[91129] in North American Network Operators' Group
Re: IP Delegations for Forum Spammers and Invalid Whois info
daemon@ATHENA.MIT.EDU (Simon Waters)
Wed Jul 5 05:56:02 2006
From: Simon Waters <simonw@zynet.net>
To: Phil Rosenthal <pr@isprime.com>
Date: Wed, 5 Jul 2006 10:55:29 +0100
Cc: Mark Foster <blakjak@blakjak.net>, nanog@nanog.org,
abuse@isprime.com, abuse@netcathost.com
In-Reply-To: <0815326C-06CF-43EB-AA06-C42687A1A089@isprime.com>
Errors-To: owner-nanog@merit.edu
On Monday 03 Jul 2006 16:26, Phil Rosenthal wrote:
>
> We are very much anti-spam and I will look into Mark's issue - I'm
> looking through the tickets for abuse@ and there is no email sent in
> from blakjak@blakjak.net ...
I suspect he tried abuse@netcathosting.com which seems to be in rfc-ignorant.
Looks like the server;
195.225.177.31
Has been spewing guest book spam (and wiki spam) out, as a quick google of
"195.225.177.31 nice site" will show hundreds of links, although quite a lot
of it just looks bizarre, and Dshield shows 80,000 odd reports port 80 probes
in the last month from this address.
We've just cleaned up a lot of address book spam promoted sites, so I know it
is relentless and tedious thing to squash.
