Jump to content

"terais.cloner.wedn.us is not a routeable IP address" -- but it IS routable


jhg
 Share

Recommended Posts

https://www.spamcop.net/sc?id=z6333092862z684f4e65bbaa470376d81782694ccf39z

Spamcop reports:

 
Tracking link: http://terais.cloner.wedn.us/unsubscribe?g=fDExMTgwNzI4fDUyMDAwMA&u=x

No recent reports, no history available
Host terais.cloner.wedn.us (checking ip) IP not found ; terais.cloner.wedn.us discarded as fake.
terais.cloner.wedn.us is not a routeable IP address
Cannot resolve http://terais.cloner.wedn.us/unsubscribe?g=fDExMTgwNzI4fDUyMDAwMA&u=x
However
[jhg@smtp ~]$ dig terais.cloner.wedn.us

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6_8.1 <<>> terais.cloner.wedn.us
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6341
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;terais.cloner.wedn.us.         IN      A

;; ANSWER SECTION:
terais.cloner.wedn.us.  599     IN      CNAME   ragg.pregit.com.
ragg.pregit.com.        299     IN      A       155.94.65.6

and

[jhg@smtp ~]$ ping terais.cloner.wedn.us
PING ragg.pregit.com (155.94.65.6) 56(84) bytes of data.
64 bytes from 155.94.65.6.ngprobd.com (155.94.65.6): icmp_seq=1 ttl=53 time=24.1 ms
64 bytes from 155.94.65.6.ngprobd.com (155.94.65.6): icmp_seq=2 ttl=53 time=24.0 ms
64 bytes from 155.94.65.6.ngprobd.com (155.94.65.6): icmp_seq=3 ttl=53 time=23.9 ms
64 bytes from 155.94.65.6.ngprobd.com (155.94.65.6): icmp_seq=4 ttl=53 time=23.9 ms

Why does Spamcop think it's not a routeable address?

Curiously, upon revisiting the report I see:

 
If reported today, reports would be sent to:

Re: 85.206.173.211 (Administrator of network where email originates)

williamsdesigndk@gmail.com

Re: http://terais.cloner.wedn.us/unsubscribe?g=fDEx... (Administrator of network hosting website referenced in spam)

abuse@nodesdirect.com

However, Spamcop did not send send to the nodesdirect.com address originally.

 
Edited by jhg
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...