Jump to content

ZapZombie

Members
  • Content Count

    62
  • Joined

  • Last visited

Everything posted by ZapZombie

  1. found admin[at]kerch.com.ua; kodis[at]kerch.com.ua at http://extsearch.ripe.net/fcgi-bin/whois?s...;filter_mail=ON
  2. found abuse[at]next-gen.ro at http://extsearch.ripe.net/fcgi-bin/whois?s...;filter_mail=ON
  3. Is my guess, because the recepient will then receive a link ment for the user who reported, where the spam can be marked as no spam?
  4. correction on ip# in topic title, must be "No reporting addresses found for 188.93.234.30" FIXED
  5. .. at http://www.spamcop.net/sc?action=showcmd;c...0whois.ripe.net Found mail[at]dotsi.pt with -B option at https://apps.db.ripe.net/search/query.html;...4#resultsAnchor
  6. spamcop.net/sc?action=showcmd;cmd=whois%20178.78.184.148%40whois.ripe.net found noc[at]orangearmenia.am for handle alex101 see http://forum.spamcop.net/forums/index.php?showtopic=12701 and http://forum.spamcop.net/forums/index.php?...amp;#entry82604
  7. I am afraid specifying <x> might identify my spammed emailaddress. Found info[at]naunet.ru and maybe (?) abuse[at]naunet.ru via http://www.ratite.com/whois/whois.cgi saverxwebsite.ru https://client.naunet.ru/c/whoiscontact presents a message form, but on the same page on the left/top, under an envelop icon is found info[at]naunet.ru SAVERXWEBSITE.RU is reported as malicious by antivirus software
  8. With domain name registration procedures of today at registrars, every spamreport costs the spamvertised website owners a registration fee of a few bucks. For about a small year I have seen in my inbox about 150 spamvertisements for the same betting company. On every link on their webpage I see a program.exe download. I bet a worm is included to harvest zombies for their spam, websitelocations and emailadress mining. At peak times they spamvertise about four new domain names per day for the same page. Today I phoned a registrar known for quality in my country and heard that it is possible to register a domain name with a fake name/address and that that procedure is an issue at an ICANN discussion in the Czech Republic, probably not coïncidentally the country where the registrar of the website is located. Boys and girls, the spam fight is getting boring for me today.
  9. Found noc[at]orangearmenia.am; alexandr.saroyan[at]orangearmenia.am; alexandr.saroyan[at]orange-ftgroup.am in lookup with -B flag at extsearch.ripe.net/fcgi-bin/whois?searchtext=178.78.128.172&filter_mail=ON
  10. noc[at]kmtn.ru & quicksour[at]gmail.com spamcop.net/sc?action=showcmd;cmd=whois%2046.228.105.253%40whois.ripe.net whois kn1067-ripe%40whois.ripe.net Found noc[at]kmtn.ru in lookup with -B flag at extsearch.ripe.net/fcgi-bin/whois?searchtext=46.228.105.253&filter_mail=ON Found quicksour[at]gmail.com in lookup with -B flag at extsearch.ripe.net/fcgi-bin/whois?searchtext=SOUR3-ripe&filter_mail=ON
  11. Found abuse[at]next-gen.ro in lookup with -B flag at http://extsearch.ripe.net/fcgi-bin/whois?f...;filter_mail=ON Ripe remarks to use the -B flag in the result of the lookup used by spamcop spamcop.net/sc?action=showcmd;cmd=whois%2094.52.193.88%40whois.ripe.net the cmd is missing "%20-B" after "whois"
  12. misho[at]balchik.net see http://www.spamcop.net/sc?action=showcmd;c...0whois.ripe.net -> https://apps.db.ripe.net/whois/lookup/ripe/...4DB28720E.apps3
  13. Use of the -B flag didn't produce an emailaddress in this case. I didn't know, that in the mean time lookups are added with the -B flag, but if they are, I cannot conclude that it doesn't work, rather the possibility of the contrary, because prior to this "no reporting addresses .." I have not read any failing lookups where I could find emailaddresses with the -B flag. I found this organization record including emailaddress for this person with google at ripe.
  14. Does the new mod use the -B flag? I expected this new mod using a whois lookup with the -B flag, but I get the impression it doesn't. Note the difference in the results of this "-B flag" in these urls http://extsearch.ripe.net/fcgi-bin/whois?f...t_template=none http://extsearch.ripe.net/fcgi-bin/whois?f...;filter_mail=ON (also posted in http://forum.spamcop.net/forums/index.php?showtopic=12611 ,where shirayuki reacted)
  15. http://extsearch.ripe.net/fcgi-bin/whois?f...;filter_mail=ON netadm[at]comcor.ru
  16. For the respective e-mailaddresses for the 2 contact handles for 84.54.199.219, sg2478-ripe & ai212-ripe, I read at http://apps.db.ripe.net/whois/lookup/ripe/...G2478-RIPE.html http://apps.db.ripe.net/whois/lookup/ripe/...AI212-RIPE.html serg[at]stv.ru & ai[at]stv.ru. I expected this new mod using a whois lookup with the -B flag, but I get the impression it doesn't. Note the difference in the results of this "-B flag" in these urls http://extsearch.ripe.net/fcgi-bin/whois?f...t_template=none http://extsearch.ripe.net/fcgi-bin/whois?f...;filter_mail=ON
  17. I could relate the news about the takedown to the last date I received spam. Just one link, that of CNN: http://money.cnn.com/2012/07/19/technology/grum-spam-botnet/ I am curious for how long my inbox will stay spamfree.
  18. when I repeat clicking on/ refresh http://www.spamcop.net/sc?track=http%3A%2F...etluxury.com%2F I hardly believed my eyes reading alternating results, one being SpamCop v 4.6.2.001 © 1992-2012 Cisco Systems, Inc. All rights reserved. Parsing input: http://www.asptopnetluxury.com/ Routing details for 78.80.111.20 [refresh/show] Cached whois for 78.80.111.20 : abuse[at]t-mobile.cz Using abuse net on abuse[at]t-mobile.cz abuse net t-mobile.cz = nic[at]t-mobile.cz, postmaster[at]t-mobile.cz Using best contacts nic[at]t-mobile.cz postmaster[at]t-mobile.cz Statistics: 78.80.111.20 not listed in bl.spamcop.net More Information.. 78.80.111.20 not listed in dnsbl.njabl.org ( 127.0.0.8 ) 78.80.111.20 not listed in dnsbl.njabl.org ( 127.0.0.9 ) 78.80.111.20 not listed in cbl.abuseat.org 78.80.111.20 not listed in dnsbl.sorbs.net Reporting addresses: nic[at]t-mobile.cz postmaster[at]t-mobile.cz another SpamCop v 4.6.2.001 © 1992-2012 Cisco Systems, Inc. All rights reserved. Parsing input: http://www.asptopnetluxury.com/ Display data: "whois 37.230.212.4[at]whois.arin.net" (Getting contact from whois.arin.net ) Redirect to ripe Display data: "whois 37.230.212.4[at]whois.ripe.net" (Getting contact from whois.ripe.net) Lookup of776-ripe[at]whois.ripe.net Display data: "whois of776-ripe[at]whois.ripe.net" (Getting contact from whois.ripe.net) of776-ripe = whois.ripe.net 37.230.212.4 (nothing found) No reporting addresses found for 37.230.212.4, using devnull for tracking. Statistics: 37.230.212.4 not listed in bl.spamcop.net More Information.. 37.230.212.4 not listed in dnsbl.njabl.org ( 127.0.0.8 ) 37.230.212.4 not listed in dnsbl.njabl.org ( 127.0.0.9 ) 37.230.212.4 not listed in cbl.abuseat.org 37.230.212.4 not listed in dnsbl.sorbs.net No valid email addresses found, sorry! There are several possible reasons for this: The site involved may not want reports from SpamCop. SpamCop administrators may have decided to stop sending reports to the site to prevent listwashing. SpamCop uses internal routeing to contact this site, only knows about the internal method and so cannot provide an externally-valid email address. There may be no working email address to receive reports. By the way, contact address for the latter ip 37.230.212.4 is info[at]leadertelecom.ru as I read in query using -B flag https://apps.db.ripe.net/search/query.html?...r#resultsAnchor
  19. "No reporting addresses found for" not yet reported source ip address for http://www.spamcop.net/sc?action=showcmd;c...0whois.ripe.net ses[at]mts.am did I see on http://bgp.he.net/dns/mts.am#_whois I could not add the address to my report: "Reports regarding this spam have already been sent". It was reported to reporting address for spamvertised website. Please notify me wether this message is of any use. PS address not found for other contact for the same source: http://www.spamcop.net/sc?action=showcmd;c...0whois.ripe.net at http://www.ripe.net/ripe/mail/archives/reg...ia/2011-May.txt I read etitova[at]mts.am
  20. After emailing with RIPE, see http://forum.spamcop.net/forums/index.php?...pid=81103 I wondered wether the "No reporting addresses found" error concerning IP# 37.230.212.3 would be solved by using the -B option instead of a refresh as I concluded in post # 5. I checked this subforum for clues and having read http://forum.spamcop.net/forums/index.php?showtopic=12479# I guessed that using the -B option will be one of the fixes in the new release. I will stop worrying and posting about "No reporting addresses found" until the next release.
  21. I just clicked this link again and I read other contacts are found as when I posted this.
  22. Update 2: the second answer from RIPE, by Henriette van Ingen -------- Originele bericht -------- Onderwerp: Re: NCC#x questions about report contacts without email address Datum: Fri, 15 Jun 2012 12:21:42 +0200 Van: RIPE Database Manager <ripe-dbm[at]ripe.net> Antwoord-naar: RIPE Database Manager <ripe-dbm[at]ripe.net> Aan: x Hello x, To start with, the person object DJ1955-RIPE contains an email address, but it is filtered. RIPE NCC filters personal data in the databse in order to prevent abuse of personal data. When using the -B flag in the database, it will show you the email address: https://apps.db.ripe.net/search/query.html?...=#resultsAnchor Please note that it is currently not mandatory to provide an email address in a person object, however, it is mandatory for an organisation object. All allocations (and therefore assignments) are linked to an organisation object and therefore an email address is always traceable. This is not the case for Independent Resources (PI address space and AS numbers) as they are not obliged to have an organisation object. There has been lively discussions about this subject on our anti-abuse working group mailing list. Especially about the correctness of the email address provided. Please have a look in the archives and you can sign up and read/join the discussion. -- If you have any questions, please feel free to contact us. Best regards, Henriette van Ingen ------------------ Customer Services RIPE NCC ============================================================ RIPE NCC Customer Satisfaction Survey ************************************* Tell us about your customer services experience by filling out the anonymous, three-question RIPE NCC customer satisfaction survey: https://www.ripe.net/contact/survey/satisfaction-cs/ ============================================================= On Wed, 13 Jun 2012 09:18:51 +0200, x wrote: > Hello RIPE worker, > > As a spamcop.net forum member I have some questions, for which I want to > share your answers with the other spamcop.net forum members. > Does RIPE permit registration of report contacts without email address? > What can I do to urge registration of such an emailaddress? > > In spamcop.net reports of processing my spamvertisement reports, I read > that in the RIPE information of several contacts to report to for a > spamvertised website there is no e-mailaddress. For instance in the data > for the person with nic-hdl DJ1955-RIPE to whom I want to report a > spamvertised betting website via spamcop.net. > > Regards, > x
  23. Is registering as a contact at RIPE without e-mailaddress allowed by RIPE? ??? For several months I am receiving lots of spam from one organization, that found their way to hosts without e-mailaddress registered at RIPE, for their spamvertized website. They keep on creating new urls and finding hosts. They even managed to get hold of three of my e-mail addresses. That baffles me.
  24. Update: Hereby the questions I posed to RIPE, as suggested by turetzsr [at] Jun 5 2012, 12:56 PM, and the first answer by RIPE. I have answered RIPE that my questions are not answered and I have reposed the questions. More later. On Wed, 13 Jun 2012 09:18:51 +0200, x wrote: > Hello RIPE worker, > > As a spamcop.net forum member I have some questions, for which I want to > share your answers with the other spamcop.net forum members. > Does RIPE permit registration of report contacts without email address? > What can I do to urge registration of such an emailaddress? > > In spamcop.net reports of processing my spamvertisement reports, I read > that in the RIPE information of several contacts to report to for a > spamvertised website there is no e-mailaddress. For instance in the data > for the person with nic-hdl DJ1955-RIPE to whom I want to report a > spamvertised betting website via spamcop.net. > > Regards, > x ============================================================= -------- Originele bericht -------- Onderwerp: Re: NCC#x questions about report contacts without email address Datum: Wed, 13 Jun 2012 14:13:10 +0200 Van: RIPE NCC <ncc[at]ripe.net> Antwoord-naar: RIPE NCC <ncc[at]ripe.net> Aan: x Dear Sir/Madam, thank you for your email. The RIPE NCC is an independent, not-for-profit membership organisation. We are one of the five Regional Internet Registries (RIRs) responsible for the allocation of blocks of IP address space to Local Internet Registries (LIRs), which are mostly Internet Service Providers. LIRs then assign addresses to End Users. The RIPE NCC is *NOT* a service provider and has no jurisdiction over, or responsibility for, how the allocated IP numbers are used. The RIPE NCC runs a publicly available database that allows users to look up the contact information for the organisations responsible for particular IP address space. https://apps.db.ripe.net/search/query.html You can see the information for nic-hdl DJ1955-RIPE in the database: https://apps.db.ripe.net/search/query.html?...=#resultsAnchor More information regarding network abuse is available on our website at: http://www.ripe.net/data-tools/db/faq/faq-hacking-spamming http://www.ripe.net/ripe/docs/ripe-409 http://www.ripe.net/lir-services/ncc/legal/legal-information -- If you have any questions, please feel free to contact us. Best regards, Anna Pronicheva ------------------ Customer Services RIPE NCC ============================================================ RIPE NCC Customer Satisfaction Survey ************************************* Tell us about your customer services experience by filling out the anonymous, three-question RIPE NCC customer satisfaction survey: https://www.ripe.net/contact/survey/satisfaction-cs/
×