Search:  

 
 
   News
newer
Comcast Spam Getting Worse?
Blacklistings grow, worst culprits left alone
(old news - 02:43PM Friday Mar 19 2004)
tags: spam
We were the first to report that Comcast was sending letters to users whose machines have been compromised for use as spam relays. Despite the subsequent mainstream media reports that claim the company is "getting tough" on spam, users in our Comcast forum argue the problem is actually getting worse. Four new Comcast netblocks were added to the Spamhaus SBL yesterday and Senderbase records continue to paint a very unflattering picture. As one of our users points out, four Comcast IP's alone are responsible for over 54,460 spam complaints in the past four months.

Related:
  1. Scammers Try To Salvage McColo Data
  2. McColo Closure Forces BotNet Shift
  3. Can Spam Act Celebrates Five Years Of Ineffectiveness
  4. Google #4 On Spamhaus Spam Network List
  5. AT&T Slammed For Text Message Spam
  6. Verizon To Finally Crack Down On Spam
  7. Your Constitutional Right To Spam
  8. FTC Shuts Down 'Rogue' ISP
Forums » Comcast Spam Getting Worse?
view: topics flat text 
Post a:

meskinct
Mad Scientist at Work
Premium
join:2002-01-07
Danbury, CT
clubs:

1 edit

Yeah it is!

Just looked through my SPAM folder and half of them originate from Comcast IPs.

Edit: 1st post!
nick s

join:2003-11-28
Marietta, GA

Re: Yeah it is!

Mine as well

xmrocks
Premium,MVM
join:2003-09-23
clubs:

Why is so little being done?

I just don't understand why it is so hard to shut down these IP's and users. It's not asking a lot, seriously...

But who knows. Maybe Comcast will start getting more strict...we can all hope so.
kpatz
MY HEAD A SPLODE
Premium
join:2003-06-13
Manchester, NH

Re: Why is so little being done?

They probably sent letters and are giving them time to clean up their act before cutting them off.

IMHO, the worst offenders should be cut off and left to call Comcast to find out why.
--
Robert Tappan Morris, Jr., got six months in jail for crashing 10% of the computers that Bill Gates made $100 million crashing last weekend.

72276539
Premium
join:2001-01-19
Atlanta, GA

Re: Why is so little being done?

They cut off users with a phantom cap with ease... why not cut off the spammers?

TraumaJunkie
Premium
join:2004-03-05
Knoxville, TN

Re: Why is so little being done?

said by 72276539 See Profile:
They cut off users with a phantom cap with ease... why not cut off the spammers?

I think the difference here is that 99.999% of the people who are infected do not know they are and thus do not know they are spemming. OTOH, if you are using enough bandwidth to get *3* letters from Comcast warning you about excessive usage and you do nothing about it you *know* you are using excessive bandwidth and you know *why* you are using it and choose *not* to do anything about it.

Just my opinion on the matter....though if you receive a spam warning letter and ignore it I feel you should be cut off also.

Marilla
I Am My Own Arbiter
Premium
join:2002-12-06
Belpre, OH

said by kpatz See Profile:
IMHO, the worst offenders should be cut off and left to call Comcast to find out why.
I agree; but of course, if they start doing that, we'll start getting multiple-page-long threads around here of people complaining about that. hehe

I guess their concern is that they don't simply wish to lose these customers, yet in many cases, that's probably what will end up happening; Comcast cannot realistically be expected to actually help these people get rid of their infections, and stay clean in the future, and likely these people will just get frustrated with Comcast's "lack of support", and go to another ISP and be blissfully unaware of their spamming, from there.

I agree, 100%, that infected computers should be disconnected from the network... but clearly, that's not the real solution to the problem.
--
Windows, Mac, Linux, BSD - just use the right tool for the right job... end the OS Politics!
kpatz
MY HEAD A SPLODE
Premium
join:2003-06-13
Manchester, NH

Re: Why is so little being done?

quote:
I agree, 100%, that infected computers should be disconnected from the network... but clearly, that's not the real solution to the problem.
Then what is the solution? Blocking ports is not the answer either.

I say cut them off, and when they call, explain why (start with the phrase, "do you hate getting spam?") Either they will be innocent infected, unaware zombies, or they're in cahoots with the spammers in which case they should be publicly flogged, or at least not allowed to have Internet service.
--
Robert Tappan Morris, Jr., got six months in jail for crashing 10% of the computers that Bill Gates made $100 million crashing last weekend.
billybob2

join:2003-07-23
Moline, IL

Re: Why is so little being done?

Then what is the solution? Blocking ports is not the answer either.
I think blocking outbound port 25 to the internet is actually the solution. If someone wants to run their own email server from a Comcast cable modem they can relay their outbound mail through one of Comcast's email servers.

sivran
Long Live The Suite
Premium
join:2003-09-15
Arlington, TX
clubs:
·RoadRunner Cable

Re: Why is so little being done?

said by billybob2 See Profile:
Then what is the solution? Blocking ports is not the answer either.
I think blocking outbound port 25 to the internet is actually the solution. If someone wants to run their own email server from a Comcast cable modem they can relay their outbound mail through one of Comcast's email servers.

That's exactly what I do.

Because of all the spam from users (not just Comcast in fact :P) a lot of mail servers block client IPs (ie, IPs of the end users who aren't supposed to be running their own mail servers) thus even if I did send out from my own computer, the mail would just get junked because my IP indicates I'm a client, not a server. I remember when that wasn't the case and I didn't have to use my ISP's server for anything...
--
Say NO to TCPA
Kerio 2.1.5 - My favorite firewall

TamaraB
Question The Current Paradigm
Premium
join:2000-11-08
Brooklyn NYC
·Verizon Online DSL

said by kpatz See Profile:
Blocking ports is not the answer either.
Why not? It's the most effective solution; and it does not require the end-user to become clueful....

Methinks it's the only thing which will actually work!

Bob
--
Motor Vessel - Tamara B. - 43' Long-Range Trawler Cape Elizebeth ME.»www.tamara-b.org
vfpguy
Alias Dotnetguy

join:2001-07-21
Wayne, NJ

said by Marilla See Profile:
Comcast cannot realistically be expected to actually help these people get rid of their infections, and stay clean in the future, and likely these people will just get frustrated with Comcast's "lack of support", and go to another ISP and be blissfully unaware of their spamming, from there.
So subcontract it out to local in-home service techs. They do it with cable installs; why not computer support?
--
"...a great, serene and peaceful future can slip from us quite as irrevocably by neglect, division and inaction, as by spectacular disaster." -- H. Truman, 6/21/56

Marilla
I Am My Own Arbiter
Premium
join:2002-12-06
Belpre, OH

Re: Why is so little being done?

said by vfpguy See Profile:
So subcontract it out to local in-home service techs. They do it with cable installs; why not computer support?

Because $19.99 a month won't nearly pay for that. A cable install is required in order to get their money.. sending someone to sit in someone's house for five hours trying to explain computer security to them - when more than likely, they'll forget everything they are told - isn't.
--
Windows, Mac, Linux, BSD - just use the right tool for the right job... end the OS Politics!

JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS


1 edit
said by Marilla See Profile:
said by kpatz See Profile:
IMHO, the worst offenders should be cut off and left to call Comcast to find out why.
I agree; but of course, if they start doing that, we'll start getting multiple-page-long threads around here of people complaining about that. hehe

I guess their concern is that they don't simply wish to lose these customers, yet in many cases, that's probably what will end up happening; Comcast cannot realistically be expected to actually help these people get rid of their infections, and stay clean in the future, and likely these people will just get frustrated with Comcast's "lack of support", and go to another ISP and be blissfully unaware of their spamming, from there.

I agree, 100%, that infected computers should be disconnected from the network... but clearly, that's not the real solution to the problem.
A tough anti-spam policy could draw applause, rather than outrage. AOL doesn't terminate spammers - they "temporarily block e-mail from those sender IP addresses" - and they're able to boast some pretty impressive results.

said by Janis Mara, clickz.com, March 19, 2004:
AOL Reports Drops in Both E-Mail and Spam Volume
...snip...

From Feb. 20th to March 17, total mail sent to AOL members dropped 27 percent, from 2.6 billion to 1.9 billion. Over the same period, AOL delivered 37 percent fewer e-mails to spam folders, from 178 million to 113 million. Member spam complaints dropped by 47 percent, from 12.4 million to 6.8 million.

...snip...
raye
Premium
join:2000-08-14
Orange, CA

I suppose that if my pool is leaking into my neighbor's backyard, I should go on blissfully unaware, even if my neighbor complains?

People should be responsible for their own actions, including allowing their computer to be used as a spam relay. If ALL ISPs had a cutoff policy, then the unaware spammer would become aware quickly, or they would not have an Internet to access.

If not, filters at »www.spews.org or

»www.blackholes.us/zones/isp/comcast.txt will work just fine.

72276539
Premium
join:2001-01-19
Atlanta, GA

They piss and moan about users who down/upload too much becuase it hurts network performance... what about all these damned spam relays? I mean, data is data... someone sending out a batch of 100K emails is sucking down some serious bandwidth also.
--
some people believe in astrology others believe in technology some people believe in all those -ologies but i believe in swordfish

FLECOM
Bay Networks Freak
Premium
join:2003-03-03
Miami, FL

Re: Why is so little being done?

ya but 100k emails dosent use up gigabytes of bandwith

they simply dont care since it really probably dosent affect their network *that* much you know?

and every single relay may not be sending out 100k messages... if you have 100 relays send out 1000 messages, thats a lot of messages! and an email is usually a few kb... so chances are nobody is going to hit their magic cap just by spamming...

i honestly dont think comcase cares... these people are still using less than the cap, and they pay... so scew everyone else who is a victim of their inaction

everyone should just blockout comcast's ip range and mail servers and bounce back "my mail server will not accept this message becuase comcast hosts spammers, call comcast and complain" or something to that effect... make the users bitch at commiecast

but this is really getting out of hand... i my SMTP server gets requests literally 24/7 from comcast ip's checking to see if its an open relay (which of course it isnt)
--
BellSouth sucks

72276539
Premium
join:2001-01-19
Atlanta, GA

Re: Why is so little being done?

said by FLECOM See Profile:
ya but 100k emails dosent use up gigabytes of bandwith

I just pulled that number out of my ass, I would love to see just how many emails these guys fire off. And if they are sending the spam with inbedded crap you are talking some decent sized emails, wouldn't take long to add up over the course of a month. The number they are sending is probably higher then we would think.
--
some people believe in astrology others believe in technology some people believe in all those -ologies but i believe in swordfish
LrdVader
Premium
join:2003-12-18
San Diego, CA

Re: Why is so little being done?

said by 72276539 See Profile:
I just pulled that number out of my ass, I would love to see just how many emails these guys fire off.

Well, if »www.senderbase.org is to be believed, the worst offenders are approaching the 1 million per day range.

72276539
Premium
join:2001-01-19
Atlanta, GA

The solution is to take these guys off your network until they stop relaying spam. Concast is more then willing to chop people for smoky reasons, why can't they chop people for proven reasons?
--
some people believe in astrology others believe in technology some people believe in all those -ologies but i believe in swordfish

FLECOM
Bay Networks Freak
Premium
join:2003-03-03
Miami, FL

Re: Why is so little being done?

said by 72276539 See Profile:
The solution is to take these guys off your network until they stop relaying spam. Concast is more then willing to chop people for smoky reasons, why can't they chop people for proven reasons?

woah woah there! thats some dangerious thinking... that would almost... make sence!
--
BellSouth sucks
vic102482
Premium
join:2002-04-30
Upper Marlboro, MD

Comcast is teh sux

Comcast SPAMs my box 90% of the time as well:(

ObdH
Premium
join:2003-06-11

Re: Comcast is teh sux

said by vic102482 See Profile:
Comcast SPAMs my box 90% of the time as well:(

wow, i didn't know i wasn't one of few

what is going on with them
--
Words build bridges into unexplored regions.
I'm a conservative and I watch FOX News Channel -for real journalism, "Fair and Balanced"
Shall I be banned?

Phucker
Premium
join:2001-09-12
Reno, NV
clubs:

Re: Comcast is teh sux

I have had comcast for about a year. I havent even looked at my mailbox. Best thing I have ever done is get my own domain.
LrdVader
Premium
join:2003-12-18
San Diego, CA

Re: Comcast is teh sux

said by Phucker See Profile:
I have had comcast for about a year. I havent even looked at my mailbox. Best thing I have ever done is get my own domain.

What does that have to do with the Comcast spam problem? The army of spam zombies will spam the hell out of your domain just like they spam the hell out of everyone else's.

natter

join:2000-12-18
Littleton, CO

I'm thinking..

Comcast doesn't care if their ip blocks of users are in the black hole lists. What do they care? As long as their smtp servers aren't, then they are letting someone else clean up their problems.
--
-- www.WisperTel.com --

foobarbaz

@megapath.net

Comcast also a large problem for me

just the last few days:

grep reject maillog | grep -i comcast | wc -l
35

no a single valid return address. all spam

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: Comcast also a large problem for me

I use the DynaBlock RBL:

grep comcast /var/adm/MAILLOG* | grep dynablock | wc -l
193

That 193 covers a 32-hour period. At that pace, I can expect to block over 4300 Comcast emails in a 30-day period, just with the DynaBlock RBL. Add in the various SPAM and A/V rules, and the picture gets even worse. :(

-tom

--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

KeepOnRockin
Music Lover Forever
Premium
join:2002-11-08
Beaverton, OR
·Comcast


1 edit

Not Just Comcast

It seems these spam zombies are everywhere

Most of the spam I recieve comes from outside the US. I am also seeing an increasing amount of spam originating from RoadRunner and Optimum Online.

I guess some people don't stop to read an ISPs TOS or AUP.
nickpdx
Premium
join:2003-10-19
Portland, OR

Re: Not Just Comcast

none of the 4 comcast e-mail accounts i use gets ANY spam at all....but i really do think that comcast should terminate those users
jsouth
Jsouth

join:2000-12-12
Wichita, KS

Re: Not Just Comcast

This is spam being sent out, not received.
davidcb13

join:2004-02-06
Branchville, NJ

Re: Not Just Comcast

All the attention from the media saying comcast is getting tough on spammers is great from comcasts pov. They will prob get alot of "misinformed" new users. And if it costs comcast $ and they arent losing coustomers because of it why change?

newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD

This will eventually affect us all . . .

Every Comcast subscriber is currently at risk of losing the ability to exchange packets with whoever they want. Comcast is landing in more and more blacklists due to their foot-dragging in getting rid of their spammers, zombie or otherwise. If they do not begin a turnaround pretty quickly, YOUR connectivity will become degraded as Comcast's inaction essentially creates a Comcast intranet.
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket?

JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:

Re: This will eventually affect us all . . .

This will eventually affect anyone who wants to communicate with Comcast subscribers as well.
mjayz

join:2004-03-20
Culver City, CA

will eventually affect us all & already did me

About 6 wks. ago, a friend tried to send me something at my CoNcast address through a site where we are both members. My membership is connected with a web-based free address. The site kicked it back, saying they wouldn't send it because CoNcast was the domain. The friend forwarded a copy of the message to me, and it gave instructions on how to submit a request to have my specific IP address removed from "the list." I suspect it was probably more like adding it to a list of exceptions.

The follow-up email I got saying it was taken care of appeared to come from a CoNcast address. I did not send the request to an addy in "@comcast.net-land." There was no apology or acknowledgement of causing me a problem, or even of being my ISP.

I don't bother to ask them questions, because I found out right after the transition from AT&T Broadband Internet that if they've written something, whether for all to read or for me specifically, there WILL be misrepresentations, and even outrageous lies, which won't be highlighted for easy identification.

I can't complain about speed, with CNET's band-with meter usually showing me at 4080 kbps or more, and outages have been rare. Nevertheless, the company is scum. One example of my reason for believing that follows.

In addition to all the garbage-ware they tried to stash out of sight on my hard drive using the transition wizard, they added one last bit of software that iced the cake. When it sensed their other software missing, it made my own equipment tell me lies. At boot, it opened a window that took up my entire screen and looked very official with their logos and such. It informed me I was not connected to the Internet and would not be until I downloaded their transition wizard. I closed the window with the X in the upper right, and found my connection intact. They were bluffing in hopes of coercing those not expecting outright lies into downloading what they wanted their customers to have. I can't imagine a company treating its customers with much less respect than that showed. mj
Forums » Comcast Spam Getting Worse?


Sunday, 22-Nov 02:24:02 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.