dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
12307
share rss forum feed


Unsuspend

@Level3.net

1 edit

Acct suspended - Abuse Dept?

I woke up last Saturday with a blinking power light on my modem. I called Comcast and was told my account had been suspended for Internet Abuse. She had no other details, said it could be many things from spam, virus to bandwidth. She transferred me to some abuse dept voicemail box to leave a message and wait for a callback. I left a message and still have not received any call. I called 1-800-COMCAST again and the rep said there's no other way to reach this dept, just thru voicemail.

I've been home all week waiting for this stupid call to no avail. Does anyone have any suggestions on how to get this resolved? I can't be stuck at home all week. I have a business mtg on Thursday and with my luck, that's when they'll decide to call.

I don't know what the issue is so I can't dispute anything. I suspect too much downloading as there are 5 people in the house using the connection, but I didn't get any letter, call or email saying there was a problem, to please look into it or you'll be disconnected by xxx date.

This process is really ridiculous for a company like Comcast. Any suggestions would be appreciated.


bilbusb

join:2003-04-10
Tucker, GA

Re: Acct suspended - Abust Dept?

Get bellsouth?



GrudgeReport

@192.27.x.x
reply to Unsuspend

said by Unsuspend :

This process is really ridiculous for a company like Comcast.
But they can do that because they are the cable company, and they too have a deathstar.


Morty7
Premium
join:2004-09-18
reply to Unsuspend

The turn around time for abuse should be 24-48 hours, not including holidays. Leave them your cell phone number is my recommendation, past that there is also abuse@comcast.net, but it's better to get them to call you in person to speak about it (the e-mail isn't really that fast either). If you're in a suspend status, it means you have to fix something before your service is re-activated. If it was for bandwidth, the agent should have told you it was for that. Abuse bandwidth is the ONLY thing the Customer Care can actually remove from an account, anything else has to go to the abuse team (which isn't really customer care). Luckily it wasn't terminated otherwise the CAE should have told you over the phone. Also, it's an abuse team -- you can't really dispute with them, what they say goes so your best bet is to apologize and fix the problem whether you like it or not.



Morty7
Premium
join:2004-09-18

1 recommendation

reply to GrudgeReport

said by GrudgeReport :

said by Unsuspend :

This process is really ridiculous for a company like Comcast.
But they can do that because they are the cable company, and they too have a deathstar.
Who told you about the deathstar piloted by Mr T.


jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR
reply to Unsuspend

While you're waiting for a call back I think I'd be checking each computer in the house to see if you can determine if any one of them might be a culprit. It certainly wouldn't hurt since you're stuck until Comcast calls you back. Then if and when they do call you might be able to say, well I found the problem was XXXXX and I nipped that in the bud.



Morty7
Premium
join:2004-09-18

»vil.nai.com/vil/stinger/
Or
»www.comcast.net/security/mcafee/#virus



NormanS
I gave her time to steal my mind away
Premium,MVM
join:2001-02-14
San Jose, CA
kudos:11
Reviews:
·SONIC.NET
·Pacific Bell - SBC
reply to Unsuspend

said by Unsuspend :

I woke up last Saturday with a blinking power light on my modem. I called Comcast and was told my account had been suspended for Internet Abuse. She had no other details, said it could be many things from spam, virus to bandwidth.

This process is really ridiculous for a company like Comcast. Any suggestions would be appreciated.
Check your computers. Make very sure you don't have any malware on board. I keep seeing things like this, in my MTA logs, from Comcast users:
T 20060710 150050 44b19c47 Connection from 67.187.134.212
T 20060710 150051 44b19c47 ehlo friend {S/B: c-67-187-134-212.hsd1.ca.comcast.net}
T 20060710 150051 44b19c47 MAIL FROM:<henry@repairnet.biz>
E 20060710 150051 44b19c47 Host 67.187.134.212 blocked by Spamhaus - message rejected.
T 20060710 150051 44b19c47 Connection closed with 67.187.134.212, 1 sec. elapsed.

NOTE: "ehlo friend" is a lie.

T 20060711 110050 44b357fc Connection from 24.7.144.94
T 20060711 110051 44b357fc HELO 10.1.10.10 {S/B: c-24-7-144-94.hsd1.ca.comcast.net}
E 20060711 110051 44b357fc 554 RFC 1918 host - message rejected; see: HTTP://antispam.aosake.net.
T 20060711 110051 44b357fc Connection closed with 24.7.144.94, 1 sec. elapsed.
E 20060711 110146 0 Connection from 24.7.144.94 refused because of short-term restriction.
E 20060711 110251 0 Connection from 24.7.144.94 refused because of short-term restriction.
E 20060711 110351 0 Connection from 24.7.144.94 refused because of short-term restriction.
E 20060711 110458 0 Connection from 24.7.144.94 refused because of short-term restriction.

NOTE: "HELO 10.1.10.10" is a lie.

T 20060711 122107 44b35824 Connection from 24.7.144.94
T 20060711 122107 44b35824 HELO 10.1.10.10 {S/B: c-24-7-144-94.hsd1.ca.comcast.net}
E 20060711 122107 44b35824 554 RFC 1918 host - message rejected; see: HTTP://antispam.aosake.net.
T 20060711 122107 44b35824 Connection closed with 24.7.144.94, 0 sec. elapsed.
E 20060711 122130 0 Connection from 24.7.144.94 refused because of short-term restriction.
E 20060711 122154 0 Connection from 24.7.144.94 refused because of short-term restriction.
E 20060711 122243 0 Connection from 24.7.144.94 refused because of short-term restriction.
E 20060711 122321 0 Connection from 24.7.144.94 refused because of short-term restriction.

NOTE: "HELO 10.1.10.10" is a lie.

T 20060711 125210 44b35831 Connection from 71.197.204.216
T 20060711 125210 44b35831 HELO 162370744 {S/B: c-71-197-204-216.hsd1.or.comcast.net}
T 20060711 125211 44b35831 MAIL FROM:<Branderhorst@gratefuldread.net>
E 20060711 125211 44b35831 Host 71.197.204.216 blocked by Spamhaus - message rejected.
T 20060711 125211 44b35831 Connection closed with 71.197.204.216, 1 sec. elapsed.

NOTE: "HELO 162370744" is a lie.

T 20060711 160756 44b35847 Connection from 71.227.59.92
T 20060711 160756 44b35847 HELO comtechefdata.com {S/B: c-71-227-59-92.hsd1.mi.comcast.net}
T 20060711 160757 44b35847 MAIL FROM:<scheffea@comtechefdata.com>
E 20060711 160757 44b35847 Host 71.227.59.92 blocked by Spamhaus - message rejected.
T 20060711 160757 44b35847 Connection closed with 71.227.59.92, 1 sec. elapsed.

NOTE: "HELO comtechefdata.com" is a lie. The host is not on a Comcast IP address:

07/11/06 22:49:34 dns comtechefdata.com
Mail for comtechefdata.com is handled by mail.comtechefdata.com tempegw.comtechefdata.com
Canonical name: comtechefdata.com
Addresses:
216.128.19.60

T 20060711 194010 44b35867 Connection from 24.21.187.3
T 20060711 194011 44b35867 HELO aosake.net {S/B: c-24-21-187-3.hsd1.or.comcast.net}
E 20060711 194011 44b35867 554 Forged host name - message rejected; see: HTTP://antispam.aosake.net.
T 20060711 194011 44b35867 Connection closed with 24.21.187.3, 1 sec. elapsed.

NOTE: "HELO aosake.net" is a lie. The host is not, nor usually ever be, on a Comcast IP address:

07/11/06 22:44:13 dns aosake.net
Mail for aosake.net is handled by aosake.net
Canonical name: aosake.net
Addresses:
69.110.230.56

T 20060711 223208 44b35889 Connection from 71.198.81.215
T 20060711 223209 44b35889 HELO email-sexe.com {S/B: c-71-198-81-215.hsd1.ca.comcast.net}
T 20060711 223209 44b35889 MAIL FROM: <dasgm@terra.com.br>
E 20060711 223209 44b35889 Host 71.198.81.215 blocked by Spamhaus - message rejected.
T 20060711 223209 44b35889 MAIL FROM: <dasgm@terra.com.br>
E 20060711 223209 44b35889 Host 71.198.81.215 blocked by Spamhaus - message rejected.
T 20060711 223210 44b35889 MAIL FROM: <dasgm@terra.com.br>
E 20060711 223210 44b35889 Host 71.198.81.215 blocked by Spamhaus - message rejected.
T 20060711 223210 44b35889 Connection closed with 71.198.81.215, 2 sec. elapsed.

NOTE: "HELO email-sexe.com" is a lie. The host does not even exist:

07/11/06 22:36:56 dns email-sexe.com
No DNS for this address
(host doesn't exist)

T 20060712 200540 44b52385 Connection from 24.99.208.122
T 20060712 200542 44b52385 HELO netscape.net {S/B: c-24-99-208-122.hsd1.ga.comcast.net}
T 20060712 200543 44b52385 MAIL FROM: <electronlotreij1@netscape.net>
E 20060712 200543 44b52385 Host 24.99.208.122 blocked by Spamhaus - message rejected.
T 20060712 200544 44b52385 Connection closed with 24.99.208.122, 4 sec. elapsed.

T 20060712 232837 44b52397 Connection from 69.140.232.156
T 20060712 232837 44b52397 ehlo friend {S/B: c-69-140-232-156.hsd1.md.comcast.net}
T 20060712 232837 44b52397 MAIL FROM:<thomas@evansville.edu>
E 20060712 232838 44b52397 Host 69.140.232.156 blocked by Spamhaus - message rejected.
T 20060712 232838 44b52397 Connection closed with 69.140.232.156, 2 sec. elapsed.

NOTE: "ehlo friend" is a lie. The host does not even exist:

07/13/06 01:41:13 dns friend
No DNS for this address
(host doesn't exist)

T 20060716 204146 44ba906b Connection from 12.206.37.174
T 20060716 204146 44ba906b ehlo friend
T 20060716 204146 44ba906b MAIL FROM:<walter@folkesparekassen.dk>
E 20060716 204146 44ba906b Host 12.206.37.174 blocked by Spamhaus - message rejected.
T 20060716 204146 44ba906b Connection closed with 12.206.37.174, 0 sec. elapsed.

NOTE: No rDNS is configured for this IP address. A whois lookup shows:

07/17/06 02:51:42 IP block 12.206.37.174@whois.arin.net
Trying 12.206.37.174 at ARIN
Trying 12.206.37 at ARIN
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
12.0.0.0 - 12.255.255.255
Comcast Corporation COMCAST-12-206-32-0-SAN-FRANCISCO (NET-12-206-32-0-1)
12.206.32.0 - 12.206.47.255

# ARIN WHOIS database, last updated 2006-07-16 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

T 20060726 015648 44c47642 Connection from 64.25.173.13
T 20060726 015649 44c47642 HELO 3D07D68 {S/B: Timmins-Cable13.onlink.net}
T 20060726 015650 44c47642 MAIL FROM: <boone@symon.com>
E 20060726 015650 44c47642 Host 64.25.173.13 blocked by Spamhaus - message rejected.
T 20060726 015650 44c47642 QUIT
T 20060726 015650 44c47642 Connection closed with 64.25.173.13, 2 sec. elapsed.

Canadian provider:

07/26/06 21:38:01 IP block 64.25.173.13@whois.arin.net
Trying 64.25.173.13 at ARIN
Trying 64.25.173 at ARIN

OrgName: Ontario Northland
OrgID: ONTL
Address: 555 Oak St. E.
City: North Bay
StateProv: ON
PostalCode: P1B-8L3
Country: CA

T 20060726 010256 44c47639 Connection from 68.150.8.253
T 20060726 010256 44c47639 HELO 192.168.6.2 {S/B: ???}
E 20060726 010256 44c47639 554 RFC 1918 host - message rejected; see: HTTP://antispam.aosake.net.
T 20060726 010256 44c47639 Connection closed with 68.150.8.253, 0 sec. elapsed.
E 20060726 010256 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 010256 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 010257 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 010257 0 Connection from 68.150.8.253 refused because of short-term restriction.

T 20060726 132341 44c75cb7 Connection from 68.150.8.253
T 20060726 132341 44c75cb7 HELO 192.168.6.2 {S/B: ???}
E 20060726 132341 44c75cb7 554 RFC 1918 host - message rejected; see: HTTP://antispam.aosake.net.
T 20060726 132341 44c75cb7 Connection closed with 68.150.8.253, 0 sec. elapsed.
E 20060726 132342 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 132342 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 132342 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 132342 0 Connection from 68.150.8.253 refused because of short-term restriction.

T 20060726 170554 44c77697 Connection from 68.150.8.253
T 20060726 170554 44c77697 HELO 192.168.6.2 {S/B: ???}
E 20060726 170554 44c77697 554 RFC 1918 host - message rejected; see: HTTP://antispam.aosake.net.
T 20060726 170555 44c77697 Connection closed with 68.150.8.253, 1 sec. elapsed.
E 20060726 170555 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 170555 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 170555 0 Connection from 68.150.8.253 refused because of short-term restriction.
E 20060726 170555 0 Connection from 68.150.8.253 refused because of short-term restriction.

Canadian provider, no RDNS configured:

07/26/06 21:33:49 dns 68.150.8.253
nslookup 68.150.8.253
No reverse DNS (WSANO_DATA)

07/26/06 21:33:51 IP block 68.150.8.253@whois.arin.net
Trying 68.150.8.253 at ARIN
Trying 68.150.8 at ARIN

OrgName: Shaw Communications Inc.
OrgID: SHAWC
Address: Suite 800
Address: 630 - 3rd Ave. SW
City: Calgary
StateProv: AB
PostalCode: T2P-4L4
Country: CA

T 20060812 075852 44dcf572 Connection from 71.194.106.107
T 20060812 075852 44dcf572 EHLO 2fu4ow6.vemuvjc.verizon.net {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075853 44dcf572 MAIL FROM: <dissipateburglary@loveable.com>
E 20060812 075853 44dcf572 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075853 44dcf572 Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075853 44dcf573 Connection from 71.194.106.107
T 20060812 075854 44dcf573 EHLO DONSHP {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075854 44dcf573 MAIL FROM: <bujumburaabscissa@europe.com>
E 20060812 075854 44dcf573 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075854 44dcf573 Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075855 44dcf574 Connection from 71.194.106.107
T 20060812 075855 44dcf574 EHLO DONSHP.vkotoa.org {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075855 44dcf574 MAIL FROM: <christianconsumptive@winning.com>
E 20060812 075855 44dcf574 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075856 44dcf574 Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075856 44dcf575 Connection from 71.194.106.107
T 20060812 075856 44dcf575 EHLO DONSHP.i2voaib.com {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075857 44dcf575 MAIL FROM: <abundantandes@deliveryman.com>
E 20060812 075857 44dcf575 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075857 44dcf575 Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075858 44dcf576 Connection from 71.194.106.107
T 20060812 075858 44dcf576 EHLO gvuedoqe.idoddo.rr.com {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075859 44dcf576 MAIL FROM: <diffusionchristiana@adexec.com>
E 20060812 075859 44dcf576 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075859 44dcf576 Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075859 44dcf577 Connection from 71.194.106.107
T 20060812 075900 44dcf577 EHLO DONSHP.ig8qu.org {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075901 44dcf577 MAIL FROM: <barricadecentric@earthling.net>
E 20060812 075901 44dcf577 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075901 44dcf577 Connection closed with 71.194.106.107, 2 sec. elapsed.
T 20060812 075901 44dcf578 Connection from 71.194.106.107
T 20060812 075901 44dcf578 EHLO zlzayub.iwd2.verizon.net {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075902 44dcf578 MAIL FROM: <bestsellerchaparral@moscowmail.com>
E 20060812 075902 44dcf578 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075902 44dcf578 Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075903 44dcf579 Connection from 71.194.106.107
T 20060812 075903 44dcf579 EHLO DONSHP {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075904 44dcf579 MAIL FROM: <buryconfidant@arcticmail.com>
E 20060812 075904 44dcf579 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075904 44dcf579 Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075904 44dcf57a Connection from 71.194.106.107
T 20060812 075905 44dcf57a EHLO DONSHP {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075905 44dcf57a MAIL FROM: <aren'taleck@pediatrician.com>
E 20060812 075905 44dcf57a Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075905 44dcf57a Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075906 44dcf57b Connection from 71.194.106.107
T 20060812 075906 44dcf57b EHLO DONSHP.a2o3328i.org {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075907 44dcf57b MAIL FROM: <butterflybusy@samerica.com>
E 20060812 075907 44dcf57b Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075907 44dcf57b Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075908 44dcf57c Connection from 71.194.106.107
T 20060812 075908 44dcf57c EHLO DONSHP.wm50x.org {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075908 44dcf57c MAIL FROM: <definitivebedazzle@usa.com>
E 20060812 075908 44dcf57c Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075909 44dcf57c Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075909 44dcf57d Connection from 71.194.106.107
T 20060812 075909 44dcf57d EHLO DONSHP {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075910 44dcf57d MAIL FROM: <blowupbeater@singapore.com>
E 20060812 075910 44dcf57d Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075910 44dcf57d Connection closed with 71.194.106.107, 1 sec. elapsed.
T 20060812 075910 44dcf57e Connection from 71.194.106.107
T 20060812 075911 44dcf57e EHLO eu8iit7l.2kio2.verizon.net {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075912 44dcf57e MAIL FROM: <cosineauspices@chemist.com>
E 20060812 075912 44dcf57e Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075912 44dcf57e Connection closed with 71.194.106.107, 2 sec. elapsed.
T 20060812 075912 44dcf57f Connection from 71.194.106.107
T 20060812 075913 44dcf57f EHLO hf6w.lad9eg.optonline.net {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075914 44dcf57f MAIL FROM: <certifiedbullyboy@whoever.com>
E 20060812 075914 44dcf57f Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075914 44dcf57f Connection closed with 71.194.106.107, 2 sec. elapsed.
T 20060812 075914 44dcf580 Connection from 71.194.106.107
T 20060812 075915 44dcf580 EHLO 7ptmf.oeioq5i.optonline.net {No reverse DNS (WSANO_DATA); ARIN Whois says, "Comcast Cable Communications, Inc."}
T 20060812 075916 44dcf580 MAIL FROM: <accreditationandrews@mail.com>
E 20060812 075916 44dcf580 Host 71.194.106.107 blocked by Spamhaus - message rejected.
T 20060812 075916 44dcf580 Connection closed with 71.194.106.107, 2 sec. elapsed.

T 20060813 015747 44dcf6cc Connection from 71.207.129.35
T 20060813 015747 44dcf6cc ehlo friend {S/B: c-71-207-129-35.hsd1.pa.comcast.net}
T 20060813 015748 44dcf6cc MAIL FROM:<thomas@datacomm.ch>
E 20060813 015748 44dcf6cc Host 71.207.129.35 blocked by Spamhaus - message rejected.
T 20060813 015748 44dcf6cc Connection closed with 71.207.129.35, 1 sec. elapsed.

T 20060813 094709 44dcf744 Connection from 24.62.127.200
T 20060813 094710 44dcf744 ehlo friend {S/B: c-24-62-127-200.hsd1.ma.comcast.net}
T 20060813 094710 44dcf744 MAIL FROM:<stephen@datacomm.ch>
E 20060813 094710 44dcf744 Host 24.62.127.200 blocked by Spamhaus - message rejected.
T 20060813 094710 44dcf744 Connection closed with 24.62.127.200, 1 sec. elapsed.

T 20060813 131740 44dcf7a5 Connection from 24.99.106.22
T 20060813 131740 44dcf7a5 EHLO OCONNOR-584PMUU.ly3deu.com {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131741 44dcf7a5 MAIL FROM: <antigoritecentipede@munich.com>
E 20060813 131741 44dcf7a5 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131741 44dcf7a5 Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131741 44dcf7a6 Connection from 24.99.106.22
T 20060813 131741 44dcf7a6 EHLO OCONNOR-584PMUU {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131742 44dcf7a6 MAIL FROM: <caseychess@saintly.com>
E 20060813 131742 44dcf7a6 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131742 44dcf7a6 Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131742 44dcf7a7 Connection from 24.99.106.22
T 20060813 131742 44dcf7a7 EHLO OCONNOR-584PMUU {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131742 44dcf7a7 MAIL FROM: <curranbernardino@columnist.com>
E 20060813 131742 44dcf7a7 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131742 44dcf7a7 Connection closed with 24.99.106.22, 0 sec. elapsed.
T 20060813 131742 44dcf7a8 Connection from 24.99.106.22
T 20060813 131743 44dcf7a8 EHLO OCONNOR-584PMUU.0i8ug3o8.org {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131743 44dcf7a8 MAIL FROM: <dialectaruba@whoever.com>
E 20060813 131743 44dcf7a8 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131743 44dcf7a8 Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131744 44dcf7a9 Connection from 24.99.106.22
T 20060813 131744 44dcf7a9 EHLO OCONNOR-584PMUU.e03npez0.com {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131744 44dcf7a9 MAIL FROM: <burdensomeasteroidal@diplomats.com>
E 20060813 131744 44dcf7a9 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131744 44dcf7a9 Connection closed with 24.99.106.22, 0 sec. elapsed.
T 20060813 131744 44dcf7aa Connection from 24.99.106.22
T 20060813 131744 44dcf7aa EHLO hk53.mueod.aol.com {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131745 44dcf7aa MAIL FROM: <canteencopeland@accountant.com>
E 20060813 131745 44dcf7aa Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131745 44dcf7aa Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131745 44dcf7ab Connection from 24.99.106.22
T 20060813 131745 44dcf7ab EHLO efgan5sq.auw1aw.verizon.net {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131745 44dcf7ab MAIL FROM: <detractantietam@singapore.com>
E 20060813 131745 44dcf7ab Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131746 44dcf7ab Connection closed with 24.99.106.22, 0 sec. elapsed.
T 20060813 131746 44dcf7ac Connection from 24.99.106.22
T 20060813 131749 44dcf7ac EHLO sohc.wq65.rr.com {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131749 44dcf7ac MAIL FROM: <crochetblack@pediatrician.com>
E 20060813 131749 44dcf7ac Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131749 44dcf7ac Connection closed with 24.99.106.22, 3 sec. elapsed.
T 20060813 131749 44dcf7ad Connection from 24.99.106.22
T 20060813 131749 44dcf7ad EHLO pikb.ua3en4op.comcast.net {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131750 44dcf7ad MAIL FROM: <careercurt@allergist.com>
E 20060813 131750 44dcf7ad Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131750 44dcf7ad Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131750 44dcf7ae Connection from 24.99.106.22
T 20060813 131750 44dcf7ae EHLO OCONNOR-584PMUU {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131750 44dcf7ae MAIL FROM: <barringtoncrossbill@whoever.com>
E 20060813 131750 44dcf7ae Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131750 44dcf7ae Connection closed with 24.99.106.22, 0 sec. elapsed.
T 20060813 131750 44dcf7af Connection from 24.99.106.22
T 20060813 131751 44dcf7af EHLO OCONNOR-584PMUU {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131751 44dcf7af MAIL FROM: <diocesancap@representative.com>
E 20060813 131751 44dcf7af Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131751 44dcf7af Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131751 44dcf7b0 Connection from 24.99.106.22
T 20060813 131751 44dcf7b0 EHLO auemh3s.uino.aol.com {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131751 44dcf7b0 MAIL FROM: <acidairdrop@loveable.com>
E 20060813 131751 44dcf7b0 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131752 44dcf7b0 Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131752 44dcf7b1 Connection from 24.99.106.22
T 20060813 131752 44dcf7b1 EHLO OCONNOR-584PMUU {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131752 44dcf7b1 MAIL FROM: <calderaconcise@archaeologist.com>
E 20060813 131752 44dcf7b1 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131752 44dcf7b1 Connection closed with 24.99.106.22, 0 sec. elapsed.
T 20060813 131752 44dcf7b2 Connection from 24.99.106.22
T 20060813 131752 44dcf7b2 EHLO OCONNOR-584PMUU {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131753 44dcf7b2 MAIL FROM: <arteriosclerosischipmunk@realtyagent.com>
E 20060813 131753 44dcf7b2 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131753 44dcf7b2 Connection closed with 24.99.106.22, 1 sec. elapsed.
T 20060813 131753 44dcf7b3 Connection from 24.99.106.22
T 20060813 131753 44dcf7b3 EHLO 51o7y.5nx47.adelphia.net {S/B: c-24-99-106-22.hsd1.ga.comcast.net}
T 20060813 131753 44dcf7b3 MAIL FROM: <burleyconsort@counsellor.com>
E 20060813 131753 44dcf7b3 Host 24.99.106.22 blocked by Spamhaus - message rejected.
T 20060813 131753 44dcf7b3 Connection closed with 24.99.106.22, 0 sec. elapsed.

T 20060813 172919 44dcf819 Connection from 24.98.129.32
T 20060813 172919 44dcf819 ehlo friend {S/B: c-24-98-129-32.hsd1.ga.comcast.net}
T 20060813 172919 44dcf819 MAIL FROM:<hugh@attglobal.net>
E 20060813 172919 44dcf819 Host 24.98.129.32 blocked by Spamhaus - message rejected.
T 20060813 172919 44dcf819 Connection closed with 24.98.129.32, 0 sec. elapsed.

T 20060813 200548 44dcf83f Connection from 65.34.194.164
T 20060813 200549 44dcf83f ehlo friend {S/B: c-65-34-194-164.hsd1.fl.comcast.net}
T 20060813 200549 44dcf83f MAIL FROM:<stephen@onr.com>
E 20060813 200549 44dcf83f Host 65.34.194.164 blocked by Spamhaus - message rejected.
T 20060813 200549 44dcf83f Connection closed with 65.34.194.164, 1 sec. elapsed.

T 20060814 083243 44dcf8e9 Connection from 67.163.198.170
T 20060814 083243 44dcf8e9 ehlo friend {S/B: c-67-163-198-170.hsd1.pa.comcast.net}
T 20060814 083244 44dcf8e9 MAIL FROM:<richard@folkesparekassen.dk>
E 20060814 083244 44dcf8e9 Host 67.163.198.170 blocked by Spamhaus - message rejected.
T 20060814 083244 44dcf8e9 Connection closed with 67.163.198.170, 1 sec. elapsed.

T 20060814 121858 44dcf938 Connection from 71.198.115.135
T 20060814 121901 44dcf938 helo localhost {S/B: c-71-198-115-135.hsd1.ca.comcast.net}
E 20060814 121901 44dcf938 554 You are not my local host - message rejected; see: HTTP://antispam.aosake.net.
T 20060814 121901 44dcf938 Connection closed with 71.198.115.135, 3 sec. elapsed.

T 20060814 152016 44dcf95a Connection from 68.63.96.137
T 20060814 152016 44dcf95a ehlo friend {S/B: c-68-63-96-137.hsd1.pa.comcast.net}
T 20060814 152016 44dcf95a MAIL FROM:<alexander@blomand.net>
E 20060814 152016 44dcf95a Host 68.63.96.137 blocked by Spamhaus - message rejected.
T 20060814 152016 44dcf95a Connection closed with 68.63.96.137, 0 sec. elapsed.
And, when they get through, I use SpamCop to report them to Comcast abuse. It doesn't always seem like it, but maybe Comcast abuse does do something about abuse complaints.

--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum


Morty7
Premium
join:2004-09-18

I would say they have, it might not be the most noticeable or enough by standards. However, the amount of reports has remained constant for the most part, while the number of subscribers has increased.



NormanS
I gave her time to steal my mind away
Premium,MVM
join:2001-02-14
San Jose, CA
kudos:11
Reviews:
·SONIC.NET
·Pacific Bell - SBC

Yeah. The zombie connection attempts to my server from Comcast have remained stable, in number, for the last year, or so. I think it is time for me to start ragging on Verizon; the volume of Verizon zombies has finally surpassed the volume of Comcast zombies!

Latest figures I can quickly find for ISP ranking by customer:

»www.isp-planet.com/research/rank···usa.html

Oddly, the customer ranking is:

No. 1: AOL
No. 2: Comcast
No. 3: AT&T Yahoo! HSI
No. 4: Verizon

But the ranking by spam volume in my MTA logs is:

No. 1: Verizon
No. 2: Comcast
No. 3: Charter
No. 4: Road Runner
No. 5: Shaw (Canada cable company)
(None of the above block port 25 outbound)
No. 6: AT&T Yahoo! HSI
No. 7: Bellsouth
No. 8: Cox
(All of the above block port 25 outbound; BS and Cox also block port 25 inbound.)
Note that a couple of companies which have fewer customers than AT&T also have higher zombie volumes.
--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum



LeftOfSanity
People Suck.

join:2005-11-06
Dover, DE
reply to Unsuspend

Even if the account was suspended for abuse, it would not make the modem lose sync. The modem should still get all the normal lights no matter if the account is suspended or not.



djdanska
Rudie32
Premium,MVM
join:2001-04-21
San Diego, CA
kudos:4

would they go to the trouble of putting a trap/filter on the line?



ykronic
Premium
join:2006-01-31
Canada

No, in cases of abuse the services are suspended at the cable modem level by giving it a new bootfile and abuse codes on the account. I suppose they may if the servies ended up being disconnected altogether.



Unsuspend

@Level3.net

Re: Acct suspended - Abuse Dept?

Well, of course, what happened? I've been home all week waiting for a call. I had to be out on Thursday morning but I had asked to be contacted on my cell phone. Do they call that? No...I get home and they had called my home number. Does this mean I go to the end of the queue again and have to wait another 4-5 days? This is ridiculous.

Out of curiosity, I went around to the neighbors closest to me to see if they've had any problem and none use Comcast. They all switched to DirecTV cause they were sick of the price increases, and for internet either use Verizon DSL or dialup.

As for the modem loosing sync, it's just the power light that's blinking, the rest are solid. The signal page looks good. And this happened between 1am and 7am last Saturday so I don't think Comcast had a tech out doing anything to the line. So its either some command they sent to the modem or the modem coincidentally started acting like this at the same time.



Unsuspend

@comcast.net

Final update

Thankfully, Comcast followed up with a call this morning (again to my home # . Rep said that I was suspended for excessive bandwidth. Said we used 300x times more than the normal customer. I can't dispute that since he didn't say how much we used, or what the average is. Kids are home for summer and I know they discovered some AOL TV site that shows old shows, so I'll take their word for it. I asked why I wasn't given a warning rather than just being suspended and after looking at the file, he said I should have received a warning, but couldn't tell me why one wasn't issued.

I also asked about the blinking power light and he said it was because of the suspension. I am back up and the light is now solid. Guess I'll have to search for some monitoring tools like DU Meter. I asked if they recommended any tools to help monitor this but he said they couldn't.

If I could make any recommendation with this process it's that they should at least give you access to email. I used my comcast acct for all important email. That is now changing, I will move everything off Comcast from now on. I can't be held hostage for a week without access to email.

Thanks



china crisis

join:2003-05-28

Makes you wonder what else your kids are doing that you don't know about.



Unsuspend

@comcast.net

Thanks for the parenting tip and for making such a valuable comment to the thread.


reply to Unsuspend

Re: Acct suspended - Abust Dept?

That's unlimited internet access for you.

The real tip off that it was for excessive use of the unlimited service was the end of day Friday cutoff. It was to make sure that you had no internet access over the weekend so that you know they have you by the short hairs.

Of course now everybody will start making irrelevant comments about how you are using your internet connection. You are of course a copyright infringer, a pornographer a thief and a spammer.



MrBradTX

join:2001-05-23
Carrollton, TX
reply to Unsuspend

Re: Final update

said by Unsuspend :

Rep said that I was suspended for excessive bandwidth. Said we used 300x times more than the normal customer.
...
Guess I'll have to search for some monitoring tools like DU Meter. I asked if they recommended any tools to help monitor this but he said they couldn't.
Ah yes, the invisible undocumented indefinite bandwitdh limit. Hooking up DUMeter will tell you how much you're using, but you STILL won't know whether you're in the red zone, since Comcast can't or won't tell you how much is too much. Evidently 300x average is across the line in your area, but you don't know whether 250x or 200x or 10x or 5x would be. Or even what "average" is.

As for monitoring your kids Internet habits, that's always a good idea regardless of Comcast's policies.

said by Unsuspend :

If I could make any recommendation with this process it's that they should at least give you access to email. I used my comcast acct for all important email. That is now changing, I will move everything off Comcast from now on. I can't be held hostage for a week without access to email.
Since Comcast essentially disabled your modem, it wouldn't have mattered whether you had an email account through another provider, unless you also had connectivity from that provider via dial-up, DSL, wireless etc.


LeftOfSanity
People Suck.

join:2005-11-06
Dover, DE
reply to Unlimited Access

Re: Acct suspended - Abust Dept?

That's unlimited internet access for you

here we go.....

Where does it say unlimited sir? Got a link?


Link to unlimited.

"Your time spent online is completely unlimited"

»www.comcast.com/Support/Corp1/FA···202.html



DreamWraith
Premium
join:2004-04-07
Mount Vernon, WA
reply to Unsuspend

Thats referring to time spent, not bandwidth used. It says as much in the ToS afaicr.

In any case, for them to suspend an account based on bandwidth it HAS to be a VAST amount. The users that have posted about receiving warning letters lately have been in the 600GB range.

I would imagine at the least your houshold had used 300GB of bandwidth, probably closer to 600 to get such a suspension.

In any case, for that much to be used, there is no way your kids could just be watching videos from a website... unless they were awake doing so 24 hours a day.

They must be downloading other stuff, and/or uploading stuff...



jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR
reply to Unlimited Access

As DreamWraith mentioned, this is about connection time not bandwidth used. Two different things. This has been discussed adnauseum on the Comcast forums. Cable is a shared resource. If any one user is downloading/uploading that much they may be affecting other users on their node. I can't remember the figures but for someone to use 600 gb's in one month they'd have to be downloading/uploading a buttload of info.

This may have nothing to do with anything illegal. You can still abuse the bandwidth alloted by your ISP. If you watched live video feeds 24 hours a day I suspect you'd probbly hit your limit as well. Add multiple computers being operated in a home and it doesn't take long for it to add up.

Unfortunately as others have mentioned Comcast does not publish a set bandwidth number for us users. It is assumed to be around the 500 to 600 GB mark. They still should have sent you a warning notice though.



1 recommendation

Oh I see.

You can stay online as long as you want, but you can't use all of your bandwidth bandwidth during that time online.



now you get it

@168.84.x.x

Quote "You can stay online as long as you want, but you can't use all of your bandwidth bandwidth during that time online."

Give that sub a ceegar



DreamWraith
Premium
join:2004-04-07
Mount Vernon, WA

2 edits
reply to Unsuspend

Well, think of it like this. If 500 people all paid admission to an all you can eat buffet, and one person ate almost all the food, and was always at the buffet, keeping other people from eating, do not you think those others without food would get quite pissed off? Then, as happens at buffets, eventually that guy would be expelled, and possibly not allowed back.

Because that is exactly what happened. Each node is designed to handle around 500 subscribers IIRC. Each node is shared between those subscribers.

Thankfully for you, Comcast is lenient, and giving you a second chance to get yout usage under control. Some ISP's are not so forgiving.



jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR
reply to Unlimited Access

said by Unlimited Access :

Oh I see.

You can stay online as long as you want, but you can't use all of your bandwidth bandwidth during that time online.
And to further explain as I mentioned cable is a shared resource. Your node is capable of handling about 40 Gbs of bandwidth. Depending on how many users are behind your node, every other users bandwidth for a given time is affecting everyone else on that node. If you're on a 6 GB account and downloading constantly you're using about 24% of the available bandwidth for that node. Multiply any other users who might be downloading at the same time and before long every users bandwidth behind the node will be affected and their speeds will suffer. The nodes do have burst capabilites but that is only for short periods. With 6 and 8 GB accounts as the norm it doesn't take long for a node to become saturated.

And Comcast does not provide the backbone. They have to pay for the bandwidth they use as well. They pay based on some kind of 95% plan. Someone else may be better able to explain that. But suffice to say bandwidth is not free so Comcast simply figures an average for each user and is billed accordingly. Go over that arbitrary amount and you risk "The Letter", which you didn't appear to get, and possible cut-off.


ninjadude

join:2002-01-06
Aurora, IL

1 recommendation

reply to Unsuspend

All those defending Comcast in this ... fine. But since they don't give him a target, notice, or indicator of bandwidth abuse, what's he supposed to do? I don't know of many people that keep track of how much goes thru their modem - especially for a home network. If they're going to be dicks about it, then the least they could do is give users some kind of tool to monitor the situation and a target. They obviously know how much data is being moved and track it. They obviously have some soft and hard limits. They could do a better job of this. I know this has been discussed before. And many say he must be massively abusing. But really, how do you YOU know that you're not a few web pages away from being cut off? The answer is, you don't. Think about it.



NormanS
I gave her time to steal my mind away
Premium,MVM
join:2001-02-14
San Jose, CA
kudos:11
Reviews:
·SONIC.NET
·Pacific Bell - SBC
reply to Unlimited Access

said by Unlimited Access :

That's unlimited internet access for you.
There's that "unlimited Internet" chestnut, again. Show me where any U.S. ISP offers "Unlimited Internet" access. Please.

I have AT&T Yahoo! HSI. I know they don't promise "Unlimited Internet". They actually announce that they block certain ports.
--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum


NormanS
I gave her time to steal my mind away
Premium,MVM
join:2001-02-14
San Jose, CA
kudos:11
Reviews:
·SONIC.NET
·Pacific Bell - SBC
reply to ninjadude

I would wager that 95% of Comcast customers don't need to know. If most are like my friends, they probably don't use more that 10GBytes per month. I download a lot of anime fansubs, but I am only running about 100GBytes a month.

Most Comcast users hit with these warnings are told that they are going over 300GBytes a month; some, who are willing to announce their usage, as high as 600GBytes. I am still trying to figure out how that can happen, short of 4 to 6 college room mates sharing a single Comcast connections, and sucking down videos and mp3s all day long.

Unless you are sucking a lot of TV shows via BitTorrent, Newzbin, or the like, you don't have anything to worry about. If you are sucking a lot of TV shows, your client should offer a means of tracking download usage.
--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum