marc1 Posted May 11, 2010 Posted May 11, 2010 Similar to another a previous topic I started about another IP, this IP seems to report the wrong person. It lists alexgarcia.solutions at gmail. That doesn't sound right. I am also having the same problem where I am getting spam from a range of IP addresses: 173.244.51.248 173.244.50.217 173.244.44.16 173.244.45.239 173.244.45.159 173.244.45.166 How can I tell who is the upstream provider? Or who should these reports be going to? Thanks in advance.
turetzsr Posted May 11, 2010 Posted May 11, 2010 Hi, marc1! ...Do you have a proposal for a better abuse contact address? I see nothing in either ARIN or www.abuse.net.
marc1 Posted May 11, 2010 Author Posted May 11, 2010 ...Do you have a proposal for a better abuse contact address? I see nothing in either ARIN or www.abuse.net. Hey Steve. I don't. Is LogicWeb their upstream provider? I am not sure how to find out.
Telarin Posted May 11, 2010 Posted May 11, 2010 The IP block is directly allocated to Logicweb, who then has reassigned a portion to Prime Directive, LLC The logicweb reporting address is abuse[at]logicweb.com and is probably the better contact to use than the gmail contact listed for the reassignment.
turetzsr Posted May 11, 2010 Posted May 11, 2010 ...Thanks, Will! ...marc1, you could either wait until a SpamCop staff member drops by here and picks up on this or you could, if you wish to speed up and raise the likelihood of SpamCop staff awareness, drop a line to the SpamCop deputies at e-mail address deputies[at]admin.spamcop.net. I would recommend you provide a clear, brief explanation of the issue and perhaps a link to this Forum "thread," http://forum.spamcop.net/forums/index.php?showtopic=11340.
marc1 Posted May 12, 2010 Author Posted May 12, 2010 The IP block is directly allocated to Logicweb, who then has reassigned a portion to Prime Directive, LLC The logicweb reporting address is abuse[at]logicweb.com and is probably the better contact to use than the gmail contact listed for the reassignment. How do I lookup this information myself? Hate to keep troubling the community for this info.
SpamCopAdmin Posted May 12, 2010 Posted May 12, 2010 SpamCop is now finding abuse[at]teamnet.net for the range 173.244.32.0 - 173.244.63.255 Reports to abuse[at]logicweb.com have been disabled. Cached whois for 173.244.32.0 - 173.244.63.255: abuse[at]logicweb.com Using abuse net on logicweb.com abuse net logicweb.com = abuse[at]logicweb.com, abuse[at]teamnet.net - Don D'Minion - SpamCop Admin - .
Wazoo Posted May 12, 2010 Posted May 12, 2010 How do I lookup this information myself? Hate to keep troubling the community for this info. Hard to answer directly with no data to work with, specificly, what Operating System is involved? One could make an assumption that some version of Windows is probably involved, and this would lead to a suggested tool-set called SamSpade. It hasn't been updated in years, the owner has had a hard time keeping his web-site up and running, but the application itself is available on a number of other (download) sites. Example ouput that shows Will's data; 05/12/10 07:08:07 IP block 173.244.50.217 Trying 173.244.50.217 at ARIN Trying 173.244.50 at ARIN LogicWeb Inc. LOGICWEB (NET-173-244-32-0-1) ...... 173.244.32.0 - 173.244.63.255 Prime Directive, LLC LOGICWEB (NET-173-244-44-0-1) ...... 173.244.44.0 - 173.244.51.255 05/12/10 07:32:48 Slow traceroute 173.244.50.217 Trace 173.244.50.217 ... 205.171.163.58 RTT: 26ms TTL:170 (cdr2-edge-02.inet.qwest.net fraudulent rDNS) 65.118.250.2 RTT: 36ms TTL:170 (No rDNS) 147.202.0.140 RTT: 32ms TTL:170 (bb1.coreswa.cf.teamnet.net ok) 147.202.6.58 RTT: 45ms TTL:170 (ge1-0-28.core1.logicweb.com probable bogus rDNS: No DNS) 173.244.50.217 RTT: 99ms TTL: 52 (ho217.health-organic.com probable bogus rDNS: No DNS)
Telarin Posted May 12, 2010 Posted May 12, 2010 How do I lookup this information myself? Hate to keep troubling the community for this info. Go to ARIN.net Put the IP in question (173.244.50.217) into the "SEARCH WHOIS" box and click search You will see two allocations: LogicWeb Inc. LOGICWEB (NET-173-244-32-0-1) 173.244.32.0 - 173.244.63.255 Prime Directive, LLC LOGICWEB (NET-173-244-44-0-1) 173.244.44.0 - 173.244.51.255 clicking on the link in the first one gives us: OrgName: LogicWeb Inc. OrgID: LOGIC-25 Address: 30 Jericho Turnpike Address: #188 City: Commack StateProv: NY PostalCode: 11725 Country: US NetRange: 173.244.32.0 - 173.244.63.255 CIDR: 173.244.32.0/19 NetName: LOGICWEB NetHandle: NET-173-244-32-0-1 Parent: NET-173-0-0-0-0 NetType: Direct Allocation NameServer: NS1.LOGICWEB.COM NameServer: NS2.LOGICWEB.COM Comment: RegDate: 2010-04-21 Updated: 2010-04-21 OrgAbuseHandle: ABUSE1808-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-877-564-4293 OrgAbuseEmail: abuse[at]logicweb.com OrgTechHandle: TECH277-ARIN OrgTechName: Tech OrgTechPhone: +1-877-564-4293 OrgTechEmail: noc[at]logicweb.com Clicking on the second link gives: OrgName: Prime Directive, LLC OrgID: PRIME-103 Address: 120 NE Madeira Drive Address: Suite 101 City: Albuquerque StateProv: NM PostalCode: 87108 Country: US NetRange: 173.244.44.0 - 173.244.51.255 CIDR: 173.244.44.0/22, 173.244.48.0/22 OriginAS: AS10464 NetName: LOGICWEB NetHandle: NET-173-244-44-0-1 Parent: NET-173-244-32-0-1 NetType: Reassigned NameServer: NS1.PUBLICCLOUDWEBHOST.COM NameServer: NS2.PUBLICCLOUDWEBHOST.COM Comment: RegDate: 2010-04-26 Updated: 2010-04-26 RTechHandle: GARCI10-ARIN RTechName: Garcia, Alex RTechPhone: +1-505-514-0431 RTechEmail: alexgarcia.solutions[at]gmail.com OrgTechHandle: NETWO3580-ARIN OrgTechName: Network Operations OrgTechPhone: +1-505-234-7515 OrgTechEmail: paulyromano33[at]gmail.com
Recommended Posts
Archived
This topic is now archived and is closed to further replies.