North American Network Operators Group|
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Re: WARNING: Whois mining operation (probably spam related).
- From: Tony Rowley
- Date: Sun Feb 03 07:02:24 2002
On Sun, 3 Feb 2002, Scott Francis wrote:
> On Sun, Feb 03, 2002 at 02:34:46AM -0600, firstname.lastname@example.org said:
> > Starting about 6am eastern time, we began getting several hundred hits per
> > second from IP address 184.108.40.206 to our WHOIS server.
> > It appears that they were running a rather well endowed dictionary against
> > the database.
> > Beware - these are spammers (I know the address very well). Check your logs
> > if you have any email servers or whois databases.
> > This is a jerk from England who is a known fraudster.
> [sfrancis@silverlight:~]$ whois -r 220.127.116.11
> descr: Please forward abuse issues
> descr: to email@example.com
> If this guy is obviously spamming, or data mining in preparation for
> spamming, it seems that blueyonder.co.uk could be contacted to have his
> access yanked. Failing that, cableinet.net could be contacted to have
> blueyonder.co.uk yanked.
> Of course, you may have already tried this and received little/no
> cooperation. *sigh*
Good luck dealing with blueyonder - they won't accept complaints sent by
means other than their webform.
Tony Rowley firstname.lastname@example.org |"No oath, no pledge, no vow greater than
Netaxs Internet Services | this: to never give up."
Philadelphia PA USA | - Kevin Smith