cwg Posted January 22, 2022 Share Posted January 22, 2022 I ran a suspected spam ip address recently and got back: "Reports routes for 200.50.212.0: routeid: 53129287 200.50.192.0 - 200.50.223.255 to: globaltrap@devnull.spamcop.net Administrator interested in all reports" And am wondering if this is kin to devnull. Quote Link to comment Share on other sites More sharing options...
gnarlymarley Posted January 22, 2022 Share Posted January 22, 2022 2 hours ago, cwg said: And am wondering if this is kin to devnull. In the IPv4 world, the bottom, 0, should be the network address and the top, 255, is the broadcast address. It is using a devnull, but seems like it may be a trap. Quote Link to comment Share on other sites More sharing options...
petzl Posted January 23, 2022 Share Posted January 23, 2022 (edited) 7 hours ago, cwg said: I ran a suspected spam ip address recently and got back: "Reports routes for 200.50.212.0: routeid: 53129287 200.50.192.0 - 200.50.223.255 to: globaltrap@devnull.spamcop.net Administrator interested in all reports" And am wondering if this is kin to devnull. Yes it's been devnulled SpamCop Track would be helpful? SpamCop has legacy issues where a IP reporting address has been coded in, once done stays there! 200.50.212.0 klever[AT]centernet[DOT]com[DOT]br (none responsive email address)https://check.spamhaus.org/listed/?searchterm=200.50.212.0 Whois give this as Brazil spam also report to cert[AT]cert[DOT]br and mail-abuse[AT]cert[DOT]br Edited January 23, 2022 by petzl Quote Link to comment Share on other sites More sharing options...
cwg Posted January 24, 2022 Author Share Posted January 24, 2022 On 1/22/2022 at 4:50 PM, gnarlymarley said: In the IPv4 world, the bottom, 0, should be the network address and the top, 255, is the broadcast address. It is using a devnull, but seems like it may be a trap. That's from how I file IP address's in a workbook that I use to keep track of spammers, to avoid entering each (a.b.c.d) D in the workbook, I set it to 0. There's over 18,000 entries in the book, including abuse address's, if any. Quote Link to comment Share on other sites More sharing options...
gnarlymarley Posted January 25, 2022 Share Posted January 25, 2022 On 1/24/2022 at 3:00 PM, cwg said: That's from how I file IP address's in a workbook that I use to keep track of spammers, to avoid entering each (a.b.c.d) D in the workbook, I set it to 0. There's over 18,000 entries in the book, including abuse address's, if any. I made my own blacklist and use the DNS wildcard. such as *.c.b.a.dnsbl.example.com. I even did a few that go to the class B /16. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.