Jump to content
Sign in to follow this  
ZapZombie

Why differences in search results between spamcop parser, abuse.net and ripe.net ??

Recommended Posts

Hi,

I noticed spamcop parser did not find contact address for 95.153.176.109, but using win32whois.exe I saw an address was found at abuse.net, and browsing to ripe.net and searching with B flag on I saw another address.

Why weren't they found by the parser, even after refreshing cache?

I thought the parser looks up at ripe.net with -B flag, and when necessary at abuse.net.

(I filled in the found contact addresses at the parse form)

Regards,

ZZ

Share this post


Link to post
Share on other sites

Hi,

I noticed spamcop parser did not find contact address for 95.153.176.109, but using win32whois.exe I saw an address was found at abuse.net, and browsing to ripe.net and searching with B flag on I saw another address.

Why weren't they found by the parser, even after refreshing cache?

I thought the parser looks up at ripe.net with -B flag, and when necessary at abuse.net.

(I filled in the found contact addresses at the parse form)

Regards,

ZZ

SpamCop checks three Whois sources?

"Abuse net", as last resort give's "abuse [at] domain name" by default (may just bounce in which case SC won't use). At least this I believe the case?

A Windows program I use give a address (not abuse) as

"lir [ AT ] kuban.mts.ru"

Their Websites give a contact email "info [ AT ] kuban.mts.ru"

This "ISP" "kubangsm.ru" runs a very large host of botnets (I doubt if accidentally? and why they don't POSSIBLY want to be bothered)

Your Botnet

http://cbl.abuseat.org/lookup.cgi?ip=95.153.176.109

The great many other Botnet hosts in this "neighborhood" with spam reports

95.153.175.125 95.153.175.131 95.153.175.132 95.153.175.136 95.153.175.155 95.153.175.173 95.153.175.198 95.153.175.215 95.153.175.226 95.153.175.249 95.153.176.0 95.153.176.17 95.153.176.29 95.153.176.67 95.153.176.73 95.153.176.174 95.153.176.195 95.153.176.206 95.153.176.208 95.153.176.210 95.153.176.214 95.153.176.215 95.153.176.241 95.153.176.252 95.153.177.9 95.153.177.19 95.153.177.23 95.153.177.38 95.153.177.97

Edited by petzl

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×