Routing details for 211.108.90.4
[refresh/show] Cached whois for 211.108.90.4 : [EMAIL PROTECTED]
[EMAIL PROTECTED]
Using abuse net on [EMAIL PROTECTED]
abuse net hanaro.com = [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED]
Using best contacts [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED] redirects to [EMAIL PROTECTED]
Statistics:
211.108.90.4 listed in bl.spamcop.net (127.0.0.2)
More Information..
211.108.90.4 listed in dnsbl.njabl.org ( 127.0.0.9 )
211.108.90.4 listed in dnsbl.njabl.org ( 127.0.0.9 )
211.108.90.4 not listed in relays.ordb.org.
Reporting addresses:
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
======================================
Stop spam on your domain, Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
Aspire to Inspire before you Retire or Expire!
----- Original Message -----
From: "dana tierney" <[EMAIL PROTECTED]>
To: "CF-Community" <[EMAIL PROTECTED]>
Sent: Sunday, January 25, 2004 7:33 AM
Subject: Re:libero.it
: Looking at the HELO. When I did nslookup on 211.108.90.4 it did not resolve,
so I assumed it was in fact libero. A bit naive I guess; something like this
would not be coming from an isp. How did you get Korea? I am not arguing the
point as I know you know more thna I do, but how did you get that?
:
: > It appears to be something delivered from Korea (211.108.90.4) to
: > Zianet, then from Zianet to ComCast.
:
: Zianet hosts prunebelly and yes it forwards to a comcast address.
:
: > Why do you think it is spoofing a prunebelly address?
:
: It claims to be sent to user A at prunebelly but was received by user B. User
A neither received not sent it.
:
: >But without full headers it is a bit difficult to see where
: > it came from exactly, so it is not clear where to report it. You might
: > want to just go for the spamvertized site instead of the originator
: > (which undoubtedly is a hacked/misconfigured DSL cluebie).
: >
:
: User claims nothing appears when you go View --> All Headers (Outlook
Express). This may in fact be the case as she is at least competent enough to
view source.
:
: But anyway... to be honest I was thinking I had an answer from the headers.
Glad I asked. And the last time I got revolted enough to chase one of these
down, the domain and the domains it referred to were all registered to an
address in Madagascar.
:
: BUT :) BUT :) this one is registered to some guy in Lynden Washington using a
hosting company in Columbia Maryland.... thanks, I got it from here, unless you
have further suggestions <g>
:
: me <-- happy
:
: Dana
:
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
