On Mon, 6 Sep 2010, Dennis German wrote:

On Sun, 5 Sep 2010, Dennis German wrote:

In the last several weeks I have been receiving a lot of spam with email 
addresses of the form:

learningmadeeasy.???...@??????.yourseemlost.net
learningmadeeasy.???...@??????.hisoftenusing.net
learningmadeeasy.???...@??????.wheatdrinkcontrol.net
learningmadeeasy.????...@??????.actbookfelt.net
learningmadeeasy.????...@??????.stillstationwhether.net
learningmadeeasy.????...@??????.legbottleloss.net

and
accountingeducation.gpx...@oiteew.badpeoplepaper.net
accountingeducation.ihd...@aapufx.stillstationwhether
accountingeducation.ionm...@wxnuab.legbottleloss.net
accountingeducation.iqle...@mlmuwx.stillstationwhethe

and

affordablelifeinsurance.aj...@wiogif.constum.net
affordablelifeinsurance.ki...@pzodkk.injecou.net

How do we stop this guy?

John, thanks for the reply.

Sorry to mislead. SPAM was caught by spamassassin.
How can I get this guy stopped?
IP addresses are: 67.50.37.35,.36,.69,.75

Ah. Yes, that's a different question.

(1) Find out who owns those network addresses.

Use tools like http://enc.com.au/itools/inetnum.php and http://enc.com.au/itools/person.php to do that.

(I provide .au tools as the ones in .us are overloaded at the moment.)

That tells us:
Network Number  67.50.0.0 - 67.51.255.255
Origin  AS7385
NIC Handle      NET-67-50-0-0-1
Status  Direct Allocation
DNS Servers     NS2.INTEGRAONLINE.COM
NS.INTEGRAONLINE.COM
Created         2003-06-20
2000-07-05
Changed         2008-11-03
2010-03-04
Description     Integra Telecom, Inc.
1201 NE Lloyd
Suite 500
Portland
OR
97232
Country         United States (US)
Abuse Contact   ABUSE91-ARIN
Tech Contact    ITIA-ARIN

NIC Handle      ABUSE91-ARIN
Description     Integra Telecom Inc.
19545 NW Von Neumann
Beaverton
OR
97006
Country         United States (US)
Created         2002-10-30
Changed         2002-10-30
Phone   +1-503-748-4511 (Office)
Email   ab...@integratelecom.com

(2) Report the abuse to them.

Send an email to the abuse address reporting the offending IP addresses and the nature of the abuse.

They may be resellers so they may send you on to a smaller entity that owns those particular IP addresses

The owner will either have terms of service that prohibit spamming and will try to stop the abuse, or are "spam-friendly" and will ignore you, or possibly are a small company that is clueless and won't have any idea what to do.

Keep logs of the traffic for evidence. The ISP may ask for them.

Best of luck.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  After ten years (1998-2008) of draconian gun control in the State
  of Massachusetts, the results are in: firearms-related assaults up
  78%, firearms-related homicides up 67%, assault-related emergency
  room visits up 331%. Gun Control does not reduce violent crime.
-----------------------------------------------------------------------
 10 days until the 223rd anniversary of the signing of the U.S. Constitution

Reply via email to