Newsgroup: it.news.net-abuse
Titolo: [lunghino]is not able to investigate spam or abuse?????


Date: Tue, 27 May 2003 11:55:34 -0800
References: 1173$9457010@DUhS
X-Originating-IP: [167.205.55.252]
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-OriginalArrivalTime: Tue, 27 May 2003 11:55:34 -0500
FILETIME=[93622256:875230]
X-MSMail-Priority: Normal
Precedence: jerez
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - 24.68.17.190
X-AntiAbuse: Originator/Caller UID/GID - [8 0] / [1 3]
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.37; en-US; rv:5.6)
Gecko/722.90
X-Originating-Host: [69.62.190.150]; Tue, 27 May 2003 11:55:34 -0100
X-Owner: WEq2YR
X-Scanner: exiscan for exim4 (
http://duncanthrax.net/exiscan/
)
*8Y-il-q3UX5Z6vM8*
Mime-Version: 1.0
Status: R 
X-Status: N
X-KMail-EncryptionState:  
X-KMail-SignatureState:  
DACCI UN TAGLIO CON GLI SMS STATICI!
 
CLICCA 
HTTP://WWW.SMSFIRNE.NET
Ecc ecc ecc.
Vado su arin, e mi trovo:
Comment:    This IP address range is not registered in the ARIN database.
Comment:    For details, refer to the APNIC Whois Database via
Comment:    
WHOIS.APNIC.NET
 or 
http://www.apnic.net/apnic-bin/whois2.pl
Comment:    ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:    for the Asia Pacific region. APNIC does not operate networks
Comment:    using this IP address range and is not able to investigate
Comment:    spam or abuse reports relating to these addresses. For more
Comment:    help, refer to 
http://www.apnic.net/info/faq/abuse
Ma come? Allora dico, ok... andiamo a leggerci la faq! °_°!!
What do the query results mean?
 
A. Which are the most important parts to look at? 
For spam and hacking complaints, you really only need to consider the
admin-c and tech-c fields.
 
These two fields show the administrative and technical contacts for the
organisation holding the relevant address range. Click on the hyperlinked
entry (it looks like "AB12-AP"). This takes you to the address details of
the contact. 
B. What do all the other fields mean?
 
The other fields are included as part of the proper registration of public
resources. If you're just using the database to look for the organisation
responsible for network abuse, these other fields should not be relevant.
 
C. Your database says APNIC is the "source" of the IP address I've looked up 
The source field shows the RIR responsible for keeping records of the IP
address allocation. It does not show the organisation responsible for the
administration or operation of the network.
 
Also note that the changed field is not a network contact address, as it
merely records who made the most recent change to the registration
information. All APNIC addresses will initially record an APNIC address in
this field, as APNIC creates the first database object.
 
Top
 
Where do I go from here?
 
To contact the network responsible for the IP address of the spammer or
hacker, you will need to *contact the admin-c or tech-c.*
 
Allora io che ho trovato:
inetnum:      203.118.128.0 - 203.118.191.255
netname:      TIG-NZ-6
descr:        The Internet Group (ihug) Ltd.
descr:        Service Provider/Carrier
descr:        Auckland
country:      NZ
admin-c:      KL47-AP
tech-c:       KL47-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-AP-IHUG
status:       ALLOCATED PORTABLE
changed:      
hm-ch...@apnic.net
 20021009
source:       APNIC
person:       Ketan Anand Lal
address:      127-131 Newton Rd.
address:      Newton
address:      Auckland
country:      NZ
phone:        
+64-9-3592767
fax-no:       
+64-9-3581518
e-mail:       
anan...@ihug.net
nic-hdl:      KL47-AP
mnt-by:       MAINT-KAL-PER
changed:      
soh...@ihug.co.nz
 20000918
source:       APNIC
Contatto l'admin c o è tempo perso?
Grazie e scusate la lungaggine... ^_^!!
Ciao!

 descr:        The Internet Group (ihug) Ltd.
se sei brava ti fai un lookup su 
abuse.net
, altrimenti scrivi a
abuse (at) 
ihug.co.nz
abuse (at) 
ihug.net
e se rimbalza ai 2 postmaster

 Contatto l'admin c o è tempo perso?
Procedi, qui parliamo di Nuova Zelanda, non di Corea, quindi una certa
affidabilita' puo' esserci (anche se i farabutti sono ovunque;-)).
-- 
Ciao!
   Alex Palmese
--- Per scrivermi: 
do...@despammed.com
Sei anche tu stanco dei messaggi spam? Usa Terminator, il programma
anti-spam italiano FREEWARE! 
http://www.sertel.net/terminator/

 e se rimbalza ai 2 postmaster
Ehm... ^^"... Scusa... ma cos'è un lookup??? °_°!!
Altrimenti, dove trovo della doc per capire come si fa?
Grazie delle risposte!
Ciao!

 Ehm... ^^"... Scusa... ma cos'è un lookup??? °_°!!
allora, tu hai identificato correttamente la rete da cui proviene lo spam
(
ihug.co.nz
).
il problema e' adesso sapere a chi scrivere.
generalmente l'indirizzo giusto e' abuse (at) nomedominio (sempre che non
sia lo spammer).
quando non c'e' abuse puoi scrivere al postmaster (at) nomedominio.
se vuoi controllare vai su 
http://www.abuse.net/lookup.phtml
e inserisci in questo caso 
ihug.co.nz
  e ti confermera' i due indirizzi.
in altri casi c'e' un 'remark' nel whois (quello che hai postato tu) che
rice 'for abuse issues contact xxxx@nomedominio)
se hai qualche oretta di tempo, spendila per leggere
http://www.collinelli.net/antispam/
se poi ti serve qualcosa chiedi pure qui su inna.