mrmaxx 0 Posted May 20, 2012 The "spamvertised website" is http://paul-eric.com/mine.html, which resolves to 176.9.192.1 (per SpamCop's parser.) However, SpamCop appears to be having issues getting information for RIPE reporting contacts. Traceroute shows that the upstream host for this is hertzner.de who *does* have a reporting address. abuse[at]hetzner.de. However, I have to wonder whether the spammer may have set up their own web host and are fronting for themselves. A Traceroute also shows (from multiple different locations) that the next hop up the ladder is Level3. I propose that we notify Level3 for this IP block (Class B, I believe: 176.9.0.0/16) instead of hertzner.de. Share this post Link to post Share on other sites
SpamCopAdmin 0 Posted May 20, 2012 Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net - Share this post Link to post Share on other sites
mrmaxx 0 Posted May 21, 2012 Fixed! Thanks! - Don D'Minion - SpamCop Admin - - service[at]admin.spamcop.net - Wow! Thank YOU, sir! Share this post Link to post Share on other sites