Comment spammers chewing blogger bandwidth like crazy

Chris L. Morrow christopher.morrow at verizonbusiness.com
Sat Jan 13 20:14:23 UTC 2007



On Sat, 13 Jan 2007, Gregory Hicks wrote:

>
> > Date: Sat, 13 Jan 2007 18:58:02 +0000 (GMT)
> > From: "Chris L. Morrow" <christopher.morrow at verizonbusiness.com>
> > Subject: Re: Comment spammers chewing blogger bandwidth like crazy
> > To: Thomas Leavitt <thomas at thomasleavitt.org>
> > Cc: nanog <nanog at merit.edu>
> >
> >
> >
> > On Sat, 13 Jan 2007, Thomas Leavitt wrote:
> >
> > > Why has 195.225.177.46, an IP in Ukraine, been eating a tremendous
> > > amount of bandwidth? What are they doing?
> >
> > this isn't in the ukraine, it's in NYC behind ISPrime. Phil is fairly
> > hhelpful, you might ask them to 'figure out what the heck is going on'
> > with that ip :)
> >
> > -Chris
> > (unless the ukraine got a whole lot closer to IAD than I thought:
> > 64 bytes from 195.225.177.46: icmp_seq=1 ttl=55 time=13.1 ms
> > 64 bytes from 195.225.177.46: icmp_seq=2 ttl=55 time=24.5 ms
>
> Um-m-m-m...
>
> % Information related to '195.225.176.0 - 195.225.179.255'
>
> inetnum:        195.225.176.0 - 195.225.179.255
> netname:        NETCATHOST
> descr:          NetcatHosting

yes, but 'whois info' is not often 'correct' especially in this case,
traceroute to it, unless ISPrime has some time-space vortex that ip
(that one of the /22) is actually in NYC. speed-o-light don't often lie...



More information about the NANOG mailing list