[94227] in North American Network Operators' Group
Re: Comment spammers chewing blogger bandwidth like crazy
daemon@ATHENA.MIT.EDU (Owen DeLong)
Sat Jan 13 15:51:34 2007
In-Reply-To: <200701131953.l0DJrLtU010973@mailhub.Cadence.COM>
Cc: thomas@thomasleavitt.org, christopher.morrow@verizonbusiness.com,
nanog@merit.edu
From: Owen DeLong <owen@delong.com>
Date: Sat, 13 Jan 2007 12:32:17 -0800
To: Gregory Hicks <ghicks@cadence.com>
Errors-To: owner-nanog@merit.edu
--Apple-Mail-34--712907438
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=ISO-8859-1;
delsp=yes;
format=flowed
Surprise, a spammer is operating from IPs with fake registration data.
I'm shocked... NOT!
Owen
On Jan 13, 2007, at 11:53 AM, Gregory Hicks wrote:
>
>
>> Date: Sat, 13 Jan 2007 18:58:02 +0000 (GMT)
>> From: "Chris L. Morrow" <christopher.morrow@verizonbusiness.com>
>> Subject: Re: Comment spammers chewing blogger bandwidth like crazy
>> To: Thomas Leavitt <thomas@thomasleavitt.org>
>> Cc: nanog <nanog@merit.edu>
>>
>>
>>
>> On Sat, 13 Jan 2007, Thomas Leavitt wrote:
>>
>>> Why has 195.225.177.46, an IP in Ukraine, been eating a tremendous
>>> amount of bandwidth? What are they doing?
>>
>> this isn't in the ukraine, it's in NYC behind ISPrime. Phil is fairly
>> hhelpful, you might ask them to 'figure out what the heck is going =20=
>> on'
>> with that ip :)
>>
>> -Chris
>> (unless the ukraine got a whole lot closer to IAD than I thought:
>> 64 bytes from 195.225.177.46: icmp_seq=3D1 ttl=3D55 time=3D13.1 ms
>> 64 bytes from 195.225.177.46: icmp_seq=3D2 ttl=3D55 time=3D24.5 ms
>
> Um-m-m-m...
>
> % Information related to '195.225.176.0 - 195.225.179.255'
>
> inetnum: 195.225.176.0 - 195.225.179.255
> netname: NETCATHOST
> descr: NetcatHosting
> country: UA
> admin-c: VS1142-RIPE
> tech-c: VS1142-RIPE
> status: ASSIGNED PI
> mnt-by: RIPE-NCC-HM-PI-MNT
> mnt-lower: RIPE-NCC-HM-PI-MNT
> mnt-by: NETCATHOST-MNT
> mnt-routes: NETCATHOST-MNT
> notify: vs@netcathost.com
> changed: hostmaster@ripe.net 20040304
> source: RIPE
> remarks: ***************************************
> remarks: * Abuse contacts: abuse@netcathost.com *
> remarks: ***************************************
>
> person: Vsevolod Stetsinsky
> address: 01110, Ukraine, Kiev, 20=C1, Solomenskaya street. room =20=
> 206.
> phone: +38 050 6226676
> e-mail: vs@netcathost.com
> nic-hdl: VS1142-RIPE
> changed: vs@netcathost.com 20040303
> source: RIPE
>
>> )
>
> ---------------------------------------------------------------------
> Gregory Hicks | Principal Systems Engineer
> Cadence Design Systems | Direct: 408.576.3609
> 555 River Oaks Pkwy M/S 9B1
> San Jose, CA 95134
>
> I am perfectly capable of learning from my mistakes. I will surely
> learn a great deal today.
>
> "A democracy is a sheep and two wolves deciding on what to have for
> lunch. Freedom is a well armed sheep contesting the results of the
> decision." - Benjamin Franklin
>
> "The best we can hope for concerning the people at large is that they
> be properly armed." --Alexander Hamilton
>
--Apple-Mail-34--712907438
Content-Transfer-Encoding: base64
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Disposition: attachment;
filename=smime.p7s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=
--Apple-Mail-34--712907438--
