Re: Spammie using my address as From: in email to me!??!
MikeE at ster.invalid
Fri Nov 26 14:15:30 EST 2004
> "Mike Easter"
>> Porpoise1954 wrote:
>>> Apparently from a Demon UK account.
>> 22.214.171.124 rDNS mailgate.abexltd.co.uk
>> There's a website somewhere else http://www.abexltd.co.uk./
>> ... but I can't put it together.
> Hhmmm...... Innocent bystander????
Most likely 126.96.36.199 is abused somehow. The domainname
abexltd.co.uk uses demon's mailservers at a different /24
inetnum: 188.8.131.52 - 184.108.40.206
...but your [probably] abused IP is an adsl in a little bitty block of 7
inetnum: 220.127.116.11 - 18.104.22.168
descr: DEMON ADSL CUSTOMER
descr: Abex Limited
The target or reference one is currently showing online. If we wanted
to probe its ports, we might be able to find out what's wrong with it --
it isn't currently listed anywhere.
Whereas the website for the forklift trucks is here 22.214.171.124 -
inetnum: 126.96.36.199 - 188.8.131.52
descr: Demon Internet
descr: Web Hosting Solutions
since there's only 32 IPs there, demon probably has them 'stacked up' -
we'll look at our target:
184.108.40.206 - IP hosts 112 Total Domains ...
220.127.116.11 - IP hosts 141 Total Domains ...
etc. So they cram a lot of websites into that little block of 32.
kibitzer, not SC admin
More information about the SpamCop-List