Contacting ISP re: CC fraud
Hi there guys, Hope you can possibly help. I have a situation where a member using a yahoo email account has located a credit card list and is utilizing it on our website. The person has used over 200 credit card numbers and many have been successful. I have log's of IP addresses and traced it to the following IP block owner. Instituto Tecnologico y de Estudios Superiores de Monterrey REDMEX-BNETS (NET-148-203-0-0-1) 148.203.0.0 - 148.250.255.255 Universidad Autonoma De Ciudad Juarez UACJ (NET-148-210-0-0-1) 148.210.0.0 - 148.210.255.255 Some of the IP addresses are as follows: 148.210.126.238 148.210.126.228 146.210.116.193 Doing a traceroute only gave me their ISP's uplink reverse, AT&T. How can I get in touch with this ISP to ensure this person is caught. Kindest Regards Barry Murphy Systems Administrator http://www.cashevolution.com http://www.cashevolution.com/
This stuff strikes me as obvious enough - as a sysadmin I would expect a lot of this is fairly logical proceedure for dealing with network abuse. Ever heard of whois? Try browsing www.arin.net to start with. If the whois results are only what you quoted below, you can also perform a whos on the results as they are in the brackets and get further information (eg whois -h whois.arin.net NET-148-210-0-0-1) You have a domain? abuse(a)domain, postmaster(a)domain are good starting points. You could also whois the domain and obtain contact details. Whois via IP or domain will generally generate contact details including name, address and telephone. Mark. At 12:41 p.m. 17/10/2002 +1300, you wrote:
Hi there guys,
Hope you can possibly help. I have a situation where a member using a yahoo email account has located a credit card list and is utilizing it on our website. The person has used over 200 credit card numbers and many have been successful.
I have log's of IP addresses and traced it to the following IP block owner.
Instituto Tecnologico y de Estudios Superiores de Monterrey REDMEX-BNETS (NET-148-203-0-0-1) 148.203.0.0 - 148.250.255.255 Universidad Autonoma De Ciudad Juarez UACJ (NET-148-210-0-0-1) 148.210.0.0 - 148.210.255.255
Some of the IP addresses are as follows: 148.210.126.238 148.210.126.228 146.210.116.193
Doing a traceroute only gave me their ISP's uplink reverse, AT&T. How can I get in touch with this ISP to ensure this person is caught.
Kindest Regards Barry Murphy Systems Administrator http://www.cashevolution.com/http://www.cashevolution.com
- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
At 13:03 17/10/2002 +1300, Mark Foster wrote:
This stuff strikes me as obvious enough - as a sysadmin I would expect a lot of this is fairly logical proceedure for dealing with network abuse.
He runs one of the biggest SPAM/MLM schemes in New Zealand, so its not surprising he doesn't know how "whois" works and doesn't trust that a remote ISP will actually respond to "abuse@" complaints (hell, we know HIS one didn't eh seeby ?) Maybe he just needs to be beaten about the head a few times with a very large clue stick. -- Steve. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
The stick approach always has postive results. Glen Wilson Senior Engineer and Administrator Network Operations Shift Supervisor Ihug, Auckland, New Zealand On Thu, 17 Oct 2002, Steve Phillips wrote:
At 13:03 17/10/2002 +1300, Mark Foster wrote:
This stuff strikes me as obvious enough - as a sysadmin I would expect a lot of this is fairly logical proceedure for dealing with network abuse.
He runs one of the biggest SPAM/MLM schemes in New Zealand, so its not surprising he doesn't know how "whois" works and doesn't trust that a remote ISP will actually respond to "abuse@" complaints (hell, we know HIS one didn't eh seeby ?)
Maybe he just needs to be beaten about the head a few times with a very large clue stick.
-- Steve.
- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
participants (4)
-
Barry ＠ CASHevolution Support -
Glen Wilson -
Mark Foster -
Steve Phillips