iWeb Posted November 30, 2007 Share Posted November 30, 2007 Hi, One of the IP addresses involved in the problem we are having is 84.19.174.59. This IP address appears to be an open relay/proxy that is used to send out large quantities of spam. However, this IP address is not owned, announced or even routed by us. Yet, many of our e-mail addresses are listed as contacts for Spamcop for IP addresses that we do not even have a control over. We have contacted the Spamcop staff by replying to one of their e-mails but we haven't gotten any feedback. We are currently being spammed by the Spamcop automated reporting system :/ Anyone has any ideas? Link to comment Share on other sites More sharing options...
Miss Betsy Posted November 30, 2007 Share Posted November 30, 2007 If you simply replied to the report, you replied to the reporter, not the spamcop staff. Reporters often don't reply to answers fearing to reveal their email address to a spammer or simply don't know what to do with it since responses are so few and far between. To reach paid staff use deputies[at]admin.spamcop.net The parser got the abuse address techireland.ca from the whois records below. If you go to abuse.net, the following are the abuse addresses listed for techireland.ca postmaster[at]techireland.ca (for techireland.ca) admin[at]techireland.ca (for techireland.ca) abuse[at]privatedns.com (for techireland.ca) support[at]privatedns.com (for techireland.ca) abuse[at]iweb.ca (for techireland.ca) abuse-report[at]iweb.ca (for techireland.ca) I don't know why iweb is listed there. Miss Betsy $ whois 84.19.174.59[at]whois.ripe.net [whois.ripe.net] % This is the RIPE Whois query server #2. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html % Note: This output has been filtered. % To receive output for a database update, use the "-B" flag % Information related to '84.19.174.0 - 84.19.174.127' inetnum: 84.19.174.0 - 84.19.174.127 netname: DE-KEYWEB-HOSTINGIE descr: Hosting IE IP Network country: IE admin-c: ADL173-RIPE tech-c: ADL173-RIPE status: ASSIGNED PA mnt-by: KEYWEB-MNT source: RIPE # Filtered person: Andre De Loi address: Hosting IE address: 5 Marlton Road address: Abbey Court WIcklow Town Co.WIcklow Ireland address: Ireland e-mail: admin[at]techireland.ca phone: +35 3868 881554 mnt-by: KEYWEB-MNT nic-hdl: ADL173-RIPE source: RIPE # Filtered % Information related to '84.19.160.0/19AS31103' route: 84.19.160.0/19 descr: Keyweb AG IP Network origin: AS31103 mnt-by: KEYWEB-MNT source: RIPE # Filtered Link to comment Share on other sites More sharing options...
Merlyn Posted November 30, 2007 Share Posted November 30, 2007 Also, according to abuse.net postmaster[at]hosting-ie.com (for hosting-ie.com) abuse[at]privatedns.com (for hosting-ie.com) support[at]privatedns.com (for hosting-ie.com) abuse[at]iweb.ca (for hosting-ie.com) abuse-report[at]iweb.ca (for hosting-ie.com) Link to comment Share on other sites More sharing options...
Telarin Posted November 30, 2007 Share Posted November 30, 2007 I would suggest you contact abuse.net to have the incorrect entries removed. Not sure how you would have ended up listed as a contact for that domain in their database, but they might be able to tell you. Link to comment Share on other sites More sharing options...
btech Posted December 31, 2007 Share Posted December 31, 2007 route: 84.19.160.0/19 descr: Keyweb AG IP Network Evil, evil KeyWeb. They ignore SC reports and never seem to do a damn thing about spam. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.