Jump to content
Snowbat

40.78.83.67 - "Using rdns to route to correct Microsoft department" but reports go to the spammer

Recommended Posts

40.74.0.0 - 40.125.127.255 is Microsoft but SpamCop reports 40.78.83.67 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.

https://www.spamcop.net/sc?id=z6642045732zc34f39654039de5566045cb551a1d653z

Tracking message source: 40.78.83.67:

Routing details for 40.78.83.67
[refresh/show] Cached whois for 40.78.83.67 : abuse@microsoft.com
Using best contacts abuse@microsoft.com
Using rdns to route to correct Microsoft department
host 40.78.83.67 = fim5.lotesecasasparafamilia.com. (cached)
abuse net fim5.lotesecasasparafamilia.com = postmaster@lotesecasasparafamilia.com, postmaster@fim5.lotesecasasparafamilia.com

Share this post


Link to post
Share on other sites

I had a similar one but it seems the rdns redirect is bouncing, so mine went back to hotmail.  It appears the idea behind this might be so SpamCop can sent to the related abuse department.  It appears that SpamCop may have worked directly with the Microsoft abuse department on this part of the code.

Tracking URL: https://www.spamcop.net/sc?id=z6640795915z6babc4f58dd1fd8e9d6265ff6ca18ce3z
 

Quote

Tracking message source: 157.56.9.192:
Routing details for 157.56.9.192
[refresh/show] Cached whois for 157.56.9.192 : abuse@microsoft.com
Using best contacts abuse@microsoft.com
Using rdns to route to correct Microsoft department
host 157.56.9.192 (getting name) no name
failed, using default abuse@hotmail.com
abuse@hotmail.com redirects to report_spam@hotmail.com

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×