Comment spammers chewing blogger bandwidth like crazy
Chris L. Morrow
christopher.morrow at verizonbusiness.com
Sat Jan 13 20:14:23 UTC 2007
On Sat, 13 Jan 2007, Gregory Hicks wrote:
> > Date: Sat, 13 Jan 2007 18:58:02 +0000 (GMT)
> > From: "Chris L. Morrow" <christopher.morrow at verizonbusiness.com>
> > Subject: Re: Comment spammers chewing blogger bandwidth like crazy
> > To: Thomas Leavitt <thomas at thomasleavitt.org>
> > Cc: nanog <nanog at merit.edu>
> > On Sat, 13 Jan 2007, Thomas Leavitt wrote:
> > > Why has 126.96.36.199, an IP in Ukraine, been eating a tremendous
> > > amount of bandwidth? What are they doing?
> > this isn't in the ukraine, it's in NYC behind ISPrime. Phil is fairly
> > hhelpful, you might ask them to 'figure out what the heck is going on'
> > with that ip :)
> > -Chris
> > (unless the ukraine got a whole lot closer to IAD than I thought:
> > 64 bytes from 188.8.131.52: icmp_seq=1 ttl=55 time=13.1 ms
> > 64 bytes from 184.108.40.206: icmp_seq=2 ttl=55 time=24.5 ms
> % Information related to '220.127.116.11 - 18.104.22.168'
> inetnum: 22.214.171.124 - 126.96.36.199
> netname: NETCATHOST
> descr: NetcatHosting
yes, but 'whois info' is not often 'correct' especially in this case,
traceroute to it, unless ISPrime has some time-space vortex that ip
(that one of the /22) is actually in NYC. speed-o-light don't often lie...
More information about the NANOG