[SpamCop-List] Re: Deputies: Spamers APPEAR to be sending email to /through spamcop

[Jyri Korhonen]

"Dan French" <bomarc_com at spam.hotmail.nospam.com.use.spamcop.net> wrote:

> It appears that spammers are using the "reply" email -- sending it
> to spamcop, to send spam.  This spam *DID* come from ironport.com!

I got nine of those. SpamCop recognized only one report number:

1258419558 ( 82.48.112.106 ) To: abuse at nic.it

The rest gave "Cannot find spam for reportid XXXXXXX", but I'm
pretty sure that they went to the same address.

39362582
180663861
430310773
430651902
548527951
709944077
889561256
1051674218

I quick reported all nine and I'm now waiting to see how
well the parser can dig the injecting IPs from rather long
headers......the Quick reporting data just arrived and it
seems that the parser had no problems. Here's one of the
tracking URLs:

http://www.spamcop.net/sc?id=z702055472z0f0ae4663b626d4cab01d621b56a545fz

Hmm. It sent a report to "badreports". I wonder why, because
there shouldn't be anything "bad" with this report.