Jump to content

191.241.39.96/29 destination looks wrong


Recommended Posts

Posted

Even after refresh:

Tracking message source: 191.241.39.98:
Routing details for 191.241.39.98
[refresh/show] Cached whois for 191.241.39.98 : [email protected]
Using abuse net on [email protected]
abuse net hotmail.com = [email protected], [email protected], [email protected]
Using best contacts [email protected] [email protected] [email protected]
[email protected] bounces (347 sent : 174 bounces)
Using abuse#[email protected] for statistical tracking.

and

Report spam to:
Re: 191.241.39.98 (Administrator of network where email originates)
 To: abuse#[email protected] (Notes)
 To: [email protected] (Notes)
 To: [email protected] (Notes)

Tracking URL:

https://www.spamcop.net/sc?id=z6380314779zc01b81eef2d5f7bbd0e47780055306fez

Whois (on source IP shown above) shows 

abuse-c:     FCHSO2

When I found a whois that would track this down (http://www.geektools.com/whois.php):

nic-hdl-br: FCHSO2
person: francisco crystian horta de souza
e-mail: [email protected]
country: BR
created: 20131104
changed: 20131104

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/ , respectivelly to [email protected]
% and [email protected]

Although I'm not sure any of those addresses are the greatest place to send spam reports to, I don't see the connection to live.com/microsoft.com/outlook.com.

Posted

The excellent IPNetinfo from Nirsoft confirms that there is no abuse address registered for 191.241.39.98, but also agrees that,

"Security and mail abuse issues should also be addressed to
 cert.br, http://www.cert.br/ , respectivelly to [email protected]
 and [email protected]"

I could find no suggestion that Microsoft's mail service was relevant.

If cert.br don't want to be bothered with basic spam reports perhaps they should either remove their details from the LACNIC record or else lean on the Brazilian registrar to ensure fully compliant domain registration. If cert.br receive enough of these reports maybe they'll be spurred into action...

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...