Page 2 of 3 FirstFirst 123 LastLast
Results 26 to 50 of 60
  1. #26
    Join Date
    Mar 2008
    Location
    Los Angeles, CA
    Posts
    555
    Here is just the amount of spam emails per day in my personal email address:
    Nov 1: 147
    Nov 2: 127
    Nov 3: 159
    Nov 4: 170
    Nov 5: 169
    Nov 6: 195
    Nov 7: 183
    Nov 8: 176
    Nov 9: 173
    Nov 10: 169
    Nov 11: 142
    Nov 12: 45
    Nov 13: 8
    Its only 7 hours into November 13th but yeah Nov 12th was an all-time low.

  2. #27
    Join Date
    Dec 2002
    Location
    USA
    Posts
    339
    Many folks have the Softlayer IP range banned due to spam/phishing. We never get a response when we send abuse reports. We just sent an email to abuse@softlayer due to an attempted server intrusion from one of their IP's, not even a courtesy autoresponder.
    http://i37.tinypic.com/j5f0p1.jpg

  3. #28
    Join Date
    Feb 2004
    Location
    Your Screen
    Posts
    3,999
    Interesting ... I had about a half-dozen spams (pharmacy, as I recall) from Softlayer in the last month -- I reported them through SpamCop.
    Do we need to start a Data Center Wall of Shame thread???
    Bailey

  4. #29
    Join Date
    Dec 2002
    Location
    USA
    Posts
    339
    Softlayer IP ranges tagged for spam:
    67.228.0.0/16
    http://www.senderbase.org/senderbase_queries/detailip?search_string=67.228.0.0%2F16
    74.86.0.0/16
    http://www.senderbase.org/senderbase_queries/detailip?search_string=74.86.0.0%2F16
    75.126.0.0/16
    http://www.senderbase.org/senderbase_queries/detailip?search_string=75.126.0.0%2F16
    208.101.0.0/18
    http://www.senderbase.org/senderbase_queries/detailip?search_string=208.101.0.0%2F18

  5. #30
    Let's have a closer look at McColo:
    http://voices.washingtonpost.com/securityfix/2008/11/the_badness_that_was_mccolo.html?nav=rss_blog

  6. #31
    Join Date
    Apr 2003
    Location
    San Jose, CA.
    Posts
    1,624
    Host of spam groups cut off
    While its gleaming, state-of-the-art, 30-story office tower in downtown San Jose, Calif., hardly looks like the staging ground for what could be called a full-scale cyber crime offensive, security experts have found that a relatively small firm at that location is home to servers that serve as a gateway for a significant portion of the world's junk e-mail.
    I was curious as to which building they are referring to...
    I'm aware of at least one private cage McColo has in a datacenter in downtown SJC, but it's not in a 30 story office tower.

  7. #32
    Join Date
    Feb 2004
    Location
    Fort Worth, TX
    Posts
    2,586
    I have also seen a 45% decrease in spam over our local office network of about 25 computers. Nice to see this!

  8. #33
    McColo White Paper:
    http://hostexploit.com/downloads/Hostexploit%20Cyber%20Crime%20USA%20v%202.0%201108.pdf

  9. #34
    Join Date
    Jul 2005
    Location
    Los Angeles, California
    Posts
    1,370
    This is great. Our email logs are usually around 1 million entries per day. On the day they shut down McColo, it dropped to about 500K. Today (first full day with them offline) it was 300K.

    I can confirm that. Today, my inbox only had 2 spam messages compared to the usual 10-20 for my account.
    I just read about McColo in the LA Times today and I was pretty shocked that it wasn't handled earlier. According to them, there were numerous attempts to call them and email them to get them to shut down their spammers but apparently, McColo just ignored all of them. Good riddance to all of the spam, however, I'm not sure how long this will last.

  10. #35
    Join Date
    Feb 2004
    Location
    Your Screen
    Posts
    3,999
    Be sure to grab that White Paper. SoftLayer is presented as a 'major cog on the wheel.' (my words)
    So much for SoftLayer's reputation ....... un-freakin'-believable.
    Bailey

  11. #36
    Join Date
    Aug 2006
    Location
    Ashburn VA, San Diego CA
    Posts
    4,615
    Be sure to grab that White Paper. SoftLayer is presented as a 'major cog on the wheel.' (my words)
    So much for SoftLayer's reputation ....... un-freakin'-believable.
    Bailey
    Even worse, GNAX is listed towards the end as one of the top three child porn hosters...

  12. #37
    Softlayer IP ranges tagged for spam:
    67.228.0.0/16
    http://www.senderbase.org/senderbase_queries/detailip?search_string=67.228.0.0%2F16
    The host names in that block are interesting. It would seem that ironport.com and spamcop.net are calling spamarrest.com spammers.

  13. #38
    Join Date
    Apr 2002
    Location
    USA
    Posts
    5,783
    Even worse, GNAX is listed towards the end as one of the top three child porn hosters...
    Now that would surprise me as fast as they get on to me for any abuse reports.
    I just read that report again and it hardly says Gnax is one of the top 3 hosters of child porn. Your reading comprehension must be a little off.
    Research and contribution has shown at least 40 confirmed CP websites, name servers, and CP payment systems recently served by McColo. With sub-domains, and associated links it is also the tip of the iceberg, however. As indicated earlier, with McColo and modern cyber criminal techniques these websites and domains move locations very rapidly, as in shuffling a deck of cards. In these cases, at the time of investigation, the websites and domains in question are also co-hosted or name served by: AS12578 APOLLO LATTELEKOM Latvia AS3595 Global Net Access, LLC 1100 White Street Atlanta, GA USA AS9121 TTNet TURKEY (via - AbdAllah Internet Hizmetleri)It is simply stating that some of the domains have moved to or the name servers DNS are dual hosted at the above mentioned host.
    Big indictment to say they are one the 3 main hosters of child porn in the world.
    Spreading a rumor like that could get you sued.
    Any how I alerted Sailor to this thread, I am sure he will want to clarify and maybe have a word with you about your assertion that he is in child porn.

  14. #39
    Join Date
    Feb 2004
    Location
    Your Screen
    Posts
    3,999
    It would seem that ironport.com and spamcop.net are calling spamarrest.com spammers.
    Maybe there's a side to spamarrest.com that we don't know about ... ?? Not saying it's true, just pointing out it is a possibility.
    FWIW, I have received 4 or 5 spams from the Global Crossing network in the last 24 hours. I keep reporting them ... one of the servers on their network that I reported, I received more spam from (same server but different domain) about 8 hours after my first report!!
    So much for speedy attention to things...
    It's disgusting.
    Bailey

  15. #40
    Join Date
    Sep 2005
    Location
    Canada
    Posts
    646
    That is absolutely beautiful. The botnets being taken down is fantastic, thats probably months or years of work by the spammers up in smoke. They won't be easy to replace.
    I hope the police go through their customer lists carefully.

  16. #41
    Join Date
    Aug 2006
    Location
    Ashburn VA, San Diego CA
    Posts
    4,615
    I admit to misreading the article, and in fact the three hosts listed are only "associated" with CP and not in any way "top" supporters.
    Before anyone else gets their panties twisted, know that I've already asked the mods to edit/remove my assertion.
    Having two young daughters, I am a bit sensitive to the topic. Hopefully the hosts have done what is right and removed the filth from their networks.

  17. #42
    Join Date
    Aug 2006
    Location
    Ashburn VA, San Diego CA
    Posts
    4,615
    Maybe there's a side to spamarrest.com that we don't know about ... ?? Not saying it's true, just pointing out it is a possibility.
    Those are just reverse DNS pointers; they might not actually be owned by the company, although it does seem very strange.

  18. #43
    Join Date
    Dec 2002
    Location
    USA
    Posts
    339
    The host names in that block are interesting. It would seem that ironport.com and spamcop.net are calling spamarrest.com spammers.
    "SpamArrest replies to Politech, defends its right to spam"
    http://www.politechbot.com/p-04457.html
    "Do not use "SpamArrest" ('Spam Filter')
    Have just found out that they Spam your email senders"
    http://www.webmasterworld.com/forum22/1064.htm

  19. #44
    Join Date
    Dec 2001
    Location
    Houston Texas
    Posts
    4,420
    Even worse, GNAX is listed towards the end as one of the top three child porn hosters...
    Your statement is erroneous and false. I just read the statement and all it said was that at the time of the release of the report there were some domains hosted at these 3 locations and further explains that this host moves the domains around from host to host very rapidly - likely because any responsible host will shut it down on reciept of a complaint.
    We do the same - I am glad you understand the false statement you made and its wreckless nature and we accept your appolgy and retraction.

  20. #45
    "SpamArrest replies to Politech, defends its right to spam"
    http://www.politechbot.com/p-04457.html
    "Do not use "SpamArrest" ('Spam Filter')
    Have just found out that they Spam your email senders"
    http://www.webmasterworld.com/forum22/1064.htm
    That's very interesting. Definitely some major accusations with that one.

  21. #46
    Join Date
    Feb 2004
    Location
    Your Screen
    Posts
    3,999
    "SpamArrest replies to Politech, defends its right to spam"
    http://www.politechbot.com/p-04457.html
    "Do not use "SpamArrest" ('Spam Filter')
    Have just found out that they Spam your email senders"
    http://www.webmasterworld.com/forum22/1064.htm
    Do you have anything more current than from 5.5 years ago???
    Bailey

  22. #47
    Join Date
    Dec 2002
    Location
    USA
    Posts
    339
    What is amusing is that if you query some of those sites mentioned in the Wash Post article, some are still alive.
    Example: Fraudcrew.com
    IP: 64.62.171.193
    Hosted By: Hurricane Electric, Inc.

  23. #48
    Join Date
    Dec 2007
    Location
    Indiana, USA
    Posts
    19,196
    What is amusing is that if you query some of those sites mentioned in the Wash Post article, some are still alive.
    Example: Fraudcrew.com
    IP: 64.62.171.193
    Hosted By: Hurricane Electric, Inc.
    Doesn't load for me, and http://downforeveryoneorjustme.com/Fraudcrew.com says it's down as well...

  24. #49
    Join Date
    Jul 2005
    Location
    Belgium
    Posts
    507
    What is amusing is that if you query some of those sites mentioned in the Wash Post article, some are still alive.
    Example: Fraudcrew.com
    IP: 64.62.171.193
    Hosted By: Hurricane Electric, Inc.
    Yes, gone with the wind.

  25. #50
    Join Date
    Feb 2004
    Location
    Your Screen
    Posts
    3,999
    For now.
    Bailey

Page 2 of 3 FirstFirst 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •