IIRC, ARF was extended to swallow "MARF" which would allow things as stated, but am not sure at the moment.
https://en.wikipedia.org/wiki/Abuse_Reporting_Format Aloha, Michael. -- Michael J Wise Microsoft Corporation| Spam Analysis "Your Spam Specimen Has Been Processed." Open a ticket for Hotmail<http://go.microsoft.com/fwlink/?LinkID=614866> ? -----Original Message----- From: mailop <mailop-boun...@mailop.org> On Behalf Of Alessandro Vesely via mailop Sent: Thursday, October 3, 2019 12:34 AM To: mailop@mailop.org Subject: Re: [mailop] Another example of why infosec people give up on reporting.. On Wed 02/Oct/2019 21:37:31 +0200 Michael Wise via mailop wrote: > > If it's in ARF format, set up an account and report it thru SpamCop would be > my suggestion.... Interesting. > And if it's not in ARF format ... fix that first. I report abuses other than spam, typically repeated login failures. There is not much data for such reports, just time, IP, type. Yet, they look very botnet. Fail2ban does similar stuff, but perhaps they use abusix rather than rdap. Best Ale -- _______________________________________________ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C90651fe53d2e4e57163708d747d4977d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637056850712739980&sdata=UHm9LbQF%2B0LiAuJ5eakF7E%2FMErjCnH9PE%2FXvV40ZXsY%3D&reserved=0
<<attachment: winmail.dat>>
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
