Jump to content
Sign in to follow this  
Snowbat

52.138.55.160 - "Using rdns to route to correct Microsoft" but reports go to the spammer

Recommended Posts

52.132.0.0 - 52.143.255.255 is Microsoft but Spamcop reports 52.138.55.160 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.

https://www.spamcop.net/sc?id=z6637276977z8c88d696b11a340247839b0d7a9a2c90z

Tracking message source: 52.138.55.160:

Routing details for 52.138.55.160
[refresh/show] Cached whois for 52.138.55.160 : abuse@microsoft.com
Using best contacts abuse@microsoft.com
Using rdns to route to correct Microsoft department
host 52.138.55.160 = user15.pj-santanderesfera.com. (cached)
abuse net pj-santanderesfera.com = postmaster@pj-santanderesfera.com

Share this post


Link to post
Share on other sites
Posted (edited)
On 6/5/2020 at 10:01 PM, Snowbat said:

abuse net pj-santanderesfera.com = postmasterXpj-santanderesferaXcom

Abuse net often get their addresses wrong putting postmaster@domain, that used to be the default address where no abuse address can be found.

Doubt if it goes any where, pays to look-up abuse addresses yourself to check.
I use this windows APP from
http://www.nirsoft.net/utils/ipnetinfo.html

Edited by petzl

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×