Jump to content

Snowbat

Membera
  • Content Count

    158
  • Joined

  • Last visited

Everything posted by Snowbat

  1. http://www.spamcop.net/sc?action=rcache;ip=177.67.84.84 Using best contacts gmail-abuse[at]google.com Reports disabled for gmail-abuse[at]google.com but... whois.lacnic.net found abuse contacts for 177.67.84.84 = wixnet.isp[at]gmail.com whois: 177.67.84.0 - 177.67.85.255 = wixnet.isp[at]gmail.com
  2. http://www.spamcop.net/sc?track=1.176.60.152 "whois 1.176.60.152[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 1.176.60.152, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : YOUNGCHAN LEE Phone : +82-70-8130-2212 E-Mail : leo4u[at]cj.net
  3. Tracking link: http://bit.ly/yPTeov [report history] Resolves to 69.58.188.40 Routing details for 69.58.188.40 Using smaller IP block (/ 24 vs. / 20 ) Removing 1 larger (> / 24 ) route(s) from cache [refresh/show] Cached whois for 69.58.188.40 : hostmaster[at]bitly.com Using abuse net on hostmaster[at]bitly.com No abuse net record for bitly.com <------ Using default postmaster contacts postmaster[at]bitly.com postmaster[at]bitly.com bounces (7 sent : 6 bounces) Using postmaster#bitly.com[at]devnull.spamcop.net for statistical tracking. but... $ whois -h whois.abuse.net bit.ly abuse[at]ntt.net (for bit.ly) abuse[at]bit.ly (for bit.ly) $ whois -h whois.abuse.net bitly.com <------ abuse[at]bitly.com (default, no info)
  4. http://www.spamcop.net/sc?track=119.196.24.61 Display data: "whois 119.196.24.61[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 119.196.24.61, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-100-0000 E-Mail : abuse[at]kornet.net
  5. http://www.spamcop.net/sc?track=175.253.176.225 "whois 175.253.176.225[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 175.253.176.225, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-100-0000 E-Mail : abuse[at]kornet.net
  6. http://www.spamcop.net/sc?track=61.32.234.184 "whois 61.32.234.184[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 61.32.234.184, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-2089-0101 E-Mail : security[at]bora.net
  7. http://www.spamcop.net/sc?track=110.45.175.12 "whois 110.45.175.12[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 110.45.175.12, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-2086-2878 E-Mail : security[at]kidc.net
  8. http://www.spamcop.net/sc?action=rcache;ip=177.67.83.54 Using best contacts gmail-abuse[at]google.com Reports disabled for gmail-abuse[at]google.com but... whois.lacnic.net found abuse contacts for 177.67.83.54 = wixnet.isp[at]gmail.com whois: 177.67.80.0 - 177.67.83.255 = wixnet.isp[at]gmail.com
  9. http://www.spamcop.net/sc?track=175.201.105.75 "whois 175.201.105.75[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 175.201.105.75, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-100-0000 E-Mail : abuse[at]kornet.net
  10. http://www.spamcop.net/sc?track=182.213.207.96 "whois 182.213.207.96[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 182.213.207.96, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Security Phone : +82-2-2086-5935 E-Mail : security[at]powercomm.com
  11. http://www.spamcop.net/sc?track=218.148.44.25 "whois 218.148.44.25[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 218.148.44.25, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-100-0000 E-Mail : abuse[at]kornet.net
  12. http://www.spamcop.net/sc?track=211.172.221.140 "whois 211.172.221.140[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 211.172.221.140, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : NOC Phone : +82-70-7410-4742 E-Mail : noc[at]cnm.co.kr
  13. http://www.spamcop.net/sc?track=1.234.44.193 "whois 1.234.44.193[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 1.234.44.193, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : manager Phone : +82-2-106-2 E-Mail : abuse[at]skbroadband.com
  14. http://www.spamcop.net/sc?track=211.46.132.252 "whois 211.46.132.252[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 211.46.132.252, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : Pubnet Abuse Manger Phone : +82-2-3674-5890 E-Mail : domain[at]mail1.pubnet.ne.kr
  15. http://www.spamcop.net/sc?track=223.165.196.15 "whois 223.165.196.15[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found No reporting addresses found for 223.165.196.15, using devnull for tracking. but... http://www.spamcop.net/sc?action=refreshcm...whois.krnic.net [ Network Abuse Contact Information ] Name : JungHwan KIM Phone : +82-2-1544-4450 E-Mail : noc[at]hilineisp.net
  16. http://www.spamcop.net/sc?action=showroute...;typecodes=4,16 SBL12057 and SBL19215 no longer exist: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL12057 http://www.spamhaus.org/SBL/sbl.lasso?query=SBL19215 The record is 7 years old. Is it still valid?
  17. I sent a report to this address an hour ago and it has not bounced. Please reset the bounce counter.
  18. Did krnic change their whois output? SC can't parse it? #1 http://www.spamcop.net/sc?action=rcache;ip=106.10.65.89 Tracking details Display data: "whois 106.10.65.89[at]whois.arin.net" (Getting contact from whois.arin.net ) Redirect to apnic: "whois 106.10.65.89[at]whois.apnic.net" (Getting contact from whois.apnic.net mirror) Display data: whois.apnic.net redirects to krnic Display data: "whois 106.10.65.89[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found Routing details for 106.10.65.89 Using last resort contacts but... http://www.spamcop.net/sc?action=showcmd;c...whois.krnic.net [ Network Abuse Contact Information ] Name : park hyo jun Phone : +82-2-887-6112 E-Mail : help[at]lxn.co.kr #2 http://www.spamcop.net/sc?action=rcache;ip=61.80.185.85 Tracking details "whois 61.80.185.85[at]whois.apnic.net" (Getting contact from whois.apnic.net mirror) Display data: whois.apnic.net redirects to krnic Display data: "whois 61.80.185.85[at]whois.krnic.net" (Getting contact from whois.krnic.net) - not found Routing details for 61.80.185.85 Using last resort contacts but... http://www.spamcop.net/sc?action=showcmd;c...whois.krnic.net [ Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-100-0000 E-Mail : abuse[at]kornet.net
  19. Thanks. Their hat color has seemed a little dark lately. The address status is' bounces', not 'reports disabled', hence my post. http://www.spamcop.net/sc?track=www.softlayer.com abuse[at]softlayer.com bounces (99 sent : 99 bounces) Using abuse#softlayer.com[at]devnull.spamcop.net for statistical tracking. (compared to) http://www.spamcop.net/sc?track=www.burst.net Reports disabled for abuse[at]burst.net Using best contacts No reporting addresses found for 66.96.192.202, using devnull for tracking.
  20. Snowbat

    Redirect Joe-job?

    FWIW, to see what was happening at the abuse address, I sent a problem note and a link to this thread to abuse[at]cable.net.co. It seems their abuse address aliases to multiple recipient addresses, four of which are bouncing for over-quota. Their alias list might contain other addresses that are not bouncing.
  21. Reports for UOL have been disabled for quite some time. Anyone know the reason for this? Routing details for 187.61.30.181 [refresh/show] Cached whois for 187.61.30.181 : security[at]uol.com.br Reports disabled for abuse[at]uol.com.br Using best contacts
  22. It's not just you. I'm seeing that a lot in the past couple of hours.
  23. The Q1 2010 Sophos Dirty Dozen list weighted for estimated internet users per country looks like this: Country % spam % ww users Ratio Romania 2.50% 0.39% 6.46 : 1 Vietnam 3.40% 1.22% 2.79 : 1 S Korea 4.80% 2.02% 2.38 : 1 Poland 2.40% 1.14% 2.11 : 1 Italy 3.10% 1.52% 2.03 : 1 India 7.30% 4.12% 1.77 : 1 Brazil 6.80% 3.88% 1.75 : 1 France 3.00% 2.27% 1.32 : 1 UK 3.10% 2.61% 1.19 : 1 USA 13.10% 12.16% 1.08 : 1 Russia 3.10% 3.05% 1.02 : 1 Germany 3.20% 3.32% 0.97 : 1
  24. http://www.spamcop.net/sc?id=z4211710138z5...5c53e2c692ba50z Tracking message source: 62.94.218.81: Display data: "whois 62.94.218.81[at]whois.ripe.net" (Getting contact from whois.ripe.net) Lookup dsva1-ripe[at]whois.ripe.net Display data: "whois dsva1-ripe[at]whois.ripe.net" (Getting contact from whois.ripe.net) dsva1-ripe = whois.ripe.net 62.94.218.81 (nothing found) No reporting addresses found for 62.94.218.81, using devnull for tracking. $ whois -h whois.ripe.net -B 62.94.218.81 % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Information related to '62.94.218.80 - 62.94.218.87' inetnum: 62.94.218.80 - 62.94.218.87 netname: DBNETSRL-VIAASERRANTI descr: DBNET SRL - VIA A. SERRANTI country: IT admin-c: DSVA1-RIPE tech-c: DSVA1-RIPE status: ASSIGNED PA mnt-by: EUTELIA-MNT changed: ipadmin[at]eutelia.it 20090902 source: RIPE person: DBNET SRL - VIA A SERRANTI address: VIA A. SERRANTI , 12 address: I-00040 MONTECOMPATRI phone: +39 0694788002 nic-hdl: DSVA1-RIPE changed: ipadmin[at]eutelia.it 20090902 source: RIPE % Information related to '62.94.0.0/16AS15589' route: 62.94.0.0/16 descr: EUTELIA origin: AS15589 mnt-by: EDISONTEL-MNT notify: ipadmin[at]eutelia.it changed: ipadmin[at]ipng.it 20000810 changed: ipadmin[at]eutelia.it 20040423 source: RIPE % Information related to '62.94.192.0/19AS15589' route: 62.94.192.0/19 descr: EUTELIA origin: AS15589 remarks: Rome Core #2 notify: ipadmin[at]eutelia.it mnt-by: EDISONTEL-MNT changed: ipadmin[at]edisontel.it 20021211 changed: ipadmin[at]eutelia.it 20040423 source: RIPE
  25. There was a proposal in 2006 to add the following to a RIPE policy document: It was withdrawn as not enough consensus was reached. Also some discussion in 2008 but no action.
×