[SpamCop.net - protecting the internet through technology]

[SC-Help] RE:SPAM from your block: 69.67.72.021 [#2446202] -- XO.COM re"CONSUMER RESEARCH CORP" SPAMMING

Jeff G. notanks at coks.net
Tue May 24 21:32:13 EDT 2005


On 5/18/2005 7:13 AM JOE AHEARN scribbled:

> Joe Ahearn -- 
> Are you talking about the Viagra spam emails?  I am getting 15 or 20 every 
> day.  Blocking them doesn't stop them.  My daughter in Texas is getting them 
> too.  Joe
> ----- Original Message ----- 
> From: "Steve Johnson" <steevian at yahoo.com>
> To: "Joe Ahearn" <cashbox at bellsouth.net>
> Cc: <UCE at FTC.Gov>; <spamcop-help at news.spamcop.net>
> Sent: Tuesday, May 17, 2005 6:15 AM
> Subject: [SC-Help] RE:SPAM from your block: 69.67.72.021 [#2446202] --  
> XO.COM re"CONSUMER RESEARCH CORP" SPAMMING
> 
> 
> 
>>Hi Kevin,
>>
>>Thanks for the info & sorry to bother you, I too work in support & know 
>>how that
>>goes... but if you read my email you would know I have tried emailing and 
>>calling
>>abuse & your net ops, etc., several times and have had no response at 
>>best - so I
>>thought I'd try a few other email addresses.
>>
>>Yes I do have a 'further question,' can you open a ticket on this issue 
>>since your
>>abuse will not take action or even acknowledge that this is your block - 
>>what does
>>that tell me?! Maybe someone in support could investigate why you continue 
>>to allow
>>huge amounts of SPAMMING activity from your IP block: 69.67.72.0/21 ???
>>
>>Thanks.
>>
>>
>>--- support at xo.com wrote:
>>
>>>Hello Steve,
>>>
>>>Thank you for your email.
>>>
>>>You will need to direct this situation to our Network Investigations 
>>>department
>>>for any possible resolution or addressing of this situation.  They can be 
>>>reached
>>>through http://support.xo.com/abuse or abuse at xo.com.
>>>
>>>Let us know if you have any further questions.
>>>
>>>Customer Care is available 24 hours a day, 7 days a week to assist you. 
>>>For the
>>>most efficient handling of your inquiries, submit a trouble ticket from 
>>>the XO
>>>Gateway (go to http://admin.xo.com, select 'Care' and then 'Contact 
>>>Customer
>>>Support').  You may also contact Customer Care over the phone by calling
>>>888-575-6398.
>>>
>>>Best regards,
>>>Kevin C.
>>>Web Site Hosting Support Team
>>>XO Communications
>>>
>>>--Original Message--
>>>From: steevian at yahoo.com
>>>Date: 05/17/05
>>>To: support at xo.com
>>>Subject: SPAM from your block: 69.67.72.021[#2446202]
>>>
>>>This e-mail message is a reply to a Web page using the
>>>form2mail script.  The reply was generated by a web page
>>>at xo.com.
>>>
>>>
>>>Subject:                        SPAM from your block: 69.67.72.021
>>>
>>>
>>>
>>>ADMIN KEY:s65jfk35
>>>First Name:                     Steve
>>>Last Name:                      Johnson
>>>Company Name:                   na
>>>Address 1:                      na
>>>Address 2:
>>>City:                           na
>>>State:                          WI
>>>Zip:                            53706
>>>Phone:                          (111)222-3333 ext:
>>>Fax:                            --
>>>Email:                          steevian at yahoo.com
>>>
>>>
>>>
>>>Comments:
>>>TO SPAMCOP, cc XO:
>>>
>>>According to this, the block where SPAM is coming from "69.67.72.0/21" 
>>>belongs to
>>>XO:
>>>
>>>http://www.cidr-report.org/cgi-bin/as-report?as=AS2828
>>>
>>>I have called XO about 4 times and all I get is them totally denying this 
>>>block
>>>isnot theirs & one person in their Ops even laughed at the suggestion.
>>>
>>>Anyone who is interested, please help me in pressuring "XO" to try a 
>>>little harder
>>>to be a responsible ISP, thanks!
>>>
>>>Here's a small sample of the intense SPAMMING from this "XO CUSTOMER:"
>>>
>>>
>>>--- Money to shop <vmyagwaf at jxpzfbc.tradepointone.com> wrote:
>>>
>>>>X-Apparently-To: steevian at yahoo.com via 206.190.37.237; Tue, 17
>>>>May 2005 00:37:17 -0700
>>>>X-YahooFilteredBulk: 69.67.72.70
>>>>Authentication-Results: mta273.mail.scd.yahoo.com
>>>>  from=jxpzfbc.tradepointone.com; domainkeys=neutral (no sig)
>>>>X-Originating-IP: [69.67.72.70]
>>>>Return-Path: <vmyagwaf at jxpzfbc.tradepointone.com>
>>>>Received: from 69.67.72.70  (EHLO eicmssgnq.tradepointone.com)
>>>>(69.67.72.70)
>>>>  by mta273.mail.scd.yahoo.com with SMTP; Tue, 17 May 2005 00:34:59
>>>>-0700
>>>>From: "Money to shop" <vmyagwaf at jxpzfbc.tradepointone.com>
>>>>To: <fmrpdolo at jxpzfbc.tradepointone.com>
>>>>Subject: Start secret shopping today
>>>>Date: Tue, 17 May 2005 00:37:42 -0800
>>>>MIME-Version: 1.0
>>>>Content-Type: text/html;
>>>>Content-Length: 1478
>>>>
>>>
>>>
>>>--- Money to shop <nmmlgagnykunz at dkjxsxzwkod.tradepointone.com> wrote:
>>>
>>>>X-Apparently-To: steevian at yahoo.com via 206.190.37.30; Tue, 17
>>>>May 2005 00:56:26 -0700
>>>>X-YahooFilteredBulk: 69.67.72.67
>>>>Authentication-Results: mta217.mail.scd.yahoo.com
>>>>  from=dkjxsxzwkod.tradepointone.com; domainkeys=neutral (no sig)
>>>>X-Originating-IP: [69.67.72.67]
>>>>Return-Path: <nmmlgagnykunz at dkjxsxzwkod.tradepointone.com>
>>>>Received: from 69.67.72.67  (EHLO hibibivv.tradepointone.com)
>>>>(69.67.72.67)
>>>>  by mta217.mail.scd.yahoo.com with SMTP; Tue, 17 May 2005 00:56:18
>>>>-0700
>>>>From: "Money to shop" <nmmlgagnykunz at dkjxsxzwkod.tradepointone.com>
>>>>To: <jpxeze at dkjxsxzwkod.tradepointone.com>
>>>>Subject: Get a one thousand dollar gift card to shop with
>>>>Date: Tue, 17 May 2005 00:59:01 -0800
>>>>MIME-Version: 1.0
>>>>Content-Type: text/html;
>>>>Content-Length: 1509
>>>>
>>>
>>>
>>>--- Mowers <sxgkvs at jhyrujgwvmu.freeserving.com> wrote:
>>>
>>>>X-Apparently-To: steevian at yahoo.com via 206.190.37.25; Mon, 16
>>>>May 2005 22:16:07 -0700
>>>>X-YahooFilteredBulk: 69.67.72.59
>>>>Authentication-Results: mta110.mail.scd.yahoo.com
>>>>  from=jhyrujgwvmu.freeserving.com; domainkeys=neutral (no sig)
>>>>X-Originating-IP: [69.67.72.59]
>>>>Return-Path: <sxgkvs at jhyrujgwvmu.freeserving.com>
>>>>Received: from 69.67.72.59  (EHLO dwxprco.freeserving.com)
>>>>(69.67.72.59)
>>>>  by mta110.mail.scd.yahoo.com with SMTP; Mon, 16 May 2005 22:15:28
>>>>-0700
>>>>From: "Mowers" <sxgkvs at jhyrujgwvmu.freeserving.com>
>>>>To: <cczjxwnn at jhyrujgwvmu.freeserving.com>
>>>>Subject: Get a top name lawn tractor FREE*!
>>>>Date: Mon, 16 May 2005 22:18:09 -0800
>>>>MIME-Version: 1.0
>>>>Content-Type: text/html;
>>>>Content-Length: 1506
>>>>
>>>
>>>
>>>--- Consumer Feedback <oyxwhekgfsv at nxjjjgidssf.tradepointone.com> wrote:
>>>
>>>>X-Apparently-To: steevian at yahoo.com via 206.190.37.22; Mon, 16
>>>>May 2005 19:36:44 -0700
>>>>X-YahooFilteredBulk: 69.67.72.61
>>>>Authentication-Results: mta317.mail.scd.yahoo.com
>>>>  from=nxjjjgidssf.tradepointone.com; domainkeys=neutral (no sig)
>>>>X-Originating-IP: [69.67.72.61]
>>>>Return-Path: <oyxwhekgfsv at nxjjjgidssf.tradepointone.com>
>>>>Received: from 69.67.72.61  (EHLO nxjjjgidssf.tradepointone.com)
>>>>(69.67.72.61)
>>>>  by mta317.mail.scd.yahoo.com with SMTP; Mon, 16 May 2005 19:36:06
>>>>-0700
>>>>From: "Consumer Feedback"
>>>><oyxwhekgfsv at nxjjjgidssf.tradepointone.com>
>>>>To: <mpzlfrcdjipgc at nxjjjgidssf.tradepointone.com>
>>>>Subject: This amazing new Cell phone could be yours Free!
>>>>Date: Mon, 16 May 2005 19:38:46 -0800
>>>>MIME-Version: 1.0
>>>>Content-Type: text/html;
>>>>Content-Length: 1492
>>>>
>>>
>>>
>>>--- Satellite offer <pfhsgheu at udyuqzm.servingones.com> wrote:
>>>
>>>>X-Apparently-To: steevian at yahoo.com via 206.190.37.30; Mon, 16
>>>>May 2005 15:09:33 -0700
>>>>X-YahooFilteredBulk: 69.67.72.21
>>>>Authentication-Results: mta183.mail.dcn.yahoo.com
>>>>  from=udyuqzm.servingones.com; domainkeys=neutral (no sig)
>>>>X-Originating-IP: [69.67.72.21]
>>>>Return-Path: <pfhsgheu at udyuqzm.servingones.com>
>>>>Received: from 69.67.72.21  (EHLO vsgwsqbrgli.servingones.com)
>>>>(69.67.72.21)
>>>>  by mta183.mail.dcn.yahoo.com with SMTP; Mon, 16 May 2005 15:09:07
>>>>-0700
>>>>From: "Satellite offer" <pfhsgheu at udyuqzm.servingones.com>
>>>>To: <uaxvrtcrxubmd at udyuqzm.servingones.com>
>>>>Subject: All you need and a lifetime subscription to Sirius
>>>>Satellite!
>>>>Date: Mon, 16 May 2005 15:11:43 -0800
>>>>MIME-Version: 1.0
>>>>Content-Type: text/html;
>>>>Content-Length: 1520
>>>>
>>>
>>>
>>>
>>
>>
>>
>>__________________________________
>>Yahoo! Mail Mobile
>>Take Yahoo! Mail with you! Check email on your mobile phone.
>>http://mobile.yahoo.com/learn/mail
>>_______________________________________________
>>SpamCop-Help mailing list
>>SpamCop-Help at news.spamcop.net
>>http://news.spamcop.net/mailman/listinfo/spamcop-help
>>
> 
> 
> 
I'm sorry, new here and all, but can't help but notice that XO.com does
not come up on either of 3 programs I use, so what is the problem with
XO here -
 69.67.72.70 is popping up as Pacbell, after 4 or 5 XO relays - true?
I'll put my helmet on and duck here...


More information about the SpamCop-Help mailing list