Incorrect reporting address/whois query for 60.36.166.12

[Steve]

https://www.spamcop.net/sc?id=z6798974193z28b88c0ba00dff57ab8934313692034dz

Manually reported email in tracking link above to abuse AT ocn DOT ad DOT jp and got this response back:

Quote

Dear Sir/Madam

we are sorry to inform you that the IP address you have given us is
not one that we manage directly.

if you check this IP address on JPNIC Who is Gateway

Whois:
http://whois.nic.ad.jp/cgi-bin/whois_gw?key=60.36.166.12/e


You will be able to find that this IP address is one owned by PLALA.
Please contact PLALA for further assistance.


Thank you for your kind understanding on this matter.

Sincerely,
OCN Internet Security Team
Ikeda
-----
OCN Internet Security Team
E-mail : abuse_support AT ocn DOT ad DOT jp

Using the JPNIC whois query resulted in the abuse POC being super AT plala DOT or DOT jp. Refreshing the cache doesn't change it. For some reason SC is using APNIC instead of JPNIC to determine the correct abuse POC for this IP address.

Cache info:

Quote

"whois 60.36.166.12 AT whois DOT apnic DOT net" (Getting contact from whois DOT apnic DOT net mirror)
Display data:
Abuse address in 'remarks' field: abuse AT ocn DOT ad DOT jp
Lookup irt-jpnic-jp AT whois DOT apnic DOT net
   "whois irt-jpnic-jp AT whois DOT apnic DOT net" (Getting contact from whois DOT apnic DOT net mirror)
   Display data:
   irt-jpnic-jp =
whois DOT apnic DOT net found abuse contacts for 60.36.166.12 = abuse AT ocn DOT ad DOT jp
whois: 60.32.0.0 - 60.47.255.255 = abuse AT ocn DOT ad DOT jp
Routing details for 60.36.166.12
Using abuse net on abuse AT ocn DOT ad DOT jp
abuse net ocn DOT ad DOT jp = abuse AT ocn DOT ad DOT jp
Using best contacts abuse AT ocn DOT ad DOT jp

 

[petzl]

16 minutes ago, Steve said:

https://www.spamcop.net/sc?id=z6798974193z28b88c0ba00dff57ab8934313692034dz

"hostmaster[AT]nic[DOT]ad[DOT]jp"
is abuse contact don't see why they could not forward it?