You are here: Home > Participate > Join a Discussion > Mailman Archives

Re: [anti-spam-wg] ip -> abuse mail

  • From: Jesus Sanz de las Heras <jesus.heras@localhost
  • Date: Wed, 08 Feb 2006 13:20:17 +0100
  • Organization: Red.es/RedIRIS

Maxim V. Tulyev escribió:
> Hi!
> 
> I'm under large DDoS from at least 30000 hosts (seems like botnet). Now I 
> trying to find out all envolved bots and send an abuse report to their 
> admin/tech-c or abuse team. So I need automated ip -> admin/abuse mail 
> conversion based on (not only) RIPE db.
> 
> I beleive this is common task, so does anybody have a code for it?

COuld be very usefull  cyberabuse.org whois

whois -h whois.cyberabuse.org x.x.x.x | grep -i mail

Would not it be simpler to block those IPs?

Regards

-- 
Jesús Sanz de las Heras         RedIRIS (National Research Network)
Red.ES/RedIRIS                  Tel:+34 91 212 76 25 (ext. 4319)
Edificio Bronce
Plaza Manuel Gómez Moreno, s/n
28020 Madrid		      		
SPAIN        Coordinador Servicio correo electrónico de RedIRIS
             Responsable Servicio Listas de Distribucion RedIRIS
- Red Academica y Científica española (http://www.rediris.es/) -