[anti-abuse-wg] Finally, a Canadian Pharmacy in... Canada!

>  Had to happen eventually... Canadian Health&Care Mall web site that's
>  the WHOIS records indicate is actually hosted in... Canada!

I think you should treat whois as contact-information only. It has often 
little or nothing to do with network/server presence.  Additionally, the 
country-field in an inetnum means the end users location, not 
necessarily the location of their servers.
Regardless of that, and particularly with todays virtualization 
technology, it can be impossible to tell if a server or website is or 
was located in Canada or Russia at some point in time since it can be 
moved in realtime with a proper network setup between any country, 
datacenter and network.


Cheers,



On 10/31/10 20:18, Ronald F. Guilmette wrote:
> Had to happen eventually... Canadian Health&Care Mall web site that's
> the WHOIS records indicate is actually hosted in... Canada!
>
> Of course, it _is_ the part of Canada that was annexed by the Ukraine,
> so there's that.
>
>
> www.canadianhealthcaremall.net == 109.72.146.38
>
> TRACEROUTE (using port 80/tcp)
> HOP RTT       ADDRESS
> 1   51.06 ms  3.255-62-69.res.dyn.surewest.net (69.62.255.3)
> 2   50.80 ms  172.21.2.57
> 3   49.56 ms  172.21.0.250
> 4   48.60 ms  245.98-30-64.ftth.swbr.surewest.net (64.30.98.245)
> 5   47.86 ms  te-4-1.car1.Sacramento1.Level3.net (4.53.200.9)
> 6   46.40 ms  ae-11-11.car2.Sacramento1.Level3.net (4.69.132.150)
> 7   52.54 ms  ae-4-4.ebr2.SanJose1.Level3.net (4.69.132.158)
> 8   58.01 ms  ae-82-82.csw3.SanJose1.Level3.net (4.69.134.218)
> 9   47.39 ms  ae-74-74.ebr4.SanJose1.Level3.net (4.69.134.245)
> 10  112.23 ms ae-2-2.ebr2.NewYork1.Level3.net (4.69.135.186)
> 11  113.03 ms ae-6-6.ebr2.NewYork2.Level3.net (4.69.141.22)
> 12  114.43 ms ae-1-100.ebr1.NewYork2.Level3.net (4.69.135.253)
> 13  121.82 ms ae-3-3.ebr2.Washington1.Level3.net (4.69.132.89)
> 14  211.52 ms ae-43-43.ebr2.Frankfurt1.Level3.net (4.69.137.57)
> 15  217.17 ms ae-72-72.csw2.Frankfurt1.Level3.net (4.69.140.22)
> 16  212.96 ms ae-71-71.ebr1.Frankfurt1.Level3.net (4.69.140.5)
> 17  229.44 ms ae-1-12.bar1.Budapest1.Level3.net (4.69.141.249)
> 18  284.67 ms UKRTELECOM.bar1.Budapest1.Level3.net (212.162.26.6)
> 19  ...
> 20  241.85 ms 213.186.119.74.utel.net.ua (213.186.119.74)
> 21  246.26 ms 109.72.146.38
>
>
> =========================================================================
> % This is the RIPE Database query service.
> % The objects are in RPSL format.
> %
> % The RIPE Database is subject to Terms and Conditions.
> % See http://www.ripe.net/db/support/db-terms-conditions.pdf
>
> % Information related to '109.72.144.0 - 109.72.151.255'
>
> inetnum:        109.72.144.0 - 109.72.151.255
> netname:        TANGRAM-CA
> descr:          Main colocation pool
> country:        EU
> admin-c:        tang2-ripe
> tech-c:         tcnc-ripe
> status:         ASSIGNED PA
> mnt-by:         TANGRAM-MNT
> mnt-routes:     TANGRAM-MNT
> mnt-routes:     AS6849-MNT
> changed:        taras at tangramltd.com 20100825
> source:         RIPE
>
> role:           Tangram NOC
> address:        Canada, Etobicoke, Ontario M9A 4X7
> address:        24 Mabelle ave.
> e-mail:         noc at tangram.ws
> remarks:        Contact information:
> remarks:        Network security issues: abuse at tangram.ws
> remarks:        Routing and peering issues: noc at tangram.ws
> remarks:        Domain name system questions: noc at tangram.ws
> remarks:        Mail system issues: postmaster at tangram.ws
> abuse-mailbox:  abuse at tangram.ws
> admin-c:        tang2-ripe
> tech-c:         nale-ripe
> tech-c:         SAP69-RIPE
> nic-hdl:        tcnc-ripe
> mnt-by:         TANGRAM-MNT
> changed:        taras at tangramltd.com 20091027
> source:         RIPE
>
> person:         Tsebro Oleksandr
> address:        Canada, Etobicoke, Ontario M9A 4X7
> address:        24 Mabelle ave.
> phone:          +1 877 5319597
> e-mail:         alex at tangram.ws
> nic-hdl:        tang2-ripe
> mnt-by:         TANGRAM-MNT
> changed:        yuriy at tangramltd.com  20090914
> source:         RIPE
>
>