[Nlnog] Spammer bij Grafix?

Raymond Dijkxhoorn raymond at prolocation.net
Thu Dec 18 21:32:37 UTC 2008


Hi!

route:          91.199.50.0/24
descr:          Netrouting Data Facilities
origin:         AS16131
mnt-by:         GFX-MNT
source:         RIPE # Filtered

In dit netblock zijn sites gehost die op groote schaal gespammed worden.

Kan iemand van Grafix, of Netrouting hier ophelderingover geven?

Examples:

new--product--direct.info
new--product-direct.com
new--product-direct.net
product-daily-direct.com
daily-product-direct.net
earth-online-access.net
new--product--direct.org
net-direct-product.com
net-direct-product.net
net-direct-product.org
product-daily--direct.com
new-products-direct.com
net--direct-product.org
net-direct--product.com
net--direct-product.info
net-direct--product.org
new--products-direct.com
net--direct--product.com
net--direct--product.net
net--direct--product.info
new-products--direct.com
net--direct--product.org
net-direct-products.net
net-direct-products.info
net-direct-products.org
net--direct-products.net
net--direct-products.org
net--direct-products.com
net--direct--products.org
net-direct-products.com
direct-net-products.org
direct-net-products.info
direct--net-products.com
direct--net-products.net
direct--net-products.org
direct--net-products.info
direct-net--products.info
direct-net--products.org
daily--product-direct.org
new-direct-product.com
new-direct-product.net
direct-net--products.net

[root at control ~]# grep 91.199.50.101 /tmp/pipeaspam-debug  | wc -l
818

De laatste weken rond de 1000 al.

Iemand, vind dit een beetje brrrr zo dicht bij huis....

Bye,
Raymond.




More information about the NLNOG mailing list