shmengie Posted March 1, 2005 Share Posted March 1, 2005 http://www.spamcop.net/sc?id=z737565409zce...be3f63a1f55320z None of these URLs were diagnosed by SC Thunderbird, however displayed many clickables. http://briny.tehexpertz.com/a/209120/minuteman http://posit.beatrxbillz.com/a/209120/waters http://embroidery.beatrxbillz.com/a/209120/grosvenor http://funeral.beatrxbillz.com/a/209120/alcove http://shipbuilding.beatrxbillz.com/a/209120/aggravate http://transmogrify.beatrxbillz.com/a/209120/commiserate http://droplet.beatrxbillz.com/a/209120/ar http://polloi.beatrxbillz.com/a/209120/trw http://dreary.beatrxbillz.com/a/209120/aeneid http://kalmuk.beatrxbillz.com/a/209120/note They all resolve to Address: 210.245.235.152 Abuse contact for 210.245.235.152: anson28[at]hotmail.com The [at]hotmail.com abuse contact cought me off guard. Huge spam text removed as it exists within the Tracking URL provided above. Link to comment Share on other sites More sharing options...
StevenUnderwood Posted March 1, 2005 Share Posted March 1, 2005 Your spammer is aware of the limits to genetrate the "Too many links" message in the spamcop parser. That was added when spammers were posting many legitimate links trying to get their spam to look legit and too many innocent parties were being notified. You can report them manually, especially since you have altrady determined the reporting adress. Link to comment Share on other sites More sharing options...
Merlyn Posted March 1, 2005 Share Posted March 1, 2005 are you sure the abuse address for 210.245.235.152 is the hotmail address or is it abuse[at]newworldtel.com. Link to comment Share on other sites More sharing options...
shmengie Posted March 1, 2005 Author Share Posted March 1, 2005 According to whois for that ip, yes it's. after a closer inspection of the whois record, I noticed that it was modified by a yahoo.co.uk account, so I figured it may be legit. changed: [bzzt][at]yahoo.co.uk 20050218 Link to comment Share on other sites More sharing options...
shmengie Posted March 1, 2005 Author Share Posted March 1, 2005 Ahh, that explains it. I saw the yahoo, and wondered if SC dug up the same reporting to: addy... When None were dug up, I posted here. Thanks for the info. Since all the links resolve to the same IP, would it not be prudent to report anyway? Link to comment Share on other sites More sharing options...
Merlyn Posted March 1, 2005 Share Posted March 1, 2005 That is true but that IP is actually owned by: route: 210.245.128.0/17 descr: NWT IP Network origin: AS17444 remarks: 128 Class C from AS17444 notify: radb_admin[at]newworldtel.com mnt-by: MAINT-AS17444 changed: radb_admin[at]newworldtel.com 20040301 source: RADB Their abuse addy is abuse[at]newworldtel.com The addresses you are looking at are the spammers. Link to comment Share on other sites More sharing options...
dra007 Posted March 10, 2005 Share Posted March 10, 2005 anson28[at]hotmail.com appears on a lot of my reports lately. Seems odd to have a report sent to a hotmail address. Does anyone know who that is? Link to comment Share on other sites More sharing options...
Farelf Posted March 10, 2005 Share Posted March 10, 2005 Did you see http://forum.spamcop.net/forums/index.php?showtopic=3742 Link to comment Share on other sites More sharing options...
dra007 Posted March 10, 2005 Share Posted March 10, 2005 Yet why does spamcop still sends to the hotmail address? Still puzzled here! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.