Jump to content

Incorrect reporting address/whois query for 60.36.166.12


Steve

Recommended Posts

https://www.spamcop.net/sc?id=z6798974193z28b88c0ba00dff57ab8934313692034dz

Manually reported email in tracking link above to abuse AT ocn DOT ad DOT jp and got this response back:

Quote

Dear Sir/Madam

we are sorry to inform you that the IP address you have given us is
not one that we manage directly.

if you check this IP address on JPNIC Who is Gateway

Whois:
http://whois.nic.ad.jp/cgi-bin/whois_gw?key=60.36.166.12/e


You will be able to find that this IP address is one owned by PLALA.
Please contact PLALA for further assistance.


Thank you for your kind understanding on this matter.

Sincerely,
OCN Internet Security Team
Ikeda
-----
OCN Internet Security Team
E-mail : abuse_support AT ocn DOT ad DOT jp

Using the JPNIC whois query resulted in the abuse POC being super AT plala DOT or DOT jp. Refreshing the cache doesn't change it. For some reason SC is using APNIC instead of JPNIC to determine the correct abuse POC for this IP address.

Cache info:

Quote

"whois 60.36.166.12 AT whois DOT apnic DOT net" (Getting contact from whois DOT apnic DOT net mirror)
Display data:
Abuse address in 'remarks' field: abuse AT ocn DOT ad DOT jp
Lookup irt-jpnic-jp AT whois DOT apnic DOT net
   "whois irt-jpnic-jp AT whois DOT apnic DOT net" (Getting contact from whois DOT apnic DOT net mirror)
   Display data:
   irt-jpnic-jp =
whois DOT apnic DOT net found abuse contacts for 60.36.166.12 = abuse AT ocn DOT ad DOT jp
whois: 60.32.0.0 - 60.47.255.255 = abuse AT ocn DOT ad DOT jp
Routing details for 60.36.166.12
Using abuse net on abuse AT ocn DOT ad DOT jp
abuse net ocn DOT ad DOT jp = abuse AT ocn DOT ad DOT jp
Using best contacts abuse AT ocn DOT ad DOT jp

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...