humm well these spammenrs are getting anoying. maybe ill try track a few down like.
This tool wil give you very indepth information about any domain or IP address. Domain or IP address
Address lookup canonical name host02.houseofprinting.com. aliases addresses 184.108.40.206 Domain Whois record
Queried whois.internic.net with "dom houseofprinting.com"...
Whois Server Version 1.3
Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information.
Domain Name: HOUSEOFPRINTING.COM Registrar: NETWORK SOLUTIONS, LLC. Whois Server: whois.networksolutions.com Referral URL: http://www.networksolutions.com Name Server: AUTH3.DNS.RCN.NET Name Server: AUTH1.DNS.RCN.NET Name Server: AUTH2.DNS.RCN.NET Name Server: AUTH4.DNS.RCN.NET Status: REGISTRAR-LOCK Updated Date: 09-dec-2004 Creation Date: 04-mar-1996 Expiration Date: 05-mar-2006
>>> Last update of whois database: Thu, 23 Dec 2004 19:14:27 EST <<<
NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring registrar. Users may consult the sponsoring registrar's Whois database to view the registrar's reported date of expiration for this registration.
The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars.
Queried whois.networksolutions.com with "houseofprinting.com"...
Registrant: House of Printing (HOUSEOFPRINTING-DOM)
2544 Leghorn Blvd Mountain View, CA 94043 US
Domain Name: HOUSEOFPRINTING.COM
Administrative Contact: Anderson, Doug (DAO451) houseofprinting@RCN.COM House Of Printing 2544 LEGHORN ST MOUNTAIN VIEW, CA 94043-1614 US (650) 964-9701 fax: 999 999 9999
Technical Contact: RCN (27350792O) abuse@RCN.COM 105 Carnegie Center Princeton, NJ 08540 US 800-746-4726 fax: 999 999 9999
Record expires on 05-Mar-2006. Record created on 04-Mar-1996. Database last updated on 24-Dec-2004 07:10:29 EST.
Domain servers in listed order:
AUTH1.DNS.RCN.NET 220.127.116.11 AUTH3.DNS.RCN.NET 18.104.22.168 AUTH2.DNS.RCN.NET 22.214.171.124 AUTH4.DNS.RCN.NET 126.96.36.199
Network Whois record
Queried whois.arin.net with "188.8.131.52"...
OrgName: RCN Corporation OrgID: RCN Address: 105 Carnegie Center City: Princeton StateProv: NJ PostalCode: 08540 Country: US
NetRange: 184.108.40.206 - 220.127.116.11 CIDR: 18.104.22.168/15 NetName: RCN-BLK-5 NetHandle: NET-208-58-0-0-1 Parent: NET-208-0-0-0-0 NetType: Direct Allocation NameServer: AUTH1.DNS.RCN.NET NameServer: AUTH2.DNS.RCN.NET NameServer: AUTH3.DNS.RCN.NET NameServer: AUTH4.DNS.RCN.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: Updated: 2002-11-05
TechHandle: ZR40-ARIN TechName: RCN Corporation TechPhone: +1-888-972-6622 TechEmail: email@example.com
OrgAbuseHandle: RAD75-ARIN OrgAbuseName: RCN Abuse Department OrgAbusePhone: +1-888-972-6622 OrgAbuseEmail: firstname.lastname@example.org
OrgNOCHandle: ZR40-ARIN OrgNOCName: RCN Corporation OrgNOCPhone: +1-888-972-6622 OrgNOCEmail: email@example.com
OrgTechHandle: ZR40-ARIN OrgTechName: RCN Corporation OrgTechPhone: +1-888-972-6622 OrgTechEmail: firstname.lastname@example.org
- ARIN WHOIS database, last updated 2004-12-23 19:10
- Enter ? for additional hints on searching ARIN's WHOIS database.
DNS records name class type data time to live host02.houseofprinting.com IN A 22.214.171.124 86400s (1.00:00:00) houseofprinting.com IN MX preference: 100 exchange: spool.mail.rcn.net 86400s (1.00:00:00) houseofprinting.com IN MX preference: 0 exchange: barracuda.houseofprinting.com 86400s (1.00:00:00) houseofprinting.com IN MX preference: 50 exchange: mail.houseofprinting.com 86400s (1.00:00:00) houseofprinting.com IN A 126.96.36.199 86400s (1.00:00:00) houseofprinting.com IN NS auth1.dns.rcn.net 86400s (1.00:00:00) houseofprinting.com IN NS auth2.dns.rcn.net 86400s (1.00:00:00) houseofprinting.com IN NS auth3.dns.rcn.net 86400s (1.00:00:00) houseofprinting.com IN NS auth4.dns.rcn.net 86400s (1.00:00:00) houseofprinting.com IN SOA server: master.dns.rcn.net email: hostmaster.rcn.com serial: 2004120101 refresh: 10800 retry: 3600 expire: 604800 minimum ttl: 86400 86400s (1.00:00:00)188.8.131.52.in-addr.arpa IN PTR host02.houseofprinting.com 86400s (1.00:00:00)
Whois done on IP 184.108.40.206
Result for 220.127.116.11 --> /usr/local/bin/fwhois email@example.com [whois.arin.net] OrgName: Asia Pacific Network Information Centre OrgID: APNIC Address: PO Box 2131 City: Milton StateProv: QLD PostalCode: 4064 Country: AU ReferralServer: whois://whois.apnic.net NetRange: 18.104.22.168 - 22.214.171.124 CIDR: 126.96.36.199/8 NetName: APNIC-60 NetHandle: NET-60-0-0-0-1 Parent: NetType: Allocated to APNIC NameServer: NS1.APNIC.NET NameServer: NS3.APNIC.NET NameServer: NS4.APNIC.NET NameServer: NS.RIPE.NET NameServer: TINNIE.ARIN.NET Comment: This IP address range is not registered in the ARIN database. Comment: For details, refer to the APNIC Whois Database via Comment: WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry Comment: for the Asia Pacific region. APNIC does not operate networks Comment: using this IP address range and is not able to investigate Comment: spam or abuse reports relating to these addresses. For more Comment: help, refer to http://www.apnic.net/info/faq/abuse RegDate: 2003-04-06 Updated: 2004-03-30 OrgTechHandle: AWC12-ARIN OrgTechName: APNIC Whois Contact OrgTechPhone: +61 7 3858 3100 OrgTechEmail: firstname.lastname@example.org # ARIN WHOIS database, last updated 2005-01-01 19:10
Please advise further action:
- email ISP with evidence of abuse?
- ban ip or ip range?
- find other alternatives?
You may use the AdminFunctions to add well known spammer IPs to the BannedList. The admin bar appears after you typed in the admin pass in preferences and saved it. Contact me if you need the pass, DrOwl --mutante