Using gmail-abuse#google.com[at]devnull.spamcop.net for statistical tracking

[JoeColorado]

http://www.spamcop.net/sc?action=rcache;ip=194.125.224.15

Parsing input: 194.125.224.15

[report history]

Routing details for 194.125.224.15

[refresh/show] Cached whois for 194.125.224.15 : antratsitsupport[at]gmail.com e.polunin[at]gmail.com

Using abuse net on antratsitsupport[at]gmail.com

abuse net gmail.com = gmail-abuse[at]google.com

Using best contacts gmail-abuse[at]google.com

Reports disabled for gmail-abuse[at]google.com

Using gmail-abuse#google.com[at]devnull.spamcop.net for statistical tracking.

But:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Information related to '194.125.224.0 - 194.125.227.255'

inetnum:		194.125.224.0 - 194.125.227.255
netname:		ANTRASIT-UA-NET
descr:		  PP "SKS-ANTRASIT"
country:		UA
org:			ORG-PA343-RIPE
admin-c:		EP525-RIPE
tech-c:		 AS1934-RIPE
status:		 ASSIGNED PI
mnt-by:		 ANTRASIT-UA-MNT
mnt-by:		 RIPE-NCC-END-MNT
mnt-lower:	  RIPE-NCC-END-MNT
mnt-routes:	 ANTRASIT-UA-MNT
mnt-domains:	ANTRASIT-UA-MNT
changed:		hostmaster[at]ripe.net 20091116
source:		 RIPE

organisation:   ORG-PA343-RIPE
org-name:	   PP "SKS-ANTRASIT"
org-type:	   OTHER
address:		Ukraine, 94613 Antrasit city, Lugansk area, Rostovska st.20, of.606
phone:		  +380643131136
fax-no:		 +380643131136
e-mail:		 edworld[at]antratsit.net.ua
admin-c:		EP525-RIPE
tech-c:		 AS1934-RIPE
mnt-ref:		ANTRASIT-UA-MNT
mnt-by:		 ANTRASIT-UA-MNT
changed:		edworld[at]antratsit.net.ua 20091011
source:		 RIPE

person:		 Eduard Polunin
address:		Ukraine, Antracit
phone:		  +380643131136
nic-hdl:		EP525-RIPE
e-mail:		 E.Polunin[at]gmail.com
changed:		E.Polunin[at]gmail.com 20091011
mnt-by:		 ANTRASIT-UA-MNT
source:		 RIPE

person:		 Alexander Shults
address:		Ukraine, Antracit
phone:		  +380643131136
nic-hdl:		AS1934-RIPE
e-mail:		 antratsitsupport[at]gmail.com
changed:		antratsitsupport[at]gmail.com 20091011
mnt-by:		 ANTRASIT-UA-MNT
source:		 RIPE

% Information related to '194.125.224.0/22AS50106'

route:		  194.125.224.0/22
descr:		  Antratsit
descr:
origin:		 AS50106
mnt-by:		 ANTRASIT-UA-MNT
changed:		edworld[at]antratsit.net.ua 20091123
source:		 RIPE

% This query was served by the RIPE Database Query Service (proxy) version 1.4.6 (WHOIS1)

Note - should be:

antratsitsupport[at]gmail.com, e.polunin[at]gmail.com

[das]

Let me add my $0.02...

I've seen this problem a few times also. It arises whenever "whois" returns a reporting addr of the form "foo[at]gmail.com". When that gets passed to "whois -b", the answer returned is "gmail-abuse[at]google.com". That makes sense, but it is WRONG in this context -- the reporting addr returned by "whois" is CORRECT as it stands, and should NOT be further elaborated by passing to "whois -b".

Parser needs a special test for this case...

if ( reporting_addr NOT of the form "foo[at]gmail.com" ) then do whois -b reporting_addr;

-- EstherD

[JoeColorado]

Bump