Reply From Spammer or Victim?

[michaelanglo]

Not ever shown in headers?

It seems to be detected on "handshake" by server.

SC stamps it if you have "Block Russian" checked on filter

X-SpamCop-Disposition: Blacklist

http://www.spamcop.net/sc?id=z5551450482ze...74235c77d6e485z

Botnet

http://cbl.abuseat.org/lookup.cgi?ip=185.23.12.8

Can't see any such cause, just SA and CBL.

Here is your TRACKING URL - it may be saved for future reference:

http://www.spamcop.net/sc?id=z5552485673z7...62fcfd21c6886az

This has "Blocked Russian" as expected

[petzl]

Can't see any such cause, just SA and CBL.

Here is your TRACKING URL - it may be saved for future reference:

http://www.spamcop.net/sc?id=z5552485673z7...62fcfd21c6886az

This has "Blocked Russian" as expected

My email goes to SpamCop Email directly (my only address)

I unchecked ALL blacklists except "Blocked Russian" and my personal blacklist on a test and gets sent to my held folder just stamped

X-SpamCop-Disposition: Blacklist

In your sample I see

X-SpamCop-Disposition: Blocked Russian

Don't really want to remove my personal blacklist

But thanks for the information

Very suspicious as to why these Botnets are getting past Greylisting not challenged

All of them are pointing to hacking sites (lately drug forums)

There is a spat going on with these Botnet operators or maybe a "whitehat" loose cannon

[turetzsr]

<snip>

Very suspicious as to why these Botnets are getting past Greylisting not challenged

<snip>

...Please see SpamCop Forum article "greylisting."