btech Posted October 31, 2006 Share Posted October 31, 2006 For this report, I found that the spamvertized link was dev'null'd to an SBL number that's attached to a ROKSO file. http://www.spamcop.net/sc?id=z1122108840zd...9acfeef7049117z Parsing input: http://www.putinjerionkdsacein.com/ Routing details for 211.155.132.55 Report routing for 211.155.132.55: rokso_sbl40270[at]devnull.spamcop.net But when I look up that SBL file, it shows that it's to a Chinese network: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40270 So why aren't we sending reports to that network/host? Pardon my naivity on this, I just wondered what the rationale was. Link to comment Share on other sites More sharing options...
Telarin Posted October 31, 2006 Share Posted October 31, 2006 Don't know, that question would almost have to go to the deputies. Maybe it is a confirmed black-hat ISP, so they have determined that there is no point in sending them to the host? Link to comment Share on other sites More sharing options...
Farelf Posted October 31, 2006 Share Posted October 31, 2006 I think Will has it right. Reports are both a courtesy on SpamCop's part and the opportunity for that network to close out the revealed spam activity. Where the network declines reports (for whatever reason) or where it is part of a known spam organization, dedicated to the activity, there is no point in reporting - SC would be spamming in the first case. The case in point is in the latter category and reporting instances of spam delivey (or providing any notification spam by spam) can only aid their "enterprise". I am very happy that SC elects not to do that. Feeding the SCBL is the core function, reporting back to the offending network is a courtesy if it is both wanted and appropriate. IMO Link to comment Share on other sites More sharing options...
petzl Posted November 1, 2006 Share Posted November 1, 2006 211.155.132.55 No valid email addresses found, sorry! There are several possible reasons for this: The site involved may not want reports from SpamCop. SpamCop administrators may have decided to stop sending reports to the site to prevent listwashing. SpamCop uses internal routing to contact this site, only knows about the internal method and so cannot provide an externally-valid email address. There may be no working email address to receive reports. How ever the report in this case is not simply bit binned http://www.spamcop.net/sc?action=showroute...typecodes=21,16 SpamCop reports are often used to alert interested parties Who may well take a spammer to court A test of mine through hotmail would not only get my ISP alerted in this case, Hotmail have requested a copy to be sent to them as well http://www.spamcop.net:80/sc?id=z108796471...c974068e18a468z Hotmail are another of many who do chase and take spammers to court as well as alert authorities Link to comment Share on other sites More sharing options...
Wazoo Posted November 1, 2006 Share Posted November 1, 2006 211.155.132.55 No valid email addresses found, sorry! You don't say / show how you got this result. A test of mine through hotmail would not only get my ISP alerted in this case, Hotmail have requested a copy to be sent to them as well http://www.spamcop.net:80/sc?id=z108796471...c974068e18a468z Not sure what this 'test' was supposed to illustrate (in connection to the Topic / subject IP address) It's not the same IP address or block, actually .... at least not within the block Ellen defined .... Link to comment Share on other sites More sharing options...
petzl Posted November 1, 2006 Share Posted November 1, 2006 You don't say / show how you got this result. http://www.spamcop.net/sc?track=211.155.132.55 Not sure what this 'test' was supposed to illustrate (in connection to the Topic / subject IP address) It's not the same IP address or block, actually .... at least not within the block Ellen defined .... Just pointing out that SpamCop often sends reports to interested parties I were testing parsing of MY hotmail account and noted that aside from an abuse report being made for my ISP Hotmail also would of recieved a copy [moderator edit - fixed the quotes (I think) - Farelf] Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.