an admin prohibition against sending mail to the address, or bounce problem.

- Don D'Minion - SpamCop Admin -

- Service[at]Admin.SpamCop.net -

.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×