[Resolved] devnull address as "interested 3rd party"

[mshalperin]

http://www.spamcop.net/sc?id=z872533773z90...9ae181cd593875z

In this the parser assigns [at]devnull.spamcop.net as a 3rd party interested in both the source (84.128.190.195) and an illegal med spamvertised site (82.98.78.100) indicating that 67.18.54.2 (ThePlanet.com) produced repeated bounces and created the devnull for "statistical tracking." What is the point of statistically tacking interested 3rd parties?

http://www.spamcop.net/sc?id=z872533785z6b...3591cb744ab97fz

This one uses the same devnull address as a 3rd party interested in a different drug related spamvertised site (82.138.63.64). I get the feeling that 67.18.54.2 could have a spammer connection to the source and spamvertised sites it's "interested" in.

[Wazoo]

e-mail to upstream;

From: "Wazoo"

To: Deputies

Subject: Third-party issue

Date: Fri, 10 Feb 2006 01:55:30 -0600

Forum Topic - devnull address as "interested 3rd party"

http://forum.spamcop.net/forums/index.php?showtopic=5939

Tracking URL

http://www.spamcop.net/sc?id=z872533773z90...9ae181cd593875z

Parse comments of note:

67.18.54.2 bounces (325 sent : 241 bounces)

Using 67.18.54.2[at]devnull.spamcop.net for statistical tracking.

Third party interested in reports 67.18.54.2[at]devnull.spamcop.net

(Note: this data used for both the Source IP address and the

spamvertised web-site)

Routing Details;

http://www.spamcop.net/sc?action=showroute...typecodes=15,14

Reports routes for 82.98.78.100:

routeid:18012466 70.84.123.66 - 95.255.255.255 to:67.18.54.2

Third party interested in all reports

Thursday, February 09, 2006 9:00:11 PM -0600

[Note added by 70.64.153.98, 24.66.94.141

(S0106001195758c79.ss.shawcable.net)]

hostgator.com, co-lo provider

[mshalperin]

e-mail to upstream;

40304[/snapback]

Thanks, Wazoo.

[Wazoo]

Thanks, Wazoo.

40313[/snapback]

Interesting ... that's all Ellen said also.

However, a relook at your Tracking URLs shows that things have been changed. The strange third-party routing is now gone. Marking this one as Resolved.

[Jeff G.]

In conclusion, "67.18.54.2[at]devnull.spamcop.net" has been removed from "Third party interested in email source" and "Third party interested in spamvertized web site". I wonder how it got there in the first place.

[mshalperin]

In conclusion, "67.18.54.2[at]devnull.spamcop.net" has been removed from "Third party interested in email source" and "Third party interested in spamvertized web site".  I wonder how it got there in the first place.

40318[/snapback]

Hmmm, I wonder... My concern was that it was a new addition - I've sent reports to these spamvertised sites in the recent past without any 3rd party reference and it appeared in 2 spams with different sites. Anyway - it's gone now...