NormanS
Premium,MVM
join:2001-02-14
San Jose, CA
 ·Pacific Bell - SBC
| reply to JTRockville
Re: [Spam] Picture of a Comcast Zombie
said by JTRockville  :Just curious as to how you went about selecting 67.161.116.127 as an example. What makes it different from all the other Comcast IPs that spew spam? I have only one entry in my MTA log:
T 20060310 134722 441149e6 Connection from 67.161.116.127
T 20060310 134723 441149e6 HELO c-67-161-116-127.hsd1.wa.comcast.net
T 20060310 134724 441149e6 MAIL FROM: <mwrobicvjqujs@yahoo.com>
E 20060310 134724 441149e6 Host 67.161.116.127 blocked by Spamhaus - message rejected.
T 20060310 134725 441149e6 QUIT
T 20060310 134725 441149e6 Connection closed with 67.161.116.127, 3 sec. elapsed.
--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| reply to JTRockville
said by JTRockville :What makes it different from all the other Comcast IPs that spew spam?
A number of circumstances . . .
•This IP spammed me personally
•The spam sent was indicative of being sent by notorious spammer Bob Soloway
•The IP is in Washington State, (with the toughest anti-spam laws in the US); a complaint was filed with the Washington State AG
•I posted the original thread entitled Paging Comcast Abuse Dept: Zombie Spammer Sighting #45 on Mar 25, 2006 in Comcast.net's Email Forum
•On March 26, an answer to my post from a forum moderator indicated that the issue had been escalated to the Comcast Abuse Department
•A week later, this IP was still spamming
•The next day the moderator posted that the issue had been resolved
•A week later the IP was still spamming
•The same day the moderator posted that, "Abuse was looking into it".
•The following day, the moderator posted that "Abuse is aware and is actively working with this customer."
•The IP is still spamming to this day
--
Ö¿Ö
The Rules of Spam | Maryland's Newest Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
 ·LINGO
 ·Sprint Mobile Broa..
 ·surpasshosting
 ·Verizon FIOS
| reply to newview
said by newview :Comcast . . . with their four months knowledge of this IP's constant spamming and their inaction in terminating this customer's account, has crossed the line from incompetence into the realm of outright spam support. Just curious as to how you went about selecting 67.161.116.127 as an example. What makes it different from all the other Comcast IPs that spew spam? |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX | reply to newview
Here ya go...
»/faq/11091
--
da Cajun Darn I hate Malware |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| reply to cracker 52
said by cracker 52 :
It wouldn't hurt for anyone who are really upset about this matter to call Comcast executive complaint center at their headquarters to register a complaint.
Phone number, please?
--
Ö¿Ö
The Rules of Spam | Maryland's Newest Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX
 ·RoadRunner Cable
| reply to newview
Well they appear to be taking the weekend off again..
Report on IP address: 67.161.116.127
Volume Statistics for this IP
Magnitude Vol Change vs. Average
Last day 4.4 -66%
Last 30 days 4.7 -33%
Average 4.9
What is this?? a 9 to 5 spammer??? I'm looking forward to see what next week brings 
--
da Cajun Darn I hate Malware |
|
cracker 52
@comcast.net
| reply to NormanS
It wouldn't hurt for anyone who are really upset about this matter to call Comcast executive complaint center at their headquarters to register a complaint. They were very helpful with my connection problems after my getting nowhere with local/regional management. Involvement of top management can finally force those responsible to make necessary action. |
|
NormanS
Premium,MVM
join:2001-02-14
San Jose, CA
·Pacific Bell - SBC
| reply to newview
said by newview :• What it is: A negotiated secret deal with otherwise reputable ISPs to circumvent their published AUP/TOS; a deal that weakens or waives the ISPs’ abuse policies in exchange for much higher fees. • Why they do it: To buy the silence and neglect of the ISPs. • Does it work? In a few cases, yes. Used to be a link about "PinkBell" (Pacific Bell) on this site:
»www.loganet.net/~doumakes/abuse/
Doesn't seem to work any more, though. Possibly because PacBell no longer exists, except as a domain name. It is just "at&t", now.
--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
1 edit | reply to CajunTek
said by CajunTek : said by newview :
You're starting to suspect Pink Contract, right?
YES
The same thought has crossed my mind.
I would not put it past their sleazy, spam-friendly marketing department to sell Pink Contracts.
Edit:
For those that don't know what a Pink Contract is:
•What it is: A negotiated secret deal with otherwise reputable ISPs to circumvent their published AUP/TOS; a deal that weakens or waives the ISPs’ abuse policies in exchange for much higher fees.
•Why they do it: To buy the silence and neglect of the ISPs.
•Does it work? In a few cases, yes.
--
Ö¿Ö
The Rules of Spam | Maryland's Newest Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX | reply to newview
said by newview :
You're starting to suspect Pink Contract, right?
YES
--
da Cajun Darn I hate Malware |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| reply to CajunTek
said by CajunTek :If this person is a Zombie.. (for some reason I don't think so..)
You're starting to suspect Pink Contract, right?
The evidence is certainly there to show continued spamming from this IP with no action from Comcast to terminate. We have no other recourse but to question why.
Comcast's history regarding spam certainly leads us to suspect that distinct possibility.
--
Ö¿Ö
The Rules of Spam | Maryland's Newest Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX
·RoadRunner Cable
1 edit | reply to newview
said by newview :
Comcast . . . with their four months knowledge of this IP's constant spamming and their inaction in terminating this customer's account, has crossed the line from incompetence into the realm of outright spam support.
And that is a real bummer.. If this person is a Zombie.. (for some reason I don't think so..) then they should have been shutdown immediately.. and if a business customer.. then, even quicker!!!
--
da Cajun
Darn I hate Malware |
|
NormanS
Premium,MVM
join:2001-02-14
San Jose, CA
·Pacific Bell - SBC
| reply to newview
said by newview :Comcast . . . with their four months knowledge of this IP's constant spamming and their inaction in terminating this customer's account, has crossed the line from incompetence into the realm of outright spam support. Ex .. Ex .. Exactly! {Oops! That was plagiarism, wasn't it!} 
--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD | reply to newview
Comcast . . . with their four months knowledge of this IP's constant spamming and their inaction in terminating this customer's account, has crossed the line from incompetence into the realm of outright spam support. |
|
jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR
·Comcast
·AT&T Southwest
| reply to madylarian
said by madylarian :This customer should not be allowed to own a computer. mady I'll do you one better...the Comcast personnel responsible should not have a job with Comcast, or at least in managing SPAM. |
|
madylarian
The curmudgeonly
Premium
join:2002-01-03
Parkville, MD
| reply to newview
said by newview :Well the spew is back UP again today . . . this is what is consistantly happening. Spew for a day or two, then drop off the radar for a short time - spew for a couple days, then drop off the radar for a little while. {rinse - repeat} I bet it's part of a large bot net where the various owned machines can be cycled in and out of spam runs to try to avoid detection. Of course, the computer should have been cut off at first notice and by now the account dropped completely. This customer should not be allowed to own a computer.
mady
--
Honi soit qui mal y pense |
|
Morty
Premium
join:2004-09-18
| reply to CajunTek
said by CajunTek :bummer I wonder what these negotiations with the customer are all about... payoffs maybe !?!  I honestly think »Annoyed with Comcast abuse dept. is a good answer. |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX
·RoadRunner Cable
| reply to newview
bummer
I wonder what these negotiations with the customer are all about... payoffs maybe !?!
--
da Cajun Darn I hate Malware |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| reply to CajunTek
said by CajunTek :Well according to Senderbase the spewing has still dropped off considerably.. I haven't looked at the other reports.. Report on IP address: 67.161.116.127 Volume Statistics for this IP Magnitude Vol Change vs. Average Last day 4.5 -62% Last 30 days 4.8 -22% Average 4.9
Well the spew is back UP again today . . . this is what is consistantly happening.
Spew for a day or two, then drop off the radar for a short time -
spew for a couple days, then drop off the radar for a little while.
{rinse - repeat}
04/21/06 - 5:35Am EST
Report on IP address: 67.161.116.127
Volume Statistics for this IP
Magnitude Vol Change vs. Average
Last day 5.2 78%
Last 30 days 4.8 -30%
Average 4.9
»www.senderbase.org/?searchBy=ipa···.116.127
--
Ö¿Ö
The Rules of Spam | Maryland's Newest Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX
·RoadRunner Cable
| reply to newview
Well according to Senderbase the spewing has still dropped off considerably.. I haven't looked at the other reports..
Report on IP address: 67.161.116.127
Volume Statistics for this IP
Magnitude Vol Change vs. Average
Last day 4.5 -62%
Last 30 days 4.8 -22%
Average 4.9
--
da Cajun Darn I hate Malware |
|
