Jump to content

search-apnic-not-arin#apnic.net@devnull.spamcop.net


RobiBue
 Share

Recommended Posts

https://www.spamcop.net/sc?id=z6734860051zc341d4446bdd92013698b650963ff273z

Tracking message source: 153.120.151.105:
Routing details for 153.120.151.105
De-referencing sakura.ad.jp@abuse.net
abuse net sakura.ad.jp = support@sakura.ad.jp, abuse@sakura.ad.jp
Report routing for 153.120.151.105: support@sakura.ad.jp, abuse@sakura.ad.jp, abuse@sakura.ad.jp
Routing details for 153.120.151.105
[refresh/show] Cached whois for 153.120.151.105 : search-apnic-not-arin@apnic.net
I refuse to bother search-apnic-not-arin@apnic.net.

SpamCop shouldn't stop there, but follow the whois path given!

Why SC doesn't now continue checking on whois.apnic.net but instead stops, I don't know. I suppose whois.arin.net changed something and SC never got updated to the new format.

If I do a whois in my cygwin terminal, whois automatically continues to the new referral:

$ whois -h whois.arin.net  153.120.151.105

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2021, American Registry for Internet Numbers, Ltd.
#


NetRange:       153.0.0.0 - 153.255.255.255
CIDR:           153.0.0.0/8
NetName:        APNIC-ERX-153
NetHandle:      NET-153-0-0-0-0
Parent:          ()
NetType:        Early Registrations, Maintained by APNIC
OriginAS:
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        1993-05-01
Updated:        2010-07-30
Ref:            https://rdap.arin.net/registry/ip/153.0.0.0

ResourceLink:  http://wq.apnic.net/whois-search/static/search.html
ResourceLink:  whois.apnic.net

[...]

# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2021, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '153.120.0.0 - 153.120.191.255'

% Abuse contact for '153.120.0.0 - 153.120.191.255' is 'hostmaster@nic.ad.jp'

inetnum:        153.120.0.0 - 153.120.191.255
netname:        SAKURA-ISHIKARI
descr:          SAKURA Internet Inc.

The abuse contact should be hostmaster@nic.ad.jp given in whois.apnic.net.

also, looking up the abuse.net db, I get the following:

https://www.abuse.net/lookup.phtml?domain=sakura.ad.jp

Look up an address in the abuse.net contact database

support@sakura.ad.jp (for sakura.ad.jp)
abuse@sakura.ad.jp (for sakura.ad.jp)

 

Link to comment
Share on other sites

On 12/22/2021 at 3:46 PM, RobiBue said:

SpamCop shouldn't stop there, but follow the whois path given!

Why SC doesn't now continue checking on whois.apnic.net but instead stops, I don't know. I suppose whois.arin.net changed something and SC never got updated to the new format.

If I do a whois in my cygwin terminal, whois automatically continues to the new referral:

I keep hoping that someone at SpamCop might pick up the following request and to implement this.  From what I currently understand, SpamCop only follows certain whois referral entries.  Be nice if they could follow all of them.  This was noticed around 2012 when Apnic and RipeNCC ran out of IPv4 addresses and started exchanging then with the other RIRs.  Richard was having to manually update all the entries to sort them out.  Manual changes take too long and it would be better to automate it.

 

Link to comment
Share on other sites

wait a minute... que? what? que? since 2012? and Manuel still looks as fresh as he did in that old post? I know NOTHING! I'm from Barcelona! ;)

joking aside (I blame it on Fawlty Towers)...

Yeah, it's about time that this Cisco conglomerate uses their knowledge and background to effectively improve this spam fighting tool.

edit: dang! I had completely forgot that I was involved in that thread.... (I blame that on my age!)

Edited by RobiBue
old age
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...