[94224] in North American Network Operators' Group
Re: Comment spammers chewing blogger bandwidth like crazy
daemon@ATHENA.MIT.EDU (Chris L. Morrow)
Sat Jan 13 15:15:59 2007
Date: Sat, 13 Jan 2007 20:14:23 +0000 (GMT)
From: "Chris L. Morrow" <christopher.morrow@verizonbusiness.com>
In-reply-to: <200701131953.l0DJrLtU010973@mailhub.Cadence.COM>
To: Gregory Hicks <ghicks@cadence.com>
Cc: thomas@thomasleavitt.org, nanog@merit.edu
Errors-To: owner-nanog@merit.edu
On Sat, 13 Jan 2007, Gregory Hicks wrote:
>
> > Date: Sat, 13 Jan 2007 18:58:02 +0000 (GMT)
> > From: "Chris L. Morrow" <christopher.morrow@verizonbusiness.com>
> > Subject: Re: Comment spammers chewing blogger bandwidth like crazy
> > To: Thomas Leavitt <thomas@thomasleavitt.org>
> > Cc: nanog <nanog@merit.edu>
> >
> >
> >
> > On Sat, 13 Jan 2007, Thomas Leavitt wrote:
> >
> > > Why has 195.225.177.46, an IP in Ukraine, been eating a tremendous
> > > amount of bandwidth? What are they doing?
> >
> > this isn't in the ukraine, it's in NYC behind ISPrime. Phil is fairly
> > hhelpful, you might ask them to 'figure out what the heck is going on'
> > with that ip :)
> >
> > -Chris
> > (unless the ukraine got a whole lot closer to IAD than I thought:
> > 64 bytes from 195.225.177.46: icmp_seq=1 ttl=55 time=13.1 ms
> > 64 bytes from 195.225.177.46: icmp_seq=2 ttl=55 time=24.5 ms
>
> Um-m-m-m...
>
> % Information related to '195.225.176.0 - 195.225.179.255'
>
> inetnum: 195.225.176.0 - 195.225.179.255
> netname: NETCATHOST
> descr: NetcatHosting
yes, but 'whois info' is not often 'correct' especially in this case,
traceroute to it, unless ISPrime has some time-space vortex that ip
(that one of the /22) is actually in NYC. speed-o-light don't often lie...
