mrmaxx Posted March 3, 2010 Share Posted March 3, 2010 I got an email today with an email address in the body (which I know SpamCop will not report on it's own, so I included a manual report on it.) However, looking up the IP of the email domain in question did nothing to inspire confidence as it's a "safe-mail" address, which I'm guessing is a throw-away email address. So, I tried to traceroute to find their upstream. Unfortunately, none of the traceroute tools will work from inside my firewall, and none of the web-based traceroutes would work either. Until I tried tracing from Ukraine. THAT worked. If anyone gets email pointing to a western-cet.com email address for replies, you should consider complaining to ihome.ru as their mail-host's upstream. Not likely to get a lot of sympathy, but at least that seems to be a valid upstream with valid abuse contacts. MY abuse.net lookup for ihome.ru got me the following: postmaster[at]ihome.ru (for ihome.ru) abuse[at]ihome.ru (for ihome.ru) noc[at]ihome.ru (for ihome.ru) abuse[at]ruscomnet.ru (for ihome.ru) Hope that helps someone else. As I said, the way I got ihome.ru was through traceroute from a Ukranian lookingglass/traceroute site. It gives me warm fuzzies to know that the spammers weren't able to completely block my figuring out who their ISP/upstream is! <Evil Grin> Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.