Complained to them about one of their spammy customers once
again. a Porn spammer who keeps spamming me This isn't the
first time I got this or complained about it either.
Website in question is http://www.view.net
05/07/12 09:45:11 dns www.view.net
Mail for www.view.net is handled by view.net
Canonical name: view.net
Aliases:
www.view.net
Addresses:
184.172.190.108
now the spam got sent from 188.165.243.61
05/06/12 22:09:50 dns 188.165.243.61
nslookup 188.165.243.61
Canonical name: s4.gchats.com
Addresses:
188.165.243.61
The IP 188.165.243.61 is owned by ovh.com / ovh.net
OVH
OVH SAS
2 rue Kellermann
59100 Roubaix
France
Phone #: +33 9 74 53 13 23
Website: http://www.ovh.com
Who currently has 46 listings on spamhaus.org at the time of writing
this post.
Found 46 SBL listings for IPs under the responsibility of ovh.net
SBL138322 91.121.158.5/32 ovh.net
07-May-2012 07:33 GMT ZeuS botnet controller @91.121.158.5
SBL138173 91.121.1.85/32 ovh.net
05-May-2012 15:24 GMT Forum/Comment spam source @91.121.1.85
SBL138153 37.59.68.23/32 ovh.net
05-May-2012 09:02 GMT Black hole exploit site
SBL138121 91.121.72.48/32 ovh.net
04-May-2012 23:10 GMT open relay emitting spam
SBL138055 94.23.36.28/32 ovh.net
04-May-2012 08:17 GMT open relay emitting spam at atalyse.fr
SBL138000 178.33.32.239/32 ovh.net
04-May-2012 05:29 GMT Spammer hosting @178.33.32.239
SBL137931 188.165.171.68/32 ovh.net
03-May-2012 10:04 GMT Spammer DNS hosting
SBL137893 188.165.252.153/32 ovh.net
02-May-2012 21:20 GMT open relay emitting spam
SBL137864 91.121.93.178/32 ovh.net
02-May-2012 13:58 GMT ZeuS botnet controller @91.121.93.178 [hijacked
websites]
SBL137636 178.33.48.234/32 ovh.net
29-Apr-2012 22:59 GMT phish redirector at eboi.eu
SBL137625 213.186.33.87/32 ovh.net
29-Apr-2012 16:04 GMT Spammer hosting @213.186.33.87
SBL137577 37.59.164.224/29 ovh.net
28-Apr-2012 18:44 GMT buzbynetworks.net
SBL137532 91.121.70.28/32 ovh.net
28-Apr-2012 12:44 GMT phish source at segratevillage.it
SBL137515 188.165.196.119/32 ovh.net
28-Apr-2012 09:58 GMT awdnews.com
SBL137514 46.105.107.56/32 ovh.net
28-Apr-2012 09:17 GMT Forum/Comment spam source @46.105.107.56
SBL137506 46.105.246.228/30 ovh.net
28-Apr-2012 08:49 GMT spam emitters "David Bernstein" (1/2)
SBL137379 91.121.6.111/32 ovh.net
27-Apr-2012 05:15 GMT Malware botnet controller @91.121.6.111
SBL137373 176.31.17.44/32 ovh.net
27-Apr-2012 04:47 GMT Forum/Comment spam source @176.31.17.44
SBL137355 46.105.106.138/32 ovh.net
26-Apr-2012 17:38 GMT Spam source @46.105.106.138
SBL137157 176.31.15.249/32 ovh.net
25-Apr-2012 02:44 GMT Executive Who's Who spamming:
bookbagnetwork.net
SBL137125 37.59.90.181/32 ovh.net
24-Apr-2012 21:11 GMT Fraud spamming
SBL136977 176.31.117.54/32 ovh.net
24-Apr-2012 11:04 GMT Forum/Comment spam source @176.31.117.54
SBL136693 178.32.190.142/32 ovh.net
20-Apr-2012 12:01 GMT Fake-AV botnet controller @178.32.190.142
SBL136568 176.31.127.71/32 ovh.net
19-Apr-2012 03:11 GMT Spamvertized site [work at home scam]
[compromised?]
SBL136452 176.31.18.236/32 ovh.net
18-Apr-2012 05:19 GMT Forum/Comment spam source @176.31.18.236
SBL136311 37.59.206.96/27 ovh.net
16-Apr-2012 15:29 GMT spam emitters
SBL136056 46.105.121.139/32 ovh.net
13-Apr-2012 13:23 GMT Spammer DNS hosting
SBL135853 176.31.155.1/32 ovh.net
11-Apr-2012 16:40 GMT Forum/Comment spam source @176.31.155.1
SBL135592 91.121.159.70/32 ovh.net
08-Apr-2012 22:32 GMT Botnet spammer hosting: abcfinancejournal.ru
etc.
SBL135581 178.32.245.0/24 ovh.net
08-Apr-2012 22:11 GMT Spammer hosting (escalation)
SBL135579 178.32.245.1/32 ovh.net
08-Apr-2012 22:09 GMT Botnet spammer hosting: abcfinancejournal.ru
etc.
SBL135426 176.31.255.114/32 ovh.net
06-Apr-2012 22:21 GMT spam emitter
SBL135334 178.32.145.35/32 ovh.net
06-Apr-2012 10:51 GMT spam emitter
SBL135273 94.23.98.99/32 ovh.net
05-Apr-2012 21:58 GMT nice-networks.net
SBL134119 46.166.144.0/23 ovh.net
26-Mar-2012 04:24 GMT Spammer hosting (escalation)
SBL133811 46.166.145.113/32 ovh.net
23-Mar-2012 09:31 GMT ZeuS botnet controller @46.166.145.113
SBL133418 213.186.33.35/32 ovh.net
20-Mar-2012 09:53 GMT Cybercrime hosting (escalation)
SBL133417 213.186.33.34/32 ovh.net
20-Mar-2012 09:53 GMT Cybercrime hosting (escalation)
SBL133416 213.186.33.33/32 ovh.net
20-Mar-2012 09:53 GMT Cybercrime hosting (escalation)
SBL133415 213.186.33.80/32 ovh.net
20-Mar-2012 09:53 GMT Cybercrime hosting (escalation)
SBL133414 213.186.33.49/32 ovh.net
20-Mar-2012 09:53 GMT Cybercrime hosting (escalation)
SBL133413 213.186.33.42/32 ovh.net
20-Mar-2012 09:53 GMT Cybercrime hosting (escalation)
SBL133411 213.186.33.21/32 ovh.net
20-Mar-2012 09:17 GMT Cybercrime hosting (escalation)
SBL129389 46.105.173.64/26 ovh.net
17-Feb-2012 08:52 GMT Dirty Block (santrex.net)
SBL129388 46.105.173.114/32 ovh.net
17-Feb-2012 08:47 GMT pharma spammer
SBL128961 91.121.158.217/32 ovh.net
13-Feb-2012 14:05 GMT jslr18.com (liberad media/b lead) - site
The blocks right around the IP where this spam came from is
definitely
dirty
SBL137931 188.165.171.68/32 ovh.net
03-May-2012 10:04 GMT Spammer DNS hosting
SBL137893 188.165.252.153/32 ovh.net
02-May-2012 21:20 GMT open relay emitting spam
There is an open relay at 188.165.252.153/32 and a spammer
using DNS at 188.165.171.68/32 it is reasonable to assume that
the filth extends further into this IP block as well.
Bellow is my response them. Notice how they try and defend their
spammy
customer. Their customer has either hired a spammer or are spamming
themselves try to drive traffic to their site. But that doesn't stop
hostgator.com
from trying to defend their spammy little customer.
Also they claim that they have never recieved any complaints about
view.net
previously which is a lie.
"In addition the client in question has been with us for quite some
time and no other spam or spamvertising complaints have been made
against this client."
Funny I found other people complaining about this same site and being
spammed and it appears
it has been ongoing for years.
2010
http://www.spambog.com/en/pillory/51749-ladies_couples_upgrade_to_vip...
hostgator.com is still pure scum and still supporting spammers I have
had
run-ins previously with these guys and continue to. Of course
hostgator.com
is being hosted by theplanet.com AKA "The planet of spam" /
Softlayer.com
Softlayer.com bought out theplanet.com a few years back and continue
the
tradition of supporting spammers.
hostgator.com doesn't have any policies in place that support the
people
complaining about the spammer just the spammer's themselves.
You are supporting a known spammer your customer is hosting this site
on
YOUR network and spamming via open proxies / relay / zombie machines.
You are not protecting the people reporting this you are protecting
your
spammy customer.
There have been NO false headers or anything such as that your
customer
Is a spammer or has hired a spammer to spam their site and try and
drive
Business to their website. I gave you the full headers the headers
are 100%
Legit.
There is no honest mistake here what so ever. Your answers are
unacceptable
And I demand that this spammer be removed from your customer’s network
Now or that you terminate all connectivity to your customer.
You cannot continue to support a known spam operation. Hostgator.com
You are a bunch of scumbags you do support spammers and it needs
to cease now.
Your answers are unacceptable and nothing more than a bunch of BS
Either you have your customer remove the spammer from their network
Or terminate your customer immediately!
Your staff are absolute idiots! Simply because the email does not
originate from
One of your IPs does not mean your customer is not spamming. Your
customer is
Abusing open proxies / relays / insecure machines. Which is commonly
abused
By spammers. Simply because it didn’t originate from your IP does NOT
mean
Your customer is not a spammer or has hired a spammer to spam for
them.
If you are working in an abuse department and you don’t know that
then
You probably shouldn’t be in the abuse department then.
Bottom line is the site needs to be removed, I am sick of this abuse
and sick of
Hostgator.com supporting spammers.
Either have your customer remove the spammer from their network or I
expect
Them to be immediately shut down.
If you are not willing to do so then I expect this ticket to be
escalated to the owner
Of Hostgator.com immediately and we will take this matter right to the
top.
Again softlayer.com your customer continues to make nothing but
excuses as to why
They won’t remove this spammy customer.
Hostgator.com supports spammers and it is well documented!
http://hosting-reviews-exposed.com/redemption/hostgator-com.html
http://seclists.org/fulldisclosure/2010/Oct/480
http://www.stupidhead.org/spammers/opinionzpay.com.php
http://groups.google.com/group/news.admin.net-abuse.email/browse_thre...
http://groups.google.com/group/news.admin.net-abuse.email/browse_thre...
http://groups.google.com/group/news.admin.net-abuse.email/search?grou...
I never asked for this junk mail and I do NOT want it and I demand
that hostgator.com
Get this customer off of their customers network now or that you will
remove all
Connectivity to hostgator.com immediately!
I am sure you have received other complaints and have ignored them
like this one and are
Outright lying to me now.
Shut down this spammer now or I expect to hear from the owner of
hostgator.com immediately.
Jamie
From: tick...@hostgator.com [mailto:tick...@hostgator.com]
Sent: Monday, May 07, 2012 1:12 PM
To: <REMOVED>
Subject: Update to Ticket ID: JDQ-18200141
Click here to rate this response.
________________________________________
Hello Jamie,
Thank you for contacting us.
Although we try to treat your complaint with the utmost respect and
consideration, we have policies in place to protect our customers as
well as those complaining. This is to ensure that we handle every
issue consistently. In this situation where you have reported a
website for spamvertising we have contacted the client in regards to
this to get his side of the story.
A couple of reasons for this are listed below:
- A competitor can use false headers to make a complaint
- The customer could be unaware of how their advertising agency is
marketing their website
- Honest mistake or ignorance of the law
We do not shut down websites immediately due to one complaint without
giving time for the client to explain the situation, this is not only
a safe guard for Hostgator as a company but the Internet as a whole.
We do take spam very seriously here at Hostgator and if a client is
found to be deliberately spamming the website is shut down
completely.
Since the e-mail in question did not originate on our servers it is
hard to come to the conclusion that our client intentionally sent out
this spam. In addition the client in question has been with us for
quite some time and no other spam or spamvertising complaints have
been made against this client. If this was not the case we would have
shut down the offending site immediately.
Our network is monitored 24/7 for spam issues and then we act on those
spam issues immediately to prevent the overwhelming problem with
spam.
We appreciate your time in bringing this issue to our attention;
however now we must follow our internal policies for following up with
the customer and possible negative actions taken against the account.
Thank you and have a great day!
If you have any further questions please feel free to contact us
anytime.
Best regards,
Matthew Harris
Linux Security Supervisor
Hostgator.com LLC
cPanel Certified Support Specialist
Mail Policy: http://www.hostgator.com/mailpolicy.shtml
Terms of Service: http://www.hostgator.com/tos/tos.php
