How can I obtain the abuse e-mail address for IPs from Japan?

Wed Aug 23 15:52:38 UTC 2017

Kurt

I see contact info for KW419JP maybe I don't understand what you are
looking for.

On Wed, Aug 23, 2017 at 10:16 AM, Kurt Kraut <listas at kurtkraut.net> wrote:

> Hello Suresh,
>
>
> It doesn't seem to help a lot:
>
> ktk at ktk:~$ whois -h whois.nic.ad.jp 59.106.13.181
> [ JPNIC database provides information regarding IP address and ASN. Its use
>   ]
> [ is restricted to network administration purposes. For further
> information,  ]
> [ use 'whois -h whois.nic.ad.jp help'. To only display English output,
>    ]
> [ add '/e' at the end of command, e.g. 'whois -h whois.nic.ad.jp xxx/e'.
>    ]
>
> Network Information:
> a. [Network Number]             59.106.12.0-59.106.27.255
> b. [Network Name]               SAKURA-NET
> g. [Organization]               SAKURA Internet Inc.
> m. [Administrative Contact]     KT749JP
> n. [Technical Contact]          KW419JP
> p. [Nameserver]                 ns1.dns.ne.jp
> p. [Nameserver]                 ns2.dns.ne.jp
> [Assigned Date]                 2004/11/24
> [Return Date]
> [Last Update]                   2004/11/24 18:41:02(JST)
>
> Less Specific Info.
> ----------
> SAKURA Internet Inc.
>                      [Allocation]
> 59.106.0.0/16
>
> More Specific Info.
>
>
>
> No e-mail addresses of the abuse team or NOC or SOC.
>
>
> Best regards,
>
>
> Kurt Kraut
>
> 2017-08-23 11:55 GMT-03:00 Suresh Ramasubramanian <ops.lists at gmail.com>:
>
> > whois -h whois.nic.ad.jp IP /e
> >
> > --srs
> >
> > > On 23-Aug-2017, at 7:38 PM, Kurt Kraut <listas at kurtkraut.net> wrote:
> > >
> > > Hello,
> > >
> > >
> > > I'm having a hard time to figure out the abuse e-mail address for IPs
> > from
> > > Japan. Any query I perform at the WHOIS, for any IP, from any
> autonomoyus
> > > system I get the same e-mail addresses:
> > >
> > > abuse at apnic.net
> > > hm-changed at apnic.net
> > > ip-apnic at nic.ad.jp
> > > hostmaster at nic.ad.jp
> > >
> > > These e-mail addresses belong to JPNIC, not the autonomous system
> itself.
> > > So any messages sent to these e-mail addresses will not reach the
> > offending
> > > NOC/SOC so I can report vulnerabilities and DDoS attacks.
> > >
> > > What am I missing and how should I report security issues to autonomous
> > > systems from this region? Has anyone here any experience on this?
> > >
> > >
> > > Thanks in advance,
> > >
> > >
> > > Kurt Kraut
> >
>

-- 
- Andrew "lathama" Latham -