Jump to content

Richard7310

Members
  • Content Count

    80
  • Joined

  • Last visited

Everything posted by Richard7310

  1. "Routing details for 206.130.96.50 [refresh/show] Cached whois for 206.130.96.50 : abuse[at]uk2group.com Using abuse net on abuse[at]uk2group.com abuse net uk2group.com = noc[at]uk2group.com, abuse[at]uk2group.com Using best contacts noc[at]uk2group.com abuse[at]uk2group.com noc[at]uk2group.com bounces (6 sent : 6 bounces) "Using noc#uk2group.com[at]devnull.spamcop.net for statistical tracking. abuse[at]uk2group.com bounces (99 sent : 99 bounces) "Using abuse#uk2group.com[at]devnull.spamcop.net for statistical tracking. "Reports routes for 206.130.96.50: routeid: 71839224 206.130.96.0 - 206.130.127.255 to: abuse[at]uk2group.com Administrator found from whois records" _________________________________ 17 Feb 2014 [source] Comment: Please report abuse issues to abuse[at]westhost.com # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html
  2. "Host milkomp.com (checking ip) = 91.205.73.231 Resolves to 91.205.73.231 Routing details for 91.205.73.231 Report routing for 91.205.73.231: map[at]iwacom.pl "Reports routes for 91.205.73.231: routeid: 70614712 91.205.72.0 - 91.205.75.255 to: map[at]iwacom.pl Administrator interested in all reports "Sunday, December 16, 2012 11:42:30 PM -0500 [Note added by 70.76.87.92 (S0106586d8fed0f8d.ss.shawcable.net)] route: 91.205.72.0/22 descr: IWACOM SP. Z O.O. origin: AS41508 mnt-by: MNT-IWACOM source: RIPE changed: iwona[at]ip.exatel.pl 20080829" ___________________________________ 26 Apr 2014 % Abuse contact for '91.205.72.0 - 91.205.75.255' is 'abuse[at]iwacom.pl' % This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS2)
  3. P.S. SC previously refreshed & best contacts is not relying upon a possibly-outdated abuse.net address because abuse.net was found to have already been updated with the more-specific abuse address for us.ntt.net inquiry.
  4. "Tracking message source: 83.231.202.9: Routing details for 83.231.202.9 [refresh/show] Cached whois for 83.231.202.9 : abuse[at]us.ntt.net Using best contacts abuse[at]ntt.net "Tracking details Display data: "whois 83.231.202.9[at]whois.ripe.net" (Getting contact from whois.ripe.net) Abuse address in 'remarks' field: abuse[at]us.ntt.net whois.ripe.net found abuse contacts for 83.231.202.9 = abuse[at]us.ntt.net whois: 83.231.202.0 - 83.231.202.31 = abuse[at]us.ntt.net Routing details for 83.231.202.9 Using best contacts abuse[at]ntt.net" ____________________________ 23 Apr 2014 % Abuse contact for '83.231.202.0 - 83.231.202.31' is 'abuse[at]us.ntt.net' SC report ignores more-specific abuse address as user-defined. % This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS1)
  5. "Tracking message source: 83.117.116.208: Routing details for 83.117.116.208 Report routing for 83.117.116.208: abuse[at]wanadoo.nl "Reports routes for 83.117.116.208: routeid: 12031885 83.116.0.0 - 83.119.255.255 to: abuse[at]wanadoo.nl Administrator interested in all reports "Wednesday, September 29, 2004 9:04:13 AM -0400 [Note added by 216.127.43.94 (sam.julianhaight.com)] - For WANADOO-CABLE blocks please contact abuse[at]casema.nl remarks: - For other blocks contact abuse[at]euronet.nl or abuse[at]wanadoo.nl "*however* casema.nl states that they are only responsible for 83.80.0.0 to 83.87.255.255 routeid: 12052486 83.117.0.0 - 83.117.127.255 to: abuse[at]wanadoo.nl Administrator interested in all reports "Thursday, September 30, 2004 12:15:30 PM -0400 [Note added by 216.127.43.94 (sam.julianhaight.com)] these are wanadoo not casema regardless of what the RIPE handles say" __________________________________________________________ 12 Apr 2014 % Abuse contact for '83.117.0.0 - 83.117.255.255' is 'abuse[at]abuse.online.nl' % This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS1)
  6. "Tracking link: http://luch-vernisag.nwhite.ru/plugins/vmp...rs_idl/aqi.html [report history] Host luch-vernisag.nwhite.ru (checking ip) = 217.107.219.177 Resolves to 217.107.219.177 Routing details for 217.107.219.177 Report routing for 217.107.219.177: abuse[at]rt-comm.ru "Reports routes for 217.107.219.177: routeid: 69294538 217.106.0.0 - 217.107.255.255 to: abuse[at]rt-comm.ru Administrator interested in all reports "Tuesday, April 17, 2012 5:38:37 AM -0400 [Note added by 63.224.241.72 (63-224-241-72-boi-usr.qwest.net)] My best guess. - Don -" _____ 3 Apr 2014 % Abuse contact for '217.107.219.0 - 217.107.219.255' is 'abuse[at]rtcomm.ru' % This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS3)
  7. "Tracking message source: 194.153.145.80: Routing details for 194.153.145.80 Report routing for 194.153.145.80: abuse[at]netinfo.bg "Routing details for 194.153.145.80 milen[at]netinfo.bg has expressed an interest in 194.153.145.80 "Reports routes for 194.153.145.80: routeid: 13542695 194.153.145.0 - 194.153.145.255 to: abuse[at]netinfo.bg Administrator interested in all reports "Saturday, March 19, 2005 11:59:40 PM -0400 [Note added by 66.213.148.45 (customer-66-213-148-45.velocitus.net)] Per Abuse.net registration for netinfo.bg. - Don - "Reports routes for 194.153.145.80: routeid: 10287759 194.153.145.0 - 194.153.145.255 to: milen[at]netinfo.bg Third party interested in all reports "Friday, April 30, 2004 8:14:10 AM -0400 Wednesday, December 31, 1969 7:01:34 PM -0500 (sam.julianhaight.com)]" ___________________ 30 Mar 2014 % Abuse contact for '194.153.145.0 - 194.153.145.255' is 'abuse[at]netinfocompany.bg' % This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS1)
  8. "Tracking message source: 85.26.164.116: Routing details for 85.26.164.116 De-referencing nwgsm.ru[at]abuse.net abuse net nwgsm.ru = customercare[at]megafonnw.ru, postmaster[at]nwgsm.ru, nwnoc[at]nwgsm.ru, abuse[at]megafonnw.ru Report routing for 85.26.164.116: customercare[at]megafonnw.ru, postmaster[at]nwgsm.ru, nwnoc[at]nwgsm.ru, abuse[at]megafonnw.ru customercare[at]megafonnw.ru bounces (99 sent : 105 bounces) "Using customercare#megafonnw.ru[at]devnull.spamcop.net for statistical tracking. "Reports routes for 85.26.164.116: routeid: 70625105 85.26.164.0 - 85.26.167.255 to: nwgsm.ru[at]abuse.net Administrator interested in all reports "Wednesday, December 19, 2012 8:35:59 PM -0500 [Note added by 70.76.87.92 (S0106586d8fed0f8d.ss.shawcable.net)] Route added without comment" _________________________ 27 Mar 2014 % Abuse contact for '85.26.164.0 - 85.26.167.255' is 'abuse-mailbox[at]megafon.ru' Uninhibited parser has been finding correct abuse address. % This query was served by the RIPE Database Query Service version 1.72 (DBC-WHOIS1)
  9. "Tracking message source: 62.194.135.96: Routing details for 62.194.135.96 Report routing for 62.194.135.96: abuse[at]chello.nl "Reports routes for 62.194.135.96: routeid: 2791042 62.194.0.0 - 62.195.255.255 to: abuse[at]chello.nl Administrator interested in all reports "Saturday, March 01, 2003 11:12:13 AM -0500 "Wednesday, December 31, 1969 7:00:15 PM -0500 override to restrict reports to .nl only. SC sending to .at because of ripe address. Requested by Marcel Swinkels, chello abuse, UPC Nederland, abuse[at]chello.nl "Wednesday, December 31, 1969 7:02:20 PM -0500 (px1nr.wp.shawcable.net)]" ____________________ 23 Mar 2014 % Abuse contact for '62.194.126.0 - 62.194.155.255' is 'abuse[at]upc.nl' remarks: Contact abuse[at]upc.nl concerning criminal remarks: activities like spam, hacks, portscans % This query was served by the RIPE Database Query Service version 1.71 (WHOIS3)
  10. "Tracking message source: 46.241.167.180: Routing details for 46.241.167.180 Report routing for 46.241.167.180: alexandr.saroyan[at]orange-ftgroup.am "Reports routes for 46.241.167.180: routeid: 70680320 46.241.128.0 - 46.241.191.255 to: alexandr.saroyan[at]orange-ftgroup.am Administrator interested in all reports "Tuesday, January 08, 2013 7:09:55 PM -0500 [Note added by 70.76.87.92 (S0106586d8fed0f8d.ss.shawcable.net)] Route added without comment" _________________________ 16 Mar 2014 % Abuse contact for '46.241.128.0 - 46.241.191.255' is 'tsolak.ayvazyan[at]orangearmenia.am' % This query was served by the RIPE Database Query Service version 1.71 (WHOIS4)
  11. "Tracking message source: 109.60.190.195: Routing details for 109.60.190.195 Report routing for 109.60.190.195: alexey[at]top-corp.ru "Reports routes for 109.60.190.195: routeid: 70717853 109.60.128.0 - 109.60.255.255 to: alexey[at]top-corp.ru Administrator interested in all reports "Saturday, January 19, 2013 1:05:21 PM -0500 [Note added by 70.76.87.92 (S0106586d8fed0f8d.ss.shawcable.net)] route: 109.60.128.0/17 descr: Ivtelecom Ltd. origin: AS47241 mnt-by: MNT-IV-TELECOM changed: alexey[at]top-corp.ru 20091215" ____________________________________ 16 Mar 2014 % Abuse contact for '109.60.190.0 - 109.60.190.255' is 'alopatkin[at]dsn.ru' % This query was served by the RIPE Database Query Service version 1.71 (WHOIS2)
  12. If the parser finds it on its own, why post?
  13. "Tracking message source: 95.159.75.251: Routing details for 95.159.75.251 Report routing for 95.159.75.251: info[at]gorannet.net "Reports routes for 95.159.75.251: routeid: 70633182 95.159.64.0 - 95.159.127.255 to: info[at]gorannet.net Administrator interested in all reports "Saturday, December 22, 2012 11:02:28 PM -0500 [Note added by 70.76.87.92 (S0106586d8fed0f8d.ss.shawcable.net)] Route added without comment" _________________________ 15 Mar 2014 % Abuse contact for '95.159.64.0 - 95.159.95.255' is 'samir[at]gorannet.net' % This query was served by the RIPE Database Query Service version 1.71 (WHOIS3)
  14. IP代ç†ç™¼æ”¾å–®ä½ç¶²æ®µ:140.120.0.0-140.127.255.255 Chinese Name 教育部 Netname TANET-NET Organization Name Ministry of Education Computer Center Street Address 12F, No 106, Sec.2,Hoping E. Rd., Admin. Contact chuang[at]mail.moe.gov.tw Tech. Contact tanetadm[at]moe.edu.tw spam. Contact tanetadm[at]moe.edu.tw 用戶單ä½:140.124.0.0/16 Netname T-NTUT.EDU.TW-NET Registered Date 2004-10-18 Admin. Contact network[at]ntut.edu.tw Tech. Contact network[at]ntut.edu.tw
  15. "Tracking message source: 140.122.58.219: Routing details for 140.122.58.219 Report routing for 140.122.58.219: abuse[at]ccu.edu.tw "Reports routes for 140.122.58.219: routeid: 60424080 140.117.0.0 - 140.138.255.255 to: abuse[at]ccu.edu.tw Administrator interested in all reports "Tuesday, July 06, 2010 12:03:14 PM -0400 [Note added by 206.207.78.146 (host-206-207-78-146.ns1.spro.net)] - Don - inetnum: 140.117.0.0 - 140.138.255.255 netname: TANET-BNETA person: Admin CCU address: National Chung Cheng University address: Chia-Yi Taiwan e-mail: abuse[at]ccu.edu.tw" ______________________________ 27 Feb 2014 % e-mail: abuse[at]ntnu.edu.tw (partial mirror) % This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4) IP代ç†ç™¼æ”¾å–®ä½ç¶²æ®µ:140.120.0.0-140.127.255.255 Chinese Name 教育部 Netname TANET-NET Organization Name Ministry of Education Computer Center Street Address 12F, No 106, Sec.2,Hoping E. Rd., Admin. Contact chuang[at]mail.moe.gov.tw Tech. Contact tanetadm[at]moe.edu.tw spam. Contact tanetadm[at]moe.edu.tw 用戶單ä½:140.122.0.0/16 Netname T-NTNU.EDU.TW-NET Registered Date 1992-05-03 Admin. Contact abuse[at]ntnu.edu.tw Tech. Contact abuse[at]ntnu.edu.tw http://www.twnic.net/index2.php
  16. "Tracking message source: 90.211.51.240: Routing details for 90.211.51.240 [refresh/show] Cached whois for 90.211.51.240 : abuse[at]sky.com Using best contacts abacus[at]sns.bskyb.com "Reports routes for 90.211.51.240: routeid: 71905747 90.210.0.0 - 90.211.255.255 to: abuse[at]sky.com Administrator found from whois records "Removing old cache entries. "Tracking details Display data: "whois 90.211.51.240[at]whois.ripe.net" (Getting contact from whois.ripe.net) Abuse address in 'remarks' field: abuse[at]sky.com whois.ripe.net found abuse contacts for 90.211.51.240 = abuse[at]sky.com whois: 90.210.0.0 - 90.211.255.255 = abuse[at]sky.com Routing details for 90.211.51.240 Using best contacts abacus[at]sns.bskyb.com" ___________________________________ 5 Mar 2014 % Abuse contact for '90.210.0.0 - 90.211.255.255' is 'abuse[at]sky.com' User-copied report to abuse[at]sky.com is ignored. % This query was served by the RIPE Database Query Service version 1.71 (WHOIS3)
  17. "Tracking message source: 211.238.68.47: Routing details for 211.238.68.47 De-referencing nic.or.kr[at]abuse.net abuse net nic.or.kr = spamcop[at]kisa.or.kr, spamrelay[at]certcc.or.kr Report routing for 211.238.68.47: spamcop[at]kisa.or.kr, spamrelay[at]certcc.or.kr "Reports routes for 211.238.68.47: routeid: 70645567 211.224.0.0 - 211.255.255.255 to: nic.or.kr[at]abuse.net Administrator interested in all reports "Thursday, December 27, 2012 11:20:42 PM -0500 [Note added by 70.76.87.92 (S0106586d8fed0f8d.ss.shawcable.net)] Route added without comment" __________________________ 4 Mar 2014 [ Network Abuse Contact Information ] E-Mail : jinisee[at]nibtv.co.kr - KISA/KRNIC Whois Service -
  18. "Tracking link: http://ofslart.ru/agh.html [report history] Host ofslart.ru (checking ip) = 8.8.8.8 Resolves to 8.8.8.8 Routing details for 8.8.8.8 [refresh/show] Cached whois for 8.8.8.8 : arin-contact[at]google.com abuse[at]google.com bounces (99 sent : 118 bounces) Using best contacts "No reporting addresses found for 8.8.8.8, using devnull for tracking. "Reports routes for 8.8.8.8: routeid: 71895621 8.0.0.0 - 8.255.255.255 to: abuse[at]level3.com Administrator found from whois records routeid: 71895620 8.8.8.0 - 8.8.8.255 to: arin-contact[at]google.com Administrator found from whois records "Tracking details Display data: "whois 8.8.8.8[at]whois.arin.net" (Getting contact from whois.arin.net ) checking NET-8-8-8-0-1 Display data: "whois NET-8-8-8-0-1[at]whois.arin.net" (Getting contact from whois.arin.net ) Found AbuseEmail in whois arin-contact[at]google.com 8.8.8.0 - 8.8.8.255:arin-contact[at]google.com checking NET-8-0-0-0-1 Display data: "whois NET-8-0-0-0-1[at]whois.arin.net" (Getting contact from whois.arin.net ) Found AbuseEmail in whois abuse[at]level3.com 8.0.0.0 - 8.255.255.255:abuse[at]level3.com Routing details for 8.8.8.8 abuse[at]google.com bounces (99 sent : 118 bounces) Using best contacts abuse[at]level3.com _______________________________ 3 Mar 2014 However, best contact NOT used because Routing in effect; Routing address not used because of bounces. Concludes No reporting addresses found. May work OK without Routing, though SC does not yet see new google address in current ARIN mirror. NetRange: 8.0.0.0 - 8.255.255.255 OrgAbuseEmail: abuse[at]level3.com NetRange: 8.8.8.0 - 8.8.8.255 OrgAbuseEmail: ir-contact-netops-corp[at]google.com
  19. "Tracking message source: 216.115.236.97: Routing details for 216.115.236.97 Report routing for 216.115.236.97: abuse[at]fea.net "Reports routes for 216.115.236.97: routeid: 107799 216.115.224.0 - 216.115.255.255 to: abuse[at]fea.net Administrator interested in all reports" ______________________________ 22 Feb 2014 OrgAbuseEmail: hostmaster[at]fea.net # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html
  20. "Tracking message source: 186.54.145.134: Routing details for 186.54.145.134 [refresh/show] Cached whois for 186.54.145.134 : ipadmin[at]antel.net.uy Using best contacts abuse[at]anteldata.net.uy "Tracking details Display data: "whois 186.54.145.134[at]whois.arin.net" (Getting contact from whois.arin.net ) Redirect to whois.lacnic.net : Display data: "whois 186.54.145.134[at]whois.lacnic.net" (Getting contact from whois.lacnic.net) Backup contact owner-c = anu anu = ipadmin[at]antel.net.uy whois.lacnic.net found abuse contacts for 186.54.145.134 = ipadmin[at]antel.net.uy whois: 186.54.0.0 - 186.54.255.255 = ipadmin[at]antel.net.uy Routing details for 186.54.145.134 Using best contacts abuse[at]anteldata.net.uy" ___________________________________ 20 Feb 2014 Parser using a best-contacts address no longer found on whois.lacnic.net; a user-defined request to send a report to the abuse address of record is ignored.
  21. "Tracking message source: 217.76.78.177: Routing details for 217.76.78.177 Report routing for 217.76.78.177: admin[at]altel.kz "Reports routes for 217.76.78.177: routeid: 71184607 217.76.64.0 - 217.76.79.255 to: admin[at]altel.kz Administrator interested in all reports "Sunday, June 30, 2013 8:38:46 PM -0400 [Note added by 70.64.94.66 (s0106586d8fed0f8d.ss.shawcable.net)] Route added without comment _________________________ 18 Feb 2014 % Abuse contact for '217.76.78.0 - 217.76.78.255' is 'abuse[at]altel.kz' % This query was served by the RIPE Database Query Service version 1.71 (WHOIS1)
  22. "Tracking message source: 72.22.73.90: Routing details for 72.22.73.90 Report routing for 72.22.73.90: abuse[at]ipowerweb.com Message is 8 hours old Routing details for 72.22.73.90 abuse[at]ipowerweb.com has expressed an interest in 72.22.73.90 "Reports routes for 72.22.73.90: routeid: 15334094 72.22.64.0 - 72.22.79.255 to: abuse[at]ipowerweb.com Administrator interested in all reports "Friday, August 19, 2005 1:32:04 AM -0400 [Note added by 70.64.153.98, 24.66.94.141 (S0106001195758c79.ss.shawcable.net)] Overriding abuse.net, which sends reports to ATT "Thursday, August 11, 2005 9:26:10 PM -0400 [Note added by 70.64.153.98, 24.66.94.141 (S0106001195758c79.ss.shawcable.net)] Route added without comment "Reports routes for 72.22.73.90: routeid: 22249183 72.22.72.0 - 72.22.73.255 to: abuse[at]ipowerweb.com Third party interested in all reports "Tuesday, October 03, 2006 10:11:24 AM -0400 [Note added by 68.217.9.76 (adsl-217-9-76.asm.bellsouth.net)] request ipowerweb" ___________________ 17 Feb 2014 OrgAbuseEmail: eig-abuse[at]maileig.com # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html
  23. "Tracking link: http://www.jobchina.tv/movies.htm [report history] Host www.jobchina.tv (checking ip) = 210.51.47.21 Resolves to 210.51.47.21 Routing details for 210.51.47.21 De-referencing china-netcom.com[at]abuse.net abuse net china-netcom.com = abuse[at]cnc-noc.net, abuse[at]chinaunicom.cn, abuse[at]anti-spam.cn, spam[at]ccert.edu.cn Report routing for 210.51.47.21: abuse[at]cnc-noc.net, abuse[at]chinaunicom.cn, abuse[at]anti-spam.cn, spam[at]ccert.edu.cn abuse[at]anti-spam.cn redirects to abuse[at]12321.cn abuse[at]12321.cn bounces (13 sent : 7 bounces) "Reports routes for 210.51.47.21: routeid: 3606623 210.51.0.0 - 210.51.255.255 to: china-netcom.com[at]abuse.net Administrator interested in all reports" ____________________________ 15 Feb 2014 remarks: send spam and abuse reports to tech-group[at]china-netcom.com SC ignores user-defined report request to this address. % This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (WHOIS4)
  24. "Tracking message source: 62.90.110.211: Routing details for 62.90.110.211 Report routing for 62.90.110.211: abuse[at]013barak.net.il abuse[at]013barak.net.il redirects to nvabuse[at]netvision013.co.il "Reports routes for 62.90.110.211: routeid: 12233740 62.90.0.0 - 62.90.255.255 to: abuse[at]013barak.net.il Administrator interested in all reports "Wednesday, October 27, 2004 11:36:31 AM -0400 [Note added by 68.158.44.168 (adsl-158-44-168.asm.bellsouth.net)] allocation to barak" ________________ 15 Feb 2014 abuse-mailbox: nvabuse[at]013netvision.co.il % Abuse contact for '62.90.0.0 - 62.90.255.255' is 'ripeadmin[at]netvision013.co.il' % This query was served by the RIPE Database Query Service version 1.71 (WHOIS2)
  25. Just sent a report to abuse[at]newroztelecom, which was NOT disabled or bouncing, though noc[at]newroztelecom disabled, as above: http://www.spamcop.net/sc?id=z5736929166zd...8e31264d9a5e20z And it was NOT a user-copied report.
×