Jump to content
Sign in to follow this  
mrmaxx

No reporting addresses found for 91.204.162.129

Recommended Posts

Tracking URL: http://www.spamcop.net/sc?id=z5711879852z5...add1d86052829cz

Per RIPE, this is registered to ATMAN.PL. They have no contact information, however abuse.net recommends abuse[at]atman.pl and noc[at]atm.com.pl.

Netblock: 91.240.160.0-91.240.163.255

Edited by mrmaxx

Share this post


Link to post
Share on other sites

Tracking URL: http://www.spamcop.net/sc?id=z5711879852z5...add1d86052829cz

Per RIPE, this is registered to ATMAN.PL. They have no contact information, however abuse.net recommends abuse[at]atman.pl and noc[at]atm.com.pl.

Netblock: 91.240.160.0-91.240.163.255

That track correct?

Abuse net will by default use abuse[at]domian by default even if it bounces

91.240.160.0-91.240.163.255 is Germany not Poland?

Share this post


Link to post
Share on other sites

That track correct?

Abuse net will by default use abuse[at]domian by default even if it bounces

91.240.160.0-91.240.163.255 is Germany not Poland?

The track is correct, however, SpamCop says "No reporting address found" for the spamvertised site, http://firearm[dot]incla[dot]ru/

Share this post


Link to post
Share on other sites

The track is correct, however, SpamCop says "No reporting address found" for the spamvertised site, http://firearm[dot]incla[dot]ru/

Resolves to 91.204.162.129

abuse[at]ncgroup.pl

Yes

http://www.spamhaus.org/sbl/query/SBL202505

Botnet spamming illegal drugs - web server hosting.

IMO cert[at]cert.pl needs including the poles watching the abuse address are asleep at the wheel

http://www.spamhaus.org/sbl/query/SBL188672

Share this post


Link to post
Share on other sites

Resolves to 91.204.162.129

abuse[at]ncgroup.pl

Yes

http://www.spamhaus.org/sbl/query/SBL202505

Botnet spamming illegal drugs - web server hosting.

IMO cert[at]cert.pl needs including the poles watching the abuse address are asleep at the wheel

http://www.spamhaus.org/sbl/query/SBL188672

That works. I just wanna make sure someone is notified. :)

Share this post


Link to post
Share on other sites

Tracking URL: http://www.spamcop.net/sc?id=z5711879852z5...add1d86052829cz

Per RIPE, this is registered to ATMAN.PL. They have no contact information, however abuse.net recommends abuse[at]atman.pl and noc[at]atm.com.pl.

Netblock: 91.240.160.0-91.240.163.255

No contacts?

e-mail: kscheuermann[at]kzvnr.de

notify: auftrag[at]nic.telekom.de

% This query was served by the RIPE Database Query Service version 1.71 (WHOIS4)

Share this post


Link to post
Share on other sites

That track correct?

Abuse net will by default use abuse[at]domian by default even if it bounces

91.240.160.0-91.240.163.255 is Germany not Poland?

Yes, abuse.net will display abuse[at]domain.com by default, in the ABSENCE of any other contact(s), but NOT in this case. When a default contact is displayed, it is followed by "(default, no info)."

Share this post


Link to post
Share on other sites

That track correct?

Abuse net will by default use abuse[at]domian by default even if it bounces

91.240.160.0-91.240.163.255 is Germany not Poland?

P.S. If an abuse.net address is bad, please share information with the abuse.net robot, update[at]abuse.net, using their standard format, or else postmaster[at]abuse.net, who would want evidence that an address is bad. Format sounds daunting, but can be simple. For address bad[at]example.com, send a plain-text e-mail...

example.com: good[at]example.com

For complete details, see http://www.abuse.net/addnew.phtml

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×