Jump to content

Snowbat

Membera
  • Content Count

    158
  • Joined

  • Last visited

Everything posted by Snowbat

  1. Another one: http://www.spamcop.net/sc?id=z5480868139z9...a9dc9341a394e3z
  2. Hotmail is already on my Mailhosts. I don't think I've seen this particular error before. I have not seen it since.
  3. I'm in the same boat as dolorite. When I started reporting today (after a break of about two days), I got Sorry, your account has been disabled. Sorry, your account has been disabled. Please check your email for an explanation or contact SpamCop service. There was no email from SpamCop. I've just checked again (to verify my email address is working) and now there *is* an email from SpamCop (it was sent in the last 20 minutes): I have not submitted more spams than normal.
  4. Is there some reason Don is fixing routing/address issues here but hasn't posted anything in Routing / Report Address Issues forum since Jul 22?
  5. http://www.spamcop.net/sc?track=186.4.53.95 abuse[at]amnet.co.cr bounces (99 sent : 99 bounces) Using best contacts No reporting addresses found for 186.4.53.95, using devnull for tracking. $ whois -h whois.abuse.net amnet.co.cr abuse-ni[at]amnetcorp.com (for amnet.co.cr)
  6. http://www.spamcop.net/sc?track=168.126.52.21 Cached whois for 168.126.52.21 : search-apnic-not-arin[at]apnic.net I refuse to bother search-apnic-not-arin[at]apnic.net. Using search-apnic-not-arin#apnic.net[at]devnull.spamcop.net for statistical tracking. Using last resort contacts search-apnic-not-arin#apnic.net[at]devnull.spamcop.net $ whois -h whois.nic.or.kr 168.126.52.21 [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-100-0000 E-Mail : abuse[at]kornet.net
  7. http://www.spamcop.net/sc?track=218.36.58.10 "whois 218.36.58.10[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 218.36.58.10, using devnull for tracking. http://www.spamcop.net/sc?action=showcmd;c...whois.krnic.net [ Network Abuse Contact Information ] Name : JungHwan KIM Phone : +82-2-1544-4450 E-Mail : noc[at]hilineisp.net
  8. http://www.spamcop.net/sc?track=202.136.112.1 Display data: "whois 202.136.112.1[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 202.136.112.1, using devnull for tracking. http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : OP Phone : +82-2-2273-0001 E-Mail : op[at]inettech.co.kr
  9. http://www.spamcop.net/sc?track=202.126.28.215 Parsing input: 202.126.28.215 No recent reports, no history available Routing details for 202.126.28.215 [refresh/show] Cached whois for 202.126.28.215 : hostmaster[at]nic.ad.jp I refuse to bother hostmaster[at]nic.ad.jp. Using hostmaster#nic.ad.jp[at]devnull.spamcop.net for statistical tracking. Using last resort contacts hostmaster#nic.ad.jp[at]devnull.spamcop.net SpamCop whois mirror has email addresses partially obscured with xxx? http://www.spamcop.net/sc?action=showwhois...=202.126.28.215 inetnum: 202.126.24.0 - 202.126.31.255 netname: Kvision descr: Kvision Co.,Ltd. 2-8-8 Mizuho-cho, Kudamatsu-shi, Yamaguchi 744-0075,Japan country: JP admin-c: JNIC1-AP tech-c: JNIC1-AP status: ALLOCATED PORTABLE remarks: Email address for spam or abuse complaints remarks: knxx[at]kvxxxxxxxxxxx mnt-by: MAINT-JPNIC mnt-lower: MAINT-JPNIC changed: hmxxxxxxxx[at]apxxxxxxx 20060906 Whois from here currently looks like this; $ whois 202.126.28.215 % [whois.apnic.net node-5] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 202.126.24.0 - 202.126.31.255 netname: Kvision descr: Kvision Co.,Ltd. 2-8-8 Mizuho-cho, Kudamatsu-shi, Yamaguchi 744-0075,Japan country: JP admin-c: JNIC1-AP tech-c: JNIC1-AP status: ALLOCATED PORTABLE remarks: Email address for spam or abuse complaints remarks: knet[at]kvision.ne.jp (snip)
  10. http://www.spamcop.net/sc?track=183.90.128.34 "whois 183.90.128.34[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 183.90.128.34, using devnull for tracking. http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Seong han cheol Phone : +82-70-8145-6300 E-Mail : dnffk37[at]naver.com
  11. http://www.spamcop.net/sc?track=211.254.15.87 "whois 211.254.15.87[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 211.254.15.87, using devnull for tracking. http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : JungHwan KIM Phone : +82-2-1544-4450 E-Mail : noc[at]hilineisp.net
  12. http://www.spamcop.net/sc?track=211.41.182.170 "whois 211.41.182.170[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 211.41.182.170, using devnull for tracking. http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : JungHwan KIM Phone : +82-2-1544-4450 E-Mail : noc[at]hilineisp.net
  13. http://www.spamcop.net/sc?track=180.182.198.238 "whois 180.182.198.238[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 180.182.198.238, using devnull for tracking. http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : YOUNGCHAN LEE Phone : +82-70-8130-2212 E-Mail : leo4u[at]cj.net
  14. Snowbat

    Reporting problems today?

    The information was posted in NANAE some days ago. I was going to mention it here but I didn't know if further discussion would be appropriate. Given the situation, I would assume the attacker(s) already have a large number of accounts. I'd also assume that they have been registering them for some time, perhaps even using them so that they are difficult to differentiate from legit accounts (maybe includes hijacked accounts of real users).
  15. http://www.spamcop.net/sc?track=119.226.28.206 [refresh/show] Cached whois for 119.226.28.206 : ipadmin[at]sifycorp.com abuse[at]sify.com bounces (99 sent : 99 bounces) Using best contacts No reporting addresses found for 119.226.28.206, using devnull for tracking. but... $ whois -h whois.abuse.net sifycorp.com customercare[at]sify.com (for sifycorp.com) abuse[at]satyam.net.in (for sifycorp.com) customercare[at]satyam.net.in (for sifycorp.com)
  16. http://www.spamcop.net/sc?track=110.70.22.119 "whois 110.70.22.119[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 110.70.22.119, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Song Dong-Myon Phone : +82-2-2010-9465 E-Mail : sdms[at]ktf.com
  17. http://www.spamcop.net/sc?track=186.232.218.193 [refresh/show] Cached whois for 186.232.218.193 : j.barbosasilva.net[at]gmail.com Using abuse net on j.barbosasilva.net[at]gmail.com abuse net gmail.com = gmail-abuse[at]google.com Using best contacts gmail-abuse[at]google.com Reports disabled for gmail-abuse[at]google.com Using gmail-abuse#google.com[at]devnull.spamcop.net for statistical tracking. but... http://www.spamcop.net/sc?action=rcache;ip=186.232.218.193 whois.lacnic.net found abuse contacts for 186.232.218.193 = j.barbosasilva.net[at]gmail.com
  18. http://www.spamcop.net/sc?track=94.124.93.162 whois.ripe.net 94.124.93.162 (nothing found) No reporting addresses found for 94.124.93.162, using devnull for tracking. $ whois -h whois.ripe.net -B 94.124.93.162 .. route: 94.124.88.0/21 descr: CJ2 Hosting origin: AS39704 mnt-by: MNT-CJ2 changed: noc[at]cj2.nl 20080807 source: RIPE $ whois -h whois.abuse.net cj2.nl noc[at]cj2.nl (for cj2.nl) abuse[at]cj2.nl (for cj2.nl)
  19. Also for inetnum: 37.236.0.0 - 37.237.255.255 netname: BROADBAND-SUBSCRIBERS-POOL descr: EarthLink Ltd. Communications&Internet Services-Orange country: IQ whois.ripe.net 37.236.191.143 (nothing found) No reporting addresses found for 37.236.191.143, using devnull for tracking.
  20. http://www.spamcop.net/sc?track=37.238.51.62 whois.ripe.net 37.238.51.62 (nothing found) No reporting addresses found for 37.238.51.62, using devnull for tracking. inetnum: 37.238.0.0 - 37.238.255.255 netname: BROADBAND-SUBSCRIBERS-POOL descr: EarthLink Ltd. Communications&Internet Services country: IQ Querying RIPE with -B shows that this is earthlinktele.com $ whois -h whois.abuse.net earthlinktele.com contact.us[at]earthlinktele.com (for earthlinktele.com) abuse[at]1and1.com (for earthlinktele.com)
  21. http://www.spamcop.net/sc?track=213.206.63.101 whois.ripe.net 213.206.63.101 (nothing found) No reporting addresses found for 213.206.63.101, using devnull for tracking. inetnum: 213.206.32.0 - 213.206.63.255 descr: BUZTON J.V. org: ORG-BJ1-RIPE netname: UZ-BUZTON-20030326 country: UZ $ whois -h whois.abuse.net buzton.com abuse[at]buzton.com (for buzton.com) abuse[at]intal.uz (for buzton.com) support[at]buzton.uz (for buzton.com) abuse[at]buzton.uz (for buzton.com) tech[at]intal.uz (for buzton.com)
  22. http://www.spamcop.net/sc?track=93.84.113.82 whois.ripe.net 93.84.113.82 (nothing found) No reporting addresses found for 93.84.113.82, using devnull for tracking. inetnum: 93.84.112.0 - 93.84.119.255 netname: BELTELECOM-DATACENTER descr: MCC & REGIONAL DCs country: BY $ whois -h whois.abuse.net mck.beltelecom.by abuse[at]beltelecom.by (for beltelecom.by) abuse[at]belpak.minsk.by (for beltelecom.by)
  23. http://www.spamcop.net/sc?track=178.123.93.216 whois.ripe.net 178.123.93.216 (nothing found) No reporting addresses found for 178.123.93.216, using devnull for tracking. inetnum: 178.123.0.0 - 178.123.255.255 netname: BYFLY descr: RUE BELTELECOM descr: GOMEL branch descr: BYFLY dynamic pools descr: Republic of Belarus country: BY $ whois -h whois.abuse.net gomel.beltelecom.by abuse[at]beltelecom.by (for beltelecom.by) abuse[at]belpak.minsk.by (for beltelecom.by)
  24. http://www.spamcop.net/sc?track=46.239.227.166 whois.ripe.net 46.239.227.166 (nothing found) No reporting addresses found for 46.239.227.166, using devnull for tracking. inetnum: 46.239.224.0 - 46.239.255.255 netname: IS-IPF descr: ADSL users country: IS $ whois -h whois.abuse.net ipf.is noc[at]ipf.is (for ipf.is) abuse[at]tal.is (for ipf.is) abuse[at]ogvodafone.is (for ipf.is) abuse[at]ipf.is (for ipf.is) noc[at]iphive.is (for ipf.is)
  25. http://www.spamcop.net/sc?track=1.217.23.130 Display data: "whois 1.217.23.130[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 1.217.23.130, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-2089-0101 E-Mail : security[at]bora.net
×