Jump to content

Why differences in search results between spamcop parser, abuse.net and ripe.net ??


ZapZombie
 Share

Recommended Posts

Hi,

I noticed spamcop parser did not find contact address for 95.153.176.109, but using win32whois.exe I saw an address was found at abuse.net, and browsing to ripe.net and searching with B flag on I saw another address.

Why weren't they found by the parser, even after refreshing cache?

I thought the parser looks up at ripe.net with -B flag, and when necessary at abuse.net.

(I filled in the found contact addresses at the parse form)

Regards,

ZZ

Link to comment
Share on other sites

Hi,

I noticed spamcop parser did not find contact address for 95.153.176.109, but using win32whois.exe I saw an address was found at abuse.net, and browsing to ripe.net and searching with B flag on I saw another address.

Why weren't they found by the parser, even after refreshing cache?

I thought the parser looks up at ripe.net with -B flag, and when necessary at abuse.net.

(I filled in the found contact addresses at the parse form)

Regards,

ZZ

SpamCop checks three Whois sources?

"Abuse net", as last resort give's "abuse [at] domain name" by default (may just bounce in which case SC won't use). At least this I believe the case?

A Windows program I use give a address (not abuse) as

"lir [ AT ] kuban.mts.ru"

Their Websites give a contact email "info [ AT ] kuban.mts.ru"

This "ISP" "kubangsm.ru" runs a very large host of botnets (I doubt if accidentally? and why they don't POSSIBLY want to be bothered)

Your Botnet

http://cbl.abuseat.org/lookup.cgi?ip=95.153.176.109

The great many other Botnet hosts in this "neighborhood" with spam reports

95.153.175.125 95.153.175.131 95.153.175.132 95.153.175.136 95.153.175.155 95.153.175.173 95.153.175.198 95.153.175.215 95.153.175.226 95.153.175.249 95.153.176.0 95.153.176.17 95.153.176.29 95.153.176.67 95.153.176.73 95.153.176.174 95.153.176.195 95.153.176.206 95.153.176.208 95.153.176.210 95.153.176.214 95.153.176.215 95.153.176.241 95.153.176.252 95.153.177.9 95.153.177.19 95.153.177.23 95.153.177.38 95.153.177.97

Edited by petzl
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...