newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
1 edit | Spam from Comcast getting worse . . . not better
In direct contrast to what is being reported in the media, (March 18, 2004), spam being injected from Comcast is getting worse, not better.
Four new Comcast netblocks were added to the Spamhaus SBL today, bringing their listing to a total of 32 - two of which are ROKSO spammers.
Comcast SBL Listings
The four added today:
SBL15019 - 24.13.110.69/32 - Since SpamCop started counting, this system has been reported about 13010 times by about 580 users. It has been sending mail consistently for at least 50.3 days. In the past 50.0 days, it has been listed 8 times for a total of 32.8 days.
SBL15018 - 24.11.169.22/32 - Since SpamCop started counting, this system has been reported about 13600 times by about 900 users. It has been sending mail consistently for at least 77.3 days. In the past 96.3 days, it has been listed 7 times for a total of 47.2 days.
SBL15017 - 24.3.43.161/32 - Since SpamCop started counting, this system has been reported about 9250 times by about 800 users. It has been sending mail consistently for at least 61.3 days. In the past 60.2 days, it has been listed 2 times for a total of 22.2 days.
SBL15014 - 24.13.169.151/32 - Since SpamCop started counting, this system has been reported about 18600 times by about 950 users. It has been sending mail consistently for at least 59.3 days. In the past 58.1 days, it has been listed 4 times for a total of 51.4 days.
I'm beginning to think that Comcast is NOT serious about ridding their network of these spammers, but is more intent on spinning the media. Their record at Spamhaus shows just how soft they really are on spam.
Given that these four IPs represent 54,460 complaints, spanning to almost four months, with absolutely NO indication of any movement on Comcast's part to shut them down, I'm beginning to believe that they may represent Pink Contracts.
EDIT: It's worse than originally posted. The Spamhaus listings were old data. The number of complaints have been updated from current SpamCop listings.
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
makaze
Premium
join:2004-02-23
USA | sadly, I think they only way this will ever get taken care of is if comcast gets blocked massivly..
But then again, it's going to suck either way.. |
|
Dan Koerner
join:2000-08-05
Clinton, TN | reply to newview
Is there an incentive for ISPs to close spammer's accounts? Apparently not...
--
Dan |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
 ·LINGO
 ·Sprint Mobile Broa..
 ·surpasshosting
 ·Verizon FIOS
1 edit | reply to newview
Report on Comcast.net | 
New Hall of Shame Nominee |
24.13.169.151 has surpassed 24.0.102.160 (aka "Comcast Hall of Shame") in terms of daily mail volume. |
|
makaze
Premium
join:2004-02-23
USA | reply to newview
Looking at that list, most of the abusers are from ex-att areas.. (by seeing the .client.comcast.net addresses)
I wonder if they have 2 different abuse departments handling the complaints? |
|
Qumahlin
Never Enough Time
Premium,MVM
join:2001-10-05
united state
| said by makaze  :
Looking at that list, most of the abusers are from ex-att areas.. (by seeing the .client.comcast.net addresses)
I wonder if they have 2 different abuse departments handling the complaints?
Correct
--
Forum Posts:4100 |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| reply to makaze
Spam from Comcast getting worse . . . not bett
said by makaze :
Looking at that list, most of the abusers are from ex-att areas..
Hmmmm . . . AT&T was busted once back in November of 2000 for Pink Contracts. I wonder if these are now Comcast's pink contracts? quote:
"This proves that AT&T knowingly does business with spammers and shows that AT&T makes 'pink' contracts with known spammers to not terminate the spammers' services," Steve Linford of The Spamhaus Project wrote in an email interview.
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
Qumahlin
Never Enough Time
Premium,MVM
join:2001-10-05
united state
1 edit | said by newview :
said by makaze :
Looking at that list, most of the abusers are from ex-att areas..
Hmmmm . . . AT&T was busted once back in November of 2000 for Pink Contracts. I wonder if these are now Comcast's pink contracts? quote:
"This proves that AT&T knowingly does business with spammers and shows that AT&T makes 'pink' contracts with known spammers to not terminate the spammers' services," Steve Linford of The Spamhaus Project wrote in an email interview.
That was actual AT&T business services for hosting (Att.net)not ATTBI
--
Forum Posts:4100 |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| Spam from Comcast getting worse . . . not better
said by Qumahlin :
That was actual AT&T business services for hosting (Att.net)not ATTBI
Thanks for the clarification, Qumahlin .
Can you comment on why these IPs are not nuked and are still spewing?
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
Qumahlin
Never Enough Time
Premium,MVM
join:2001-10-05
united state
| said by newview :
said by Qumahlin :
That was actual AT&T business services for hosting (Att.net)not ATTBI
Thanks for the clarification, Qumahlin .
Can you comment on why these IPs are not nuked and are still spewing?
Not really =/ What I can comment on is IP services lack of taking multiple suggestions to block port 25 outbound on residential accounts...but lets not go there 
--
Forum Posts:4100 |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| said by Qumahlin :
Not really =/ What I can comment on is IP services lack of taking multiple suggestions to block port 25 outbound on residential accounts...but lets not go there
Well . . . some of us think Comcast is going to HAVE TO go there.
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
oldTDNickell
Premium
join:2000-12-19
Federal Way, WA | reply to Qumahlin
Qumahlin In the articie ISP gets tough,Comcast says setting up a personal firewall is becoming a customer requirement fo getting online.How can they do this with the self install programs they have today?
--
Terry D. |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| reply to makaze
Report on attbi.com |
said by makaze :
Looking at that list, most of the abusers are from ex-att areas.. (by seeing the .client.comcast.net addresses)
There are plenty of attbi.com IPs spewing as well. |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| reply to newview
said by newview :
said by Qumahlin :
Not really =/ What I can comment on is IP services lack of taking multiple suggestions to block port 25 outbound on residential accounts...but lets not go there
Well . . . some of us think Comcast is going to HAVE TO go there.
AOL seems to have found a way to implement policies that pay off.
said by Janis Mara, clickz.com, March 19, 2004:
AOL Reports Drops in Both E-Mail and Spam Volume
By tracking complaints and e-mail volume, AOL has been determining what PCs and servers on broadband networks are infected with viruses such as MyDoom, says Graham. AOL then traces the high volumes of complaints members send in about these machines and temporarily blocks e-mail from those sender IP addresses. The company also tracks member complaints and uses them to improve AOL's ability to limit their online members' access to sites identified as belonging to spammers, Graham says.
|
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| reply to newview
Sorbs added 204.127.198.35 to the list of IPs of known spam sources today.
Of the top 6 Comcast.net IPs, sorbs now lists 4 of them as sources of spam. They don't appear to be customer IPs.
204.127.198.39 rwcrmhc13.comcast.net
216.148.227.85 rwcrmhc12.comcast.net listed as a spam source by sorbs
204.127.202.64 sccrmhc13.comcast.net
204.127.202.56 sccrmhc12.comcast.net listed as a spam source by sorbs
204.127.202.55 sccrmhc11.comcast.net listed as a spam source by sorbs
204.127.198.35 rwcrmhc11.comcast.net listed as a spam source by sorbs |
|
LrdVader
Premium
join:2003-12-18
San Diego, CA
| said by JTRockville :
Sorbs added 204.127.198.35 to the list of IPs of known spam sources today.
Of the top 6 Comcast.net IPs, sorbs now lists 4 of them as sources of spam. They don't appear to be customer IPs.
Well, to be fair to Comcast, SORBS "spam source" list is really stupid. No matter how great an ISP's spam policy is, and how fast they kick spammers off once they start spamming, there's always going to be *some* spam that gets out. After all, there are no grounds to terminate for spamming until some spamming occurs. If one of those spams happens to hit one of their traps, that server is listed pretty much permanently, since no major ISP's bureaucracy is going to have a procedure in place for dealing with SORBS quasi-extortionist demand of a $50 donation for removal. So really, Comcast could completely shut down the spam tomorrow, and their servers might still never get out of SORBS.
The fact that Comcast is being stupid about their spam problem in no way changes the fact that SORBS is also being stupid about it. |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
1 edit | reply to newview
To get back to the question of WHY these four IPs are allowed to continue to spew, despite the horrendous number of complaints, over an embarrassingly long period of time . . . what possible reason(s) would Comcast have to allow this continue? It's absolutely ridiculous to allow that number of complaints to be documented without some definitive action. And, why is Comcast NOT working on eliminating their Spamhaus SBL listings? If they are so gung-ho about getting spammers off their network, as their spin-doctoring would seem to suggest, then why aren't they targeting the EXACT source of much of the media attention?
Another IP was added to the Spamhaus listings today, March 20, 2004 now bringing the total to 33. SBL15071 - 24.18.48.111/32 - Since SpamCop started counting, this system has been reported about 1470 times by about 60 users. It has been sending mail consistently for at least 21.3 days. It has been listed for 2.3 days.
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
2 edits | reply to newview
Two more added today, March 25, 2004 to bring the total to 35. This is pitiful.
SBL15216 - 24.19.21.106/32 - Since SpamCop started counting, this system has been reported about 12540 times by about 490 users. It has been sending mail consistently for at least 48.9 days. In the past 45.8 days, it has been listed 4 times for a total of 34.8 days.
SBL15215 - 24.3.33.169/32 - Since SpamCop started counting, this system has been reported about 15030 times by about 930 users. Since SpamCop started counting, this system has been reported about 15030 times by about 930 users. It has been sending mail consistently for at least 95.9 days. In the past 95.4 days, it has been listed 6 times for a total of 79.1 days.
Edit: Another added immediately after I posted to now make 36.
SBL15218 - 24.5.49.194/32 - Since SpamCop started counting, this system has been reported about 12630 times by about 570 users. It has been sending mail consistently for at least 33.9 days. In the past 33.7 days, it has been listed 2 times for a total of 28.8 days.
It just keeps getting worse and worse . . .
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
Nerdtalker
Working Hard, Or Hardly Working?
Premium,MVM
join:2003-02-18
Tucson, AZ
clubs: | reply to newview
Re: Spam from Comcast getting worse . . . not bett
It's almost to the point where people practically need to take it into their own hands to clean-out these spam bots. |
|
makaze
Premium
join:2004-02-23
USA | reply to newview
Re: Spam from Comcast getting worse . . . not better
36 comcast ips listed?
out of what 5+ million comcast subscribers? (which would mean close to 5 million ip addresses total) |
|
