Better reporting address for 81.168.189.44

[mjs]

Sorry if this is not the right place to report this, but I didn't find a better one.

spam containing the URL http://81.168.189.44/iso/zal/.www.skyfi.co...onalBanking.htm sends reports to lots of random people at dialog.net.pl. However, abuse.net suggest reports should go to their abuse[at] address.

[Wazoo]

Please provide the Tracking URL of a parse of this spam. The URL offered up in your query is simply too odd looking by itself.

Naturally, a query like this hits just as the Reproting and Parsing system decides to do yet another downtime/database-problems mode change.

Reports routes for 81.168.189.44:

routeid:16603948 81.168.189.0 - 81.168.189.255 to:radoslaw.zdunek[at]dialog.pl

Administrator found from whois records

routeid:16603949 81.168.189.0 - 81.168.189.255 to:piotr.guziewicz[at]dialog.pl

Administrator found from whois records

routeid:16603950 81.168.189.0 - 81.168.189.255 to:ripe[at]dialog.net.pl

Administrator found from whois records

Cached whois for 81.168.189.44 : radoslaw.zdunek[at]dialog.pl piotr.guziewicz[at]dialog.pl ripe[at]dialog.net.pl

Using last resort contacts radoslaw.zdunek[at]dialog.pl piotr.guziewicz[at]dialog.pl ripe[at]dialog.net.pl

Removing old cache entries.

Tracking details

Display data:

"whois 81.168.189.44[at]whois.ripe.net" (Getting contact from whois.ripe.net)

drr6-ripe = ripe[at]dialog.net.pl

Lookup rz1496-ripe[at]whois.ripe.net

Display data:

"whois rz1496-ripe[at]whois.ripe.net" (Getting contact from whois.ripe.net)

rz1496-ripe = radoslaw.zdunek[at]dialog.pl

Lookup pg2589-ripe[at]whois.ripe.net

Display data:

"whois pg2589-ripe[at]whois.ripe.net" (Getting contact from whois.ripe.net)

pg2589-ripe = piotr.guziewicz[at]dialog.pl

whois.ripe.net 81.168.189.44 = radoslaw.zdunek[at]dialog.pl, ripe[at]dialog.net.pl, piotr.guziewicz[at]dialog.pl

whois: 81.168.189.0 - 81.168.189.255 = radoslaw.zdunek[at]dialog.pl, ripe[at]dialog.net.pl, piotr.guziewicz[at]dialog.pl

Routing details for 81.168.189.44

Using last resort contacts radoslaw.zdunek[at]dialog.pl ripe[at]dialog.net.pl piotr.guziewicz[at]dialog.pl

The "standard" location for an override request is found at news://news.spamcop.net/spamcop.routing

[mjs]

Please provide the Tracking URL of a parse of this spam.  The URL offered up in your query is simply too odd looking by itself.

Thanks for the quick reply. It was phishing spam, so that explains the oddness of the URL. The tracking URL is:

http://www.spamcop.net/sc?id=z827755451za8...79d5f1cdb18721z

The "standard" location for an override request is found at news://news.spamcop.net/spamcop.routing

36180[/snapback]

Ah OK, I'll try that if I get another one.