Why differences in search results between spamcop parser, abuse.net and ripe.net ??

[ZapZombie 0]

Hi,

I noticed spamcop parser did not find contact address for 95.153.176.109, but using win32whois.exe I saw an address was found at abuse.net, and browsing to ripe.net and searching with B flag on I saw another address.

Why weren't they found by the parser, even after refreshing cache?

I thought the parser looks up at ripe.net with -B flag, and when necessary at abuse.net.

(I filled in the found contact addresses at the parse form)

Regards,

ZZ

[petzl 0]

Hi,

I noticed spamcop parser did not find contact address for 95.153.176.109, but using win32whois.exe I saw an address was found at abuse.net, and browsing to ripe.net and searching with B flag on I saw another address.

Why weren't they found by the parser, even after refreshing cache?

I thought the parser looks up at ripe.net with -B flag, and when necessary at abuse.net.

(I filled in the found contact addresses at the parse form)

Regards,

ZZ

SpamCop checks three Whois sources?

"Abuse net", as last resort give's "abuse [at] domain name" by default (may just bounce in which case SC won't use). At least this I believe the case?

A Windows program I use give a address (not abuse) as

"lir [ AT ] kuban.mts.ru"

Their Websites give a contact email "info [ AT ] kuban.mts.ru"

This "ISP" "kubangsm.ru" runs a very large host of botnets (I doubt if accidentally? and why they don't POSSIBLY want to be bothered)

Your Botnet

http://cbl.abuseat.org/lookup.cgi?ip=95.153.176.109

The great many other Botnet hosts in this "neighborhood" with spam reports

95.153.175.125 95.153.175.131 95.153.175.132 95.153.175.136 95.153.175.155 95.153.175.173 95.153.175.198 95.153.175.215 95.153.175.226 95.153.175.249 95.153.176.0 95.153.176.17 95.153.176.29 95.153.176.67 95.153.176.73 95.153.176.174 95.153.176.195 95.153.176.206 95.153.176.208 95.153.176.210 95.153.176.214 95.153.176.215 95.153.176.241 95.153.176.252 95.153.177.9 95.153.177.19 95.153.177.23 95.153.177.38 95.153.177.97

Edited April 25, 2013 by petzl