Jump to content

CHINANET has beat SPAMCOP


navybuff

Recommended Posts

Posted

Well, I think they have done it, 90% of the spam I get now has no master or untraceable. However I can easily trace the mail to the originating IP but spam cop can't or is untraceable (can not resolve) by spamcop, any thoughts as to the future, my yearly fees are due...

http://www.spamcop.net/sc?id=z989307171z0d...4b0c8cffd35e61z

80,000 + reports Sent :blink:

I don't quite understand your problem. When I click on the link your provided, I see a section:

Reports regarding this spam have already been sent:

Re: 87.101.65.80 (Administrator of network where email originates)

Reportid: 1822649470 To: marcin[at]poczta.rybnik.pl

Re: Forwarded spam (User defined recipient)

Reportid: 1822649496 To: spam[at]uce.gov

Re: z_User_Notification (User defined recipient)

Reportid: 1822649501 To: security[at]chinanet.cn.net

Reportid: 1822649511 To: abuse[at]cnc-noc.net

Reportid: 1822649518 To: security[at]cnc-noc.net

Re: 87.101.65.80 (Third party interested in email source)

Reportid: 1822649487 To: spamcop[at]imaphost.com

Posted

I don't quite understand your problem. When I click on the link your provided, I see a section:

Well, its pretty simple, spamertized SITES are NOT getting reported. The source of the mail is, that is not a problem, but the real issues are the sites themselves. These hosting companies are at the core of spam issues in my opinion, they are the ones making the money and giving these spammer a place to do their dirty deeds..

If you look at the above link again you will see that spamcop and cannot resolve http]://adahfr.losscenter.info/?18199725

Here is the resolution as I have found it:

www.adahfr.losscenter.info

IP Address : 82.104.212.237

Location: Italy

WHOIS:

inetnum: 82.104.0.0 - 82.105.255.255

netname: TIWS-SMART-3

descr: Telecom Italia S.p.A.

descr: Neteconomy & Smart

descr: Services

country: IT

admin-c: BS104-RIPE

tech-c: BS104-RIPE

status: ASSIGNED PA

remarks: ************************************************

remarks: Pay attention

remarks: Any communication sent to email different

remarks: from the following will be ignored!

remarks: Any abuse reports, please send them to

remarks: *****[at]business.telecomitalia.it

remarks: ************************************************

notify: ******[at]telecomitalia.it

mnt-by: TIWS-MNT

changed: ******[at]telecomitalia.it 20050128

source: RIPE

person: BBBEASYIP STAFF

address:

address: Via Val Cannuta, 250

address: I-00100 Roma

address: Italy

phone: +39 06 36881

e-mail: **********[at]telecomitalia.it

nic-hdl: BS104-RIPE

notify: **********[at]telecomitalia.it

changed: ******[at]telecomitalia.it 20001019

source: RIPE

% Information related to '82.104.0.0/16AS3269'

route: 82.104.0.0/16

descr: INTERBUSINESS

origin: AS3269

notify: *******[at]cgi.interbusiness.it

mnt-by: TIWS-MNT

mnt-routes: INTERB-MNT

changed: ******[at]telecomitalia.it 20031023

source: RIPE

So, [http]://adahfr.losscenter.info/?18199725 is still in business and sending millions of pieces of junk mail to this minute because SPAMCOP does not parse these sites and allow us to report them. Over the last few days I have noticed that other hosting companies are jumping on the band wagon and more and more spam sites are falling into the "CANNOT RESOLVE" spamcop hole.

I am no expert here but if I can resolve it and report accordingly then spamcop should be able to also.

Oh, and BTW, this site was hosted by China 2 days ago.

Thanks,

82000 and counting

Posted

Well, its pretty simple, spamertized SITES are NOT getting reported.

...

I am no expert here but if I can resolve it and report accordingly then spamcop should be able to also.

OK, I wish you had stated that in the first place. I will agree that the sites are not being reported. I will disagree with you on the usefulness of spamvertized links, but that has been beaten to death in other threads.

Likely, the problem is poor DNS, as it usually is in these cases. The fact that your browser shows you the link is NOT proof that spamcop should be able to. When your browser is hitting 10-12 links per second, I will begin to agree with this. It is simply a case of tying up resources. If spamcop doubles the timeout on these lookups, it will find more links, but be able to process much fewer in the day.

Posted

DNS tricks, plain and simple. Not to mention, you can simply refresh the browser and the parser will catch the link.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...