Jump to content


  • Content Count

  • Joined

  • Last visited

Everything posted by mrmaxx

  1. Tracking URL: http://www.spamcop.net/sc?id=z5638629679z1...3a6b5ebb3a0284z is registered to LG Telecom according to WHOIS.KISA.OR.KR. The only registered contact is: scipione[at]lguplus.co.kr
  2. Tracking link: http://www.spamcop.net/sc?id=z5638629680z1...f9cdf4b952277dz is regisitered to SKBROADBAND.COM. Their abuse address is abuse[at]skbroadband.com. Alternate email would be ip-adm[at]skbroadband.com. Of course, SpamCop has other email addresses when I plug in skbroadband.com, so you may want to add those.
  3. tracking URL:http://www.spamcop.net/sc?id=z5640088724z7bd2d16a21c29f6a717bc7a16782ed90z Per RIPE, netblock belongs to 2day telecom (2day.kz.) The appropriate reporting addresses (per SpamCop) are as follows: abuse[at]gldn.net admin[at]2day.kz root[at]ns.2day.kz abuse[at]synterra.ru admin[at]tnsplus.kz
  4. Since postmaster bounces and abuse is disabled, how about "noc[at]eunetworks.com"??? Ripe lists that as the proper abuse address for Tracking URL: http://www.spamcop.net/sc?id=z5646139129zd...54b3fb91b16364z
  5. tracking url: http://www.spamcop.net/sc?id=z5646139129zd...54b3fb91b16364z spamvertised URL resolves to IP spam complaints for IP Block should go to ip-box[at]ripn.net according to RIPE.
  6. Tracking URL: http://www.spamcop.net/sc?id=z5637057702z3...31b2b7ed2ad7bfz Per whois.ripe.net, the abuse contact for fbs.com.tr is "network[at]fbs.com.tr" for
  7. Tracking URL: http://www.spamcop.net/sc?id=z5637095905z4...7f108c9e68645cz Per whois.kisa.or.kr, the ONLY contact address for this is scipione[at]lguplus.co.kr
  8. Tracking URL: http://www.spamcop.net/sc?id=z5639218230za...a71aee5cf42b42z Per RIPE, the ONLY contact is "ops[at]schedom.be" IP range is
  9. Tracking URL: http://www.spamcop.net/sc?id=z5639218238za...2bfc305f49f6e6z Per NIC.AD.JP, this IP is registered to paperboy.co.jp. The abuse contacts for that domain are abuse[at]sakura.ad.jp and support[at]sakura.ad.jp. This is for net block Sakura owns the larger netblock
  10. Tracking URL: http://www.spamcop.net/sc?id=z5640088721z4...4edefa748ca0baz Per Ripe, the abuse contact is lir[at]metanet.ch. When I put "metanet.ch" in the SpamCop submission form it comes up with a different contact, mirco[at]metanet.ch. Not sure which is correct, so I'm going to use both. Abuse.net has a third option, abuse[at]metanet.ch, so I guess I"ll try all three.
  11. Looks like xserver may be a co-lo customer or something. Per JPNic a slightly less specific contact would be sakura.ne.jp, and the abuse contacts would be jpnic-staff[at]sakura.ad.jp, north-nic[at]sakura.ad.jp, suga-nic[at]sakura.ad.jp, and from abuse.net: abuse[at]sakura.ne.jp (for sakura.ne.jp) info[at]sakura.ad.jp (for sakura.ne.jp) info[at]sakura.ad.jp (for sakura.ne.jp) support[at]sakura.ad.jp (for sakura.ne.jp) abuse[at]ntt.net (for sakura.ne.jp)
  12. tracking URL: http://www.spamcop.net/sc?id=z5640197545za...70f0336a482788z Netblock is registered to trestel.sk. Abuse contact (per RIPE) is support[at]trestel.sk
  13. Tracking URL: http://www.spamcop.net/sc?id=z5644068006z1...0b64c8ce2f3d0cz Netblock belongs to LGUPLUS.CO.KR. Per SpamCop, spam complaints for LGUPLUS.CO.KR should be sent to: abuse[at]bora.net spamcop[at]kisa.or.kr postmaster[at]bora.net spamrelay[at]certcc.or.kr (updated to show entire net block, not just one IP)
  14. mrmaxx


    I believe that is correct -- HE.NET won't accept a user-copied report, however, SpamCop can redirect reports to them, or you can send a manual complaint to them.
  15. Tracking URL: http://www.spamcop.net/sc?id=z5639548977z4...08eb53d17cda33z Suggest abuse[at]hostwinds.com as they are the direct uplink for HDSC.
  16. Tracking URL: http://www.spamcop.net/sc?id=z5638870492z8...953c53d990f740z Message source: is registered to SO-NET.CO.JP. Per abuse.net, the abuse contact is abuse[at]so-net.ne.jp. Alternate contacts might include: nic-info[at]so-net.ne.jp (Tech contact) or Masaro.Kikuchi[at]so-net.co.jp (Admin contact and Exec VP)
  17. Tracking URL: http://www.spamcop.net/sc?id=z5637198296z2...abda664d0673f4z Since abuse[at]euroweb.com bounces, I looked up the IP on RIPE. Some alternate email addresses are as follows: noc[at]euro-web.com, david[at]euro-web.fr, david.chanial[at]euro-web.com. david[at]euro-web.fr is the "maintainer" contact and david.chanial[at]euroweb.com is the "changed" contact. I suspect david[at] and david.chanial[at] are just aliases for each other, but it's worth a shot.
  18. Tracking URL: http://www.spamcop.net/sc?id=z5636887011ze...2485fee791ee1dz Since SpamCop isn't able to find a working email address for reporting, I went to the HostPapasupport.com website and got into chat with one of their agents. I explained I wanted to report some UCE from one of their customers and asked for the proper reporting address. I was told "info[at]hostpapasupport.com" is the correct email address to send spam complaints. This is for block -
  19. OK, this is interesting... looks like someone got their act together. abuse[at]nforce.com is now being used by SpamCop.
  20. Tracking URL: http://www.spamcop.net/sc?id=z5636851398z9...7280b5fa81fb59z Apparently abuse[at]nforce.com and postmaster[at]nforce.com are not working mailboxes as they are bouncing SpamCop reports. Looking up on RIPE, some other email addresses show up for the tech and admin contacts: noc[at]nforce.com (tech contact) p.taks[at]nforce.com (Admin contact) j.huybrechts[at]nforce.com (Admin contact)
  21. Currently a traceroute from Canada and HongKong goes through Hostwinds.com. I'm going to LART them to see if they will do anything.
  22. Tracking URL: http://www.spamcop.net/sc?id=z5637057696zf...cf560a28050598z Since reports are disabled for GPT.RU, I went and searched abuse.net for any other contacts. Abuse.net lists another contact, abuse[at]sweb.ru. This is for IP block
  23. Tracking URL: http://www.spamcop.net/sc?id=z5637057694ze...4120aced13156az Since reports to GigaIPNet are disabled, I traced from two different locations (Canada and Hong Kong) to get diverse routes. The last hop on both was, which is "reliablehostingservices.net." When I query abuse.net for reliablehostingservices.net, I get greg[at]rhservices.us, but when I plug that IP for the last hop into SpamCop I get postmaster[at]crcable.com. So, I am reporting this UCE to both of those asking them to tell GigaIPNet to clean up their act. I leave it up to someone with more knowledge than I to decide whether to report to both addresses or just one.