Dragongirl Posted February 12, 2013 Share Posted February 12, 2013 Tracking info: http://www.spamcop.net/sc?id=z5461874334z9...f2416c95b415aaz Using https://www.arin.net/ with the IP 200.17.33.10 results in this info: Network NetRange 200.0.0.0 - 200.255.255.255 CIDR 200.0.0.0/8 Name LACNIC-200 Handle NET-200-0-0-0-1 Parent Net Type Allocated to LACNIC Origin AS Organization Latin American and Caribbean IP address Regional Registry (LACNIC) Registration Date 2002-07-27 Last Updated 2010-07-21 Comments This IP address range is under LACNIC responsibility for further allocations to users in LACNIC region. Please see http://www.lacnic.net/ for further details, or check the WHOIS server located at http://whois.lacnic.net RESTful Link http://whois.arin.net/rest/net/NET-200-0-0-0-1 See Also Related organization's POC records. See Also Related delegations. Basically it's says you need to go to the LACNIC whois site. During so using the same ip numbers: IP 200.17.33.10 results in: % Joint Whois - whois.lacnic.net % This server accepts single ASN, IPv4 or IPv6 queries % Brazilian resource: whois.registro.br % Copyright © Nic.br % The use of the data below is only permitted as described in % full by the terms of use (http://registro.br/termo/en.html), % being prohibited its distribution, comercialization or % reproduction, in particular, to use it for advertising or % any similar purpose. % 2013-02-12 02:12:21 (BRST -02:00) inetnum: 200.17.32/19 aut-num: AS1916 abuse-c: SIC128 owner: Associação Rede Nacional de Ensino e Pesquisa ownerid: 003.508.097/0001-36 responsible: Nelson Simões Silva country: BR owner-c: RCO217 tech-c: RCO217 inetrev: 200.17.33/24 nserver: fwbenfica.ifce.edu.br nsstat: 20130211 TIMEOUT nslastaa: 20120703 nserver: zim.itti.ifce.edu.br nsstat: 20130211 UH nslastaa: 20120415 created: 20000216 changed: 20060407 nic-hdl-br: RCO217 person: RNP - Centro de Engenharia e Operações e-mail: registro[at]rnp.br created: 20060406 changed: 20130110 nic-hdl-br: SIC128 person: Security Incidents Response Center e-mail: cais[at]cais.rnp.br created: 20020417 changed: 20050309 % Security and mail abuse issues should also be addressed to % cert.br, http://www.cert.br/, respectivelly to cert[at]cert.br % and mail-abuse[at]cert.br % % whois.registro.br accepts only direct match queries. Types % of queries are: domain (.br), ticket, provider, ID, CIDR % block, IP and ASN. Please look at the portion I colored red. It appears like the abuse addresses should be mail-abuse[at]cert.br. Link to comment Share on other sites More sharing options...
A B Posted February 14, 2013 Share Posted February 14, 2013 Right, but this is only a third party, which is also interested in reports. There ist also another address: abuse-c: SIC128 [...] nic-hdl-br: SIC128 person: Security Incidents Response Center e-mail: cais[at]cais.rnp.br Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.