Jump to content

Why dev'null to a Rokso?


btech
 Share

Recommended Posts

For this report, I found that the spamvertized link was dev'null'd to an SBL number that's attached to a ROKSO file.

http://www.spamcop.net/sc?id=z1122108840zd...9acfeef7049117z

Parsing input: http://www.putinjerionkdsacein.com/

Routing details for 211.155.132.55

Report routing for 211.155.132.55: rokso_sbl40270[at]devnull.spamcop.net

But when I look up that SBL file, it shows that it's to a Chinese network:

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40270

So why aren't we sending reports to that network/host?

Pardon my naivity on this, I just wondered what the rationale was.

Link to comment
Share on other sites

I think Will has it right. Reports are both a courtesy on SpamCop's part and the opportunity for that network to close out the revealed spam activity. Where the network declines reports (for whatever reason) or where it is part of a known spam organization, dedicated to the activity, there is no point in reporting - SC would be spamming in the first case. The case in point is in the latter category and reporting instances of spam delivey (or providing any notification spam by spam) can only aid their "enterprise". I am very happy that SC elects not to do that.

Feeding the SCBL is the core function, reporting back to the offending network is a courtesy if it is both wanted and appropriate. IMO

Link to comment
Share on other sites

211.155.132.55

No valid email addresses found, sorry!

There are several possible reasons for this:

The site involved may not want reports from SpamCop.

SpamCop administrators may have decided to stop sending reports to the site to prevent listwashing.

SpamCop uses internal routing to contact this site, only knows about the internal method and so cannot provide an externally-valid email address.

There may be no working email address to receive reports.

How ever the report in this case is not simply bit binned

http://www.spamcop.net/sc?action=showroute...typecodes=21,16

SpamCop reports are often used to alert interested parties Who may well take a spammer to court

A test of mine through hotmail would not only get my ISP alerted in this case, Hotmail have requested a copy to be sent to them as well

http://www.spamcop.net:80/sc?id=z108796471...c974068e18a468z

Hotmail are another of many who do chase and take spammers to court as well as alert authorities

Edited by petzl
Link to comment
Share on other sites

211.155.132.55

No valid email addresses found, sorry!

You don't say / show how you got this result.

A test of mine through hotmail would not only get my ISP alerted in this case, Hotmail have requested a copy to be sent to them as well

http://www.spamcop.net:80/sc?id=z108796471...c974068e18a468z

Not sure what this 'test' was supposed to illustrate (in connection to the Topic / subject IP address) It's not the same IP address or block, actually .... at least not within the block Ellen defined ....

Link to comment
Share on other sites

You don't say / show how you got this result.
http://www.spamcop.net/sc?track=211.155.132.55

Not sure what this 'test' was supposed to illustrate (in connection to the Topic / subject IP address) It's not the same IP address or block, actually .... at least not within the block Ellen defined ....

Just pointing out that SpamCop often sends reports to interested parties

I were testing parsing of MY hotmail account and noted that aside from an abuse report being made for my ISP Hotmail also would of recieved a copy

[moderator edit - fixed the quotes (I think) - Farelf]

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...