Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I've recently received a spam email that links to a website of legally doubtful content. How can I find out the Internet provider for the site, such that I can complain about the site? The whois-service gives some information, but the data seems to be about the domain registration, not the actual hosting provider or ISP. Is there some other service where I can find out who to complain to? Or am I just reading the whois output wrong?

share|improve this question
    
What are you trying to achieve exactly? If they host their own server its unlikely you will have any luck shutting them down, even if you do, they can replace their server within hours. –  Ramhound Feb 25 '13 at 11:41

3 Answers 3

The question is a bit tricky. Whois is normally a good place to start as it gives you a feel for the site, including the nameservers which, if often, but not always give you a hint about the hosting provider.

In order to work out where a site is located, you need to get its IP address. This is as easy as doing a "ping" to the site. Even better, if you use traceroute it will show you all the hops between your computer and that site - and usually the hops immediately before will give you a clue of their ISP's router. Importantly, using traceroute will do a reverse lookup on the domains and this will help you work out who their ISP is. You can then google the results to try and find a contact detail for their domain name.

Another technique might be to look and see how mail is handled for the site, and see if there is a link (again, not always). To do this you need to do a DNS lookup for the MX record for the site. (Googling "MX Lookup") should help you come up with a tool for this. If they are farming their mail out to an ISP, you should be able to do a WHOIS to find more about the ISP and contact them.

share|improve this answer

If you look up their IP address, you can run a WHOIS on that IP to get the registration info for that address (which would include the ISP).

share|improve this answer
    
While a Whois is a good idea, it does not include their ISP, it includes their registrar and technical contact - if you are lucky. –  davidgo Feb 25 '13 at 7:54
1  
@davidgo Not if you run a whois on the IP address. That shows the IP registration info, not the domain name info. –  cpast Feb 25 '13 at 8:06
    
That is a good technique. Of-course, it doesn't help if the ISP is purchasing a block of space from a bigger ISP who has the ARIN/APNIC/RIPE/AFRINIC etc block, but definately worth pointing out. The key being to do the whois on the IP rather then the domain. –  davidgo Feb 25 '13 at 8:16
    
@davidgo This does get you contact info for the ISP, so you can report abuse there. –  cpast Feb 25 '13 at 8:17
    
The given rule for contacting an abuse departments at any given isp is to use abuse@<isp_name>.com. That address almost always works. –  MaQleod Feb 25 '13 at 17:13

Once you find out IP, you have to go to the right Organisation. Now ICAAN have designated IPv4 range to huge organisation like apnic.net (for asia pacific) and ripe.net (for europe region). You can WHOIS search and find out to which organisation does the IP belongs to? And Later you may contact to corresponding organisation. I hope they might help.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.