byhtomit Posted February 1, 2008 Share Posted February 1, 2008 I came across a SpamCop report that didn't know what the abuse reporting alias should be, so I thought I would let someone here know what I believe it should be. The report URL is http://www.spamcop.net/sc?id=z1632209307zc...38ef51d882b377z. When the report parses the Ripe database, it comes up with this: Tracking message source: 22.214.171.124: Display data: "whois 126.96.36.199[at]whois.ripe.net" (Getting contact from whois.ripe.net) Lookup ei436-ripe[at]whois.ripe.net Display data: "whois ei436-ripe[at]whois.ripe.net" (Getting contact from whois.ripe.net) ei436-ripe = whois.ripe.net 188.8.131.52 (nothing found) host 184.108.40.206 = rmt19-18.constellationnetcorp.com (cached) Host rmt19-18.constellationnetcorp.com (checking ip) IP not found ; rmt19-18.constellationnetcorp.com discarded as fake. No reporting addresses found for 220.127.116.11, using devnull for tracking. When I manually check the Ripe database, I get this: inetnum: 18.104.22.168 - 22.214.171.124 netname: CNC-BEN-013-NET descr: Surfcom Technologies Network country: NG admin-c: EI436-RIPE tech-c: EI436-RIPE status: ASSIGNED PA mnt-by: OXIEPARABOLEN-MNT mnt-lower: OXIEPARABOLEN-MNT mnt-routes: OXIEPARABOLEN-MNT source: RIPE # Filtered person: Eniola Igunnu address: 14 Aimurie Avenue, GRA, Benin City, Nigeria phone: +234-8056830947 nic-hdl: EI436-RIPE mnt-by: oxieparabolen-mnt source: RIPE # Filtered % Information related to '126.96.36.199/20AS42732' route: 188.8.131.52/20 descr: Oxieparabolen AB origin: AS42732 mnt-by: oxieparabolen-mnt source: RIPE # Filtered The link of oxieparabolen-mnt displays this information: mntner: OXIEPARABOLEN-MNT descr: Oxieparabolen Net Maintainer admin-c: TJM7-RIPE auth: MD5-PW $1$VE3pEz4x$j3U4wTvC3ztU/rML4sXSS/ mnt-by: OXIEPARABOLEN-MNT referral-by: RIPE-DBM-MNT source: RIPE # Filtered person: Timothy Mahoney address: Oxieparabolen AB VirkesvÃ¤gen 13 23837, Oxie Sweden abuse-mailbox: abuse[at]constellationnetcorp.com phone: +46 40 52 94 41 nic-hdl: TJM7-RIPE mnt-by: oxieparabolen-mnt source: RIPE # Filtered When I preform a tracert on the IP in question, I get this name resolution: C:\>tracert 184.108.40.206 Tracing route to rmt19-18.constellationnetcorp.com [220.127.116.11] over a maximum of 30 hops: I won't bore you with all of the tracert efforts, but needless to say it appears that abuse[at]constellationnetcorp.com should be the correct address. I sent the spam e-mail to the address and didn't get a bounce back, so it appears to be working and valid. Would it be possible to have someone update the SpamCop database to include this reporting alias? Thanks, Timothy Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.