Am 04.12.25 um 06:21 schrieb Lennart Mühlenmeier - GFF via mailop:
Received: from jupiter.ileysinc.com (jupiter.ileysinc.com [209.133.220.9])
by mail.freiheitsrechte.org (Postfix) with ESMTPS id 205F42395EEA
for<[email protected]>; Wed, 19 Nov 2025 09:44:32 +0100 (CET)
[…]
X-AntiAbuse: This header was added to track abuse, please include it with any
abuse report
X-AntiAbuse: Primary Hostname - jupiter.ileysinc.com
X-AntiAbuse: Original Domain - freiheitsrechte.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - freiheitsrechte.org
X-Get-Message-Sender-Via: jupiter.ileysinc.com:
authenticated_id:[email protected]
X-Authenticated-Sender: jupiter.ileysinc.com:[email protected]
As you may see, this actor also spoofed the sender, showing as it must
have come from our own mail server. We do not check DKIM strictly…
The sender is apparently a compromised mailbox ([email protected]) which is used to send via ileysync.com, using a
spoofed sender address (whether that signifies the SMTP envelope sender or the From: header address is not really clear
to me from those headers).
On 2025-12-02 I sent an abuse complaint [email protected],
including context about the abuse, and even attaching the mail including
its headers.
On 2025-12-03 I recieved the following reply:
Hi, we have determined that this abuse case regarding IP 209.133.220.9
is not valid. Please refrain from making illegitimate reports to our
abuse team, thank you. This is an automated message, please do not reply
to this email.
I guess they just do not care. I never heard of that AS before. My
questions for this mailing list are:
1. Are they known for being oblivious?
2. Could there be any other reason for such a reply?
Sadly, abuse desks ignoring or misunderstanding abuse reports is the norm, not the exception. I have mostly given up on
expecting useful responses to abuse reports, with very few exceptions. Depending on the amount of spam received from
related IPs I tend to block either significant IP ranges or the whole ASN when there is clearly no intention of handling
abuse reports responsibly. Affected legitimate senders can be whitelisted upon request.
Cheers,
Hans-Martin
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
