Jump to content

51.120.93.44 - "Using rdns to route to correct Microsoft department" but reports go to the spammer


Recommended Posts

'51.120.0.0 - 51.120.255.255' is Microsoft but Spamcop reports 51.120.93.44 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.

 

https://www.spamcop.net/sc?id=z6684582776z5cbae5f333ad4fcd75bb14237027b98dz

 

Tracking message source: 51.120.93.44:

Routing details for 51.120.93.44
[refresh/show] Cached whois for 51.120.93.44 : abuse@microsoft.com
Using best contacts abuse@microsoft.com
Using rdns to route to correct Microsoft department
host 51.120.93.44 = apps03.assistaemcasa.org. (cached)
abuse net assistaemcasa.org = postmaster@assistaemcasa.org

Link to comment
Share on other sites

On 10/16/2020 at 3:53 AM, Snowbat said:

Often now SpamCop has a legacy problem where a IP has been hard coded to override the abuse address.
assistaemcasa.org seems now a dead domain

Edited by petzl
Link to comment
Share on other sites

  • 2 weeks later...
On 10/15/2020 at 10:53 AM, Snowbat said:

'51.120.0.0 - 51.120.255.255' is Microsoft but Spamcop reports 51.120.93.44 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.

 

That is a good question. I would almost expect abuse@microsoft.com to be on the list as well in addition to the administrator's abuse address. I think this might be microsoft's cloud and it is going to the server admin, which may or may not be the spammer.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...