Hi! route: 91.199.50.0/24 descr: Netrouting Data Facilities origin: AS16131 mnt-by: GFX-MNT source: RIPE # Filtered In dit netblock zijn sites gehost die op groote schaal gespammed worden. Kan iemand van Grafix, of Netrouting hier ophelderingover geven? Examples: new--product--direct.info new--product-direct.com new--product-direct.net product-daily-direct.com daily-product-direct.net earth-online-access.net new--product--direct.org net-direct-product.com net-direct-product.net net-direct-product.org product-daily--direct.com new-products-direct.com net--direct-product.org net-direct--product.com net--direct-product.info net-direct--product.org new--products-direct.com net--direct--product.com net--direct--product.net net--direct--product.info new-products--direct.com net--direct--product.org net-direct-products.net net-direct-products.info net-direct-products.org net--direct-products.net net--direct-products.org net--direct-products.com net--direct--products.org net-direct-products.com direct-net-products.org direct-net-products.info direct--net-products.com direct--net-products.net direct--net-products.org direct--net-products.info direct-net--products.info direct-net--products.org daily--product-direct.org new-direct-product.com new-direct-product.net direct-net--products.net [root at control ~]# grep 91.199.50.101 /tmp/pipeaspam-debug | wc -l 818 De laatste weken rond de 1000 al. Iemand, vind dit een beetje brrrr zo dicht bij huis.... Bye, Raymond.
Spam detection software, running on the system "fallback.grafix.nl", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: 'k zal de klant er eens op aanspreken, ze draaien zelf abuse-desk (abuse at netrouting.eu) waardoor dit nog niet bij ons als upstream provider bekend was. Met vriendelijke groet, Michiel Klaver BA.ict GrafiX Internet B.V. [...] Content analysis details: (6.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: net--direct-products.org] 0.9 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: direct-net--products.org] 2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: net--direct--products.org] 1.2 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
Netrouting heeft zojuist de bewuste server uitgeschakeld, die klant van hun is niet langer welkom. Thanks voor de melding! Met vriendelijke groet, Michiel Klaver BA.ict GrafiX Internet B.V. Stationsplein 20 2907 MJ Capelle aan den IJssel The Netherlands Web: http://grafix.nl/ Tel: +31-(0)10-2640210 Fax: +31-(0)10-2640211 Providing high-end professional internet services at our privately owned net-neutral in-house Data Center Facilities in Capelle aan den IJssel and Alphen aan den Rijn. Connected at TeleCityRedbus2 (Amsterdam) and Spaanse Kubus (Rotterdam).
------------------------------------------------------------------------
Onderwerp: Re: [Nlnog] Spammer bij Grafix? Van: Michiel Klaver <m.klaver at grafix.nl> Datum: Fri, 19 Dec 2008 10:18:52 +0100 Aan: nlnog at nlnog.net
'k zal de klant er eens op aanspreken, ze draaien zelf abuse-desk (abuse at netrouting.eu) waardoor dit nog niet bij ons als upstream provider bekend was.
Met vriendelijke groet,
Michiel Klaver BA.ict GrafiX Internet B.V.
Stationsplein 20 2907 MJ Capelle aan den IJssel The Netherlands
Web: http://grafix.nl/ Tel: +31-(0)10-2640210 Fax: +31-(0)10-2640211
Providing high-end professional internet services at our privately owned net-neutral in-house Data Center Facilities in Capelle aan den IJssel and Alphen aan den Rijn. Connected at TeleCityRedbus2 (Amsterdam) and Spaanse Kubus (Rotterdam).
participants (2)
-
m.klaver＠grafix.nl -
raymond＠prolocation.net