[ale] $#%@ spammers!

[David Brooks]

Looks like it's Knight Web hosting (read: Big, Huge, Unchecked spam
house):

-----

10:32:06  db at cerberus:(~)$ whois 63.170.11.194 at whois.arin.net
[whois.arin.net]
Sprint (NETBLK-SPRN-BLKS)       SPRN-BLKS          63.160.0.0 -
63.175.255.255
KNIGHT WEB HOSTING (NETBLK-FON-106810854447100) FON-106810854447100
                                                   63.170.11.0 -
63.170.11.255

-----

Moreoever, if you lookup the Netblock name, you get a name and phone
number (and address) of the person who owns that IP space:

-----

10:32:21  db at cerberus:(~)$ whois
NETBLK-FON-106810854447100 at whois.arin.net
[whois.arin.net]
KNIGHT WEB HOSTING (NETBLK-FON-106810854447100)
   4530 TOURNAMENT DR #201
   RALEIGH, NC 27612
   US

   Netname: FON-106810854447100
   Netblock: 63.170.11.0 - 63.170.11.255

   Coordinator:
      KNIGHT, GABRIEL  (GK380-ARIN)  GKNIGHT81 at HOTMAIL.COM
      (919)786-9602

-----

...so, what you should do is send email to abuse at sprint.net,
noc at sprint.net (their upstream provider), as well as
gknight81 at hotmail.com (chances are its his personal email address, which
will annoy him more - he sent you mail you didnt want, you can do the
same to him).  Also, give Mr. Knight a call and give him a piece of your
mind.

-Dave


On Thu, 2002-03-07 at 10:26, James P. Kinney III wrote:
> While reading the other alers "fred" spam complaints, my copies arrived
> as well. I looked at the header and the cranfield.ac.uk address is
> forged. An originating machine is Received: from forserve.com
> ([63.170.11.194])
> 
> So a whois on forserve.com shows:
> Registrant:
>    mark winters llc
>    10904 W Pico Blvd
>    los angeles, ca  90010
>    US
> 
>    Domain: FORSERVE.COM
> 
>    Administrative Contact:
>       mark winters (MW491-IYD) hosting445 at hotmail.com
>       mark winters llc
>       10904 W Pico Blvd
>       los angeles, ca  90010 US
>       +1.3105555555
> 
>    Technical Contact:
>       mark winters (MW491-IYD) hosting445 at hotmail.com
>       mark winters llc
>       10904 W Pico Blvd
>       los angeles, ca  90010 US
>       +1.3105555555
> 
>    Billing Contact:
>       mark winters (MW491-IYD) hosting445 at hotmail.com
>       mark winters llc
>       10904 W Pico Blvd
>       los angeles, ca  90010 US
>       +1.3105555555
> 
>    Created: 03/01/2002
>    Updated: 03/06/2002
>    Expires: 03/01/2003
> 
>    Domain Name Servers in listed order:
> 
>       NS1.ITSYOURDOMAIN.COM
>       NS2.ITSYOURDOMAIN.COM
> 
> ItsYourDomain.com - "The Wholesale Registrar"
> 
> 
> What does everyone see about the phone number?!?!
> Mapquest show a location.
> http://www.mapquest.com/maps/map.adp?country=US&address=10904+W+pico+blvd&city=Los+Angeles&state=CA&zipcode=90010&homesubmit.x=36&homesubmit.y=12
> 
> But www.whitepages.com can't find a listing for anything at that
> address. Anybody know a large guy named "Guido" with a broken nose and
> bad temper that lives in LA?
> 
> 
> -- 
> James P. Kinney III   \Changing the mobile computing world/
> President and COO      \          one Linux user         /
> Local Net Solutions,LLC \           at a time.          /
> 770-493-8244             \.___________________________./
> 
> GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
> <jkinney at localnetsolutions.com>
> Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7 
> 
> 
-- 
david a. brooks
* systems administrator
* stayonline.net, inc.
* voice: .. 770/933-0600 x217
* email: .. db at stayonline.net
* :wq!


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.