Jump to content
Snowbat

51.120.93.44 - "Using rdns to route to correct Microsoft department" but reports go to the spammer

Recommended Posts

'51.120.0.0 - 51.120.255.255' is Microsoft but Spamcop reports 51.120.93.44 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.

 

https://www.spamcop.net/sc?id=z6684582776z5cbae5f333ad4fcd75bb14237027b98dz

 

Tracking message source: 51.120.93.44:

Routing details for 51.120.93.44
[refresh/show] Cached whois for 51.120.93.44 : abuse@microsoft.com
Using best contacts abuse@microsoft.com
Using rdns to route to correct Microsoft department
host 51.120.93.44 = apps03.assistaemcasa.org. (cached)
abuse net assistaemcasa.org = postmaster@assistaemcasa.org

Share this post


Link to post
Share on other sites
On 10/16/2020 at 3:53 AM, Snowbat said:

Often now SpamCop has a legacy problem where a IP has been hard coded to override the abuse address.
assistaemcasa.org seems now a dead domain

Edited by petzl

Share this post


Link to post
Share on other sites
On 10/15/2020 at 10:53 AM, Snowbat said:

'51.120.0.0 - 51.120.255.255' is Microsoft but Spamcop reports 51.120.93.44 directly to the spammer. I've seen similar misreporting for other Microsoft-hosted spammers.

 

That is a good question. I would almost expect abuse@microsoft.com to be on the list as well in addition to the administrator's abuse address. I think this might be microsoft's cloud and it is going to the server admin, which may or may not be the spammer.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×