On 5/10/2013 2:48 AM, Reza Farzan wrote:

Hello All,

Just received a Spam from (sebastien.ronteau@pbcards.dp.ua@134.105.185.144) and as I found out this IP belongs to Max-Planck-Institute Stuttgart.

My IANA based look up gives me the following results for 134.105.185.144:

---------------------
Waiting for Whois server Default - IANA ...WhoIs Session started: 10/05/13 13:53:22. +++++++++++++++
Contacting Whois proxy: whois.arin.net at 199.71.0.47
Connected: 10/05/13 13:53:22. +++++++++++++++

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
#     "n 134.105.185.144"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=134.105.185.144?showDetails=true&showARIN=false&ext=netref2
#

NetRange:       134.91.0.0 - 134.110.255.255
CIDR:           134.110.0.0/16, 134.108.0.0/15, 134.96.0.0/13, 134.104.0.0/14, 134.92.0.0/14, 134.91.0.0/16
OriginAS:
NetName:        RIPE-ERX-134-91-0-0
NetHandle:      NET-134-91-0-0-1
Parent:         NET-134-0-0-0-0
NetType:        Early Registrations, Transferred to RIPE NCC
Comment:        These addresses have been further assigned to users in
Comment:        the RIPE NCC region. Contact information can be found in
Comment:        the RIPE database at http://www.ripe.net/whois
RegDate:        2003-11-26
Updated:        2003-11-26
Ref:            http://whois.arin.net/rest/net/NET-134-91-0-0-1

OrgName:        RIPE Network Coordination Centre
OrgId:          RIPE
Address:        P.O. Box 10096
City:           Amsterdam
StateProv:
PostalCode:     1001EB
Country:        NL
RegDate:
Updated:        2011-09-24
Ref:            http://whois.arin.net/rest/org/RIPE

ReferralServer: whois://whois.ripe.net:43

OrgTechHandle: RNO29-ARIN
OrgTechName:   RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef:    http://whois.arin.net/rest/poc/RNO29-ARIN

OrgAbuseHandle: RNO29-ARIN
OrgAbuseName:   RIPE NCC Operations
OrgAbusePhone: +31 20 535 4444
OrgAbuseEmail: hostmaster@ripe.net
OrgAbuseRef:    http://whois.arin.net/rest/poc/RNO29-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Closing connection
WhoIs Session Closed: 10/05/13 13:53:22. +++++++++++++++

---------------------
Arnold

The only contact listed for this IP range listed in the Whois listing is netz@mpis.mpg.de which happens to be an invalid address:
 
netz@mpis.mpg.de

SMTP error from remote mail server after RCPT TO:<netz@mpis.mpg.de>:
    host mail.is.mpg.de [134.105.242.5]: 550 address netz@mpis.mpg.de is unknown or disabled
Does anyone here has or knows a better network contact for Max-Planck-Institute Stuttgart?

This case reminds me of my previous inquiry about a Network without contact, even an important institution such as Max-Planck-Institute Stuttgart.

I certainly appreciate your assistance in this matter.

Thank you,

Reza Farzan
rezaf@mindspring.com

-- 
Fight Spam - report it with wxSR 0.6 
ready for Vista & Win7
http://www.columbinehoney.net/wxSR.shtml