On Mon, 6 Sep 2010, Dennis German wrote:
On Sun, 5 Sep 2010, Dennis German wrote:
In the last several weeks I have been receiving a lot of spam with email
addresses of the form:
learningmadeeasy.???...@??????.yourseemlost.net
learningmadeeasy.???...@??????.hisoftenusing.net
learningmadeeasy.???...@??????.wheatdrinkcontrol.net
learningmadeeasy.????...@??????.actbookfelt.net
learningmadeeasy.????...@??????.stillstationwhether.net
learningmadeeasy.????...@??????.legbottleloss.net
and
accountingeducation.gpx...@oiteew.badpeoplepaper.net
accountingeducation.ihd...@aapufx.stillstationwhether
accountingeducation.ionm...@wxnuab.legbottleloss.net
accountingeducation.iqle...@mlmuwx.stillstationwhethe
and
affordablelifeinsurance.aj...@wiogif.constum.net
affordablelifeinsurance.ki...@pzodkk.injecou.net
How do we stop this guy?
John, thanks for the reply.
Sorry to mislead. SPAM was caught by spamassassin.
How can I get this guy stopped?
IP addresses are: 67.50.37.35,.36,.69,.75
Ah. Yes, that's a different question.
(1) Find out who owns those network addresses.
Use tools like http://enc.com.au/itools/inetnum.php and
http://enc.com.au/itools/person.php to do that.
(I provide .au tools as the ones in .us are overloaded at the moment.)
That tells us:
Network Number 67.50.0.0 - 67.51.255.255
Origin AS7385
NIC Handle NET-67-50-0-0-1
Status Direct Allocation
DNS Servers NS2.INTEGRAONLINE.COM
NS.INTEGRAONLINE.COM
Created 2003-06-20
2000-07-05
Changed 2008-11-03
2010-03-04
Description Integra Telecom, Inc.
1201 NE Lloyd
Suite 500
Portland
OR
97232
Country United States (US)
Abuse Contact ABUSE91-ARIN
Tech Contact ITIA-ARIN
NIC Handle ABUSE91-ARIN
Description Integra Telecom Inc.
19545 NW Von Neumann
Beaverton
OR
97006
Country United States (US)
Created 2002-10-30
Changed 2002-10-30
Phone +1-503-748-4511 (Office)
Email ab...@integratelecom.com
(2) Report the abuse to them.
Send an email to the abuse address reporting the offending IP addresses
and the nature of the abuse.
They may be resellers so they may send you on to a smaller entity that
owns those particular IP addresses
The owner will either have terms of service that prohibit spamming and
will try to stop the abuse, or are "spam-friendly" and will ignore you,
or possibly are a small company that is clueless and won't have any idea
what to do.
Keep logs of the traffic for evidence. The ISP may ask for them.
Best of luck.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
After ten years (1998-2008) of draconian gun control in the State
of Massachusetts, the results are in: firearms-related assaults up
78%, firearms-related homicides up 67%, assault-related emergency
room visits up 331%. Gun Control does not reduce violent crime.
-----------------------------------------------------------------------
10 days until the 223rd anniversary of the signing of the U.S. Constitution