Newsgroups: news.admin.net-abuse.usenet
From: bucha...@cybernex.net (Lysander Spooner)
Date: 1998/10/26
Subject: 30 days with PSI, the habitual Spamhaus (or: CFD UDP PSI)
PREFACE
This document is a quick compilation and analysis of the daily "Top The dates given in these entries refer to the date on which the report INTRODUCTION The history of Usenet abuse and PSI goes something like this: -=-=- Repeat until disgusted. This cycle must STOP! Sections 1 & 2 below document the present (unacceptable) level of I hereby call for discussion on the following: -=-=- that a "Five-day UDP Notice" be issued to PSI as soon as possible, that in light of past performance, we should place PSI on an automatic that during this probationary period, if the abuse rises to anywhere -=-=- Suggestions regarding specific criteria are solicited. On with the evidence... PART ONE -- The Server This is the less serious of the two problems, so let's cover it first. >Date Rank Server Total Spam %Spam Roughly 80% spam from their own server. >9/26/98 15 pubxfer.news.psi.net 4,138 3,153 76.00 >Avg Rank 11 Disgraceful. This justifies a UDP all by itself, and as I said, it's PART TWO -- The Posting Hosts Here's where the real damage is coming from -- the pub-ip dial-up A - Fort Worth / Dallas Texas >Date Rank Posting Host Total Spam %Spam Ninety five percent spam! From one bank of dial-up ports! And PSI >9/27/98 20 38.11.197.0 (Ft. Worth, TX) 1,456 1,456 100.00 is unwilling or unable to deal with it. This is not complicated -- trying to find spam from the Fort Worth POP is like looking for _hay_ in a haystack! These 163,000 spamules were brought to you by Tom Gartman. Yes, he's Remember, it's not just 163,000 spams. Every one of them requires a B- The Rest of Texas >9/26/98 48 tx.pub-ip.psi.net 650 547 84.00 Eighty five percent. Probably still mostly Gartman. >9/29/98 62 tx.pub-ip.psi.net 616 398 65.00 >9/30/98 10 tx.pub-ip.psi.net 3,145 3,145 100.00 >10/1/98 4 tx.pub-ip.psi.net 8,162 5,684 70.00 >10/2/98 3 tx.pub-ip.psi.net 7,452 7,452 100.00 >10/4/98 55 tx.pub-ip.psi.net 490 364 74.00 >10/6/98 77 tx.pub-ip.psi.net 397 332 84.00 >10/7/98 55 tx.pub-ip.psi.net 493 398 81.00 >10/10/98 39 tx.pub-ip.psi.net 696 553 79.00 >Total 22,101 18,873 >Average %Spam 85.39 C - New York (Primarily Syracuse) >9/29/98 29 38.26.155.0 (Syracuse, NY) 831 831 100.00 That's right, 99+% spam from NY POPs, every single day of the last >9/30/98 37 38.26.155.0 (Syracuse, NY) 881 881 100.00 >10/1/98 65 38.26.155.0 (Syracuse, NY) 343 343 100.00 >10/2/98 36 38.26.155.0 (Syracuse, NY) 639 639 100.00 >10/4/98 41 38.26.155.0 (Syracuse, NY) 560 560 100.00 >10/5/98 13 38.26.155.0 (Syracuse, NY) 2,036 2,036 100.00 >10/6/98 57 38.26.155.0 (Syracuse, NY) 470 470 100.00 >10/7/98 35 38.26.155.0 (Syracuse, NY) 623 623 100.00 >10/8/98 30 38.26.155.0 (Syracuse, NY) 1,002 1,002 100.00 >10/10/98 25 38.26.155.0 (Syracuse, NY) 938 938 100.00 >10/11/98 33 38.26.155.0 (Syracuse, NY) 656 656 100.00 >10/12/98 39 38.26.155.0 (Syracuse, NY) 876 876 100.00 >10/13/98 14 38.26.155.0 (Syracuse, NY) 1,070 1,070 100.00 >10/15/98 11 38.26.155.0 (Syracuse, NY) 2,039 2,039 100.00 >10/16/98 30 38.26.155.0 (Syracuse, NY) 813 813 100.00 >10/17/98 30 38.26.155.0 (Syracuse, NY) 920 920 100.00 >10/18/98 42 38.26.155.0 (Syracuse, NY) 525 525 100.00 >10/19/98 30 38.26.155.0 (Syracuse, NY) 826 826 100.00 >10/20/98 63 38.26.155.0 (Syracuse, NY) 447 447 100.00 >10/21/98 2 38.26.155.0 (Syracuse, NY) 5,134 5,134 100.00 >10/22/98 7 38.26.155.0 (Syracuse, NY) 3,779 3,779 100.00 >10/23/98 10 38.26.155.0 (Syracuse, NY) 2,069 2,069 100.00 >9/26/98 5 ny.pub-ip.psi.net 3,890 3,890 100.00 >9/27/98 13 ny.pub-ip.psi.net 2,966 2,966 100.00 >9/28/98 6 ny.pub-ip.psi.net 3,617 3,617 100.00 >9/29/98 12 ny.pub-ip.psi.net 2,428 2,428 100.00 >9/30/98 9 ny.pub-ip.psi.net 3,592 3,592 100.00 >10/1/98 10 ny.pub-ip.psi.net 3,118 3,118 100.00 >10/2/98 17 ny.pub-ip.psi.net 1,108 1,108 100.00 >10/3/98 15 ny.pub-ip.psi.net 1,915 1,746 91.00 >10/4/98 9 ny.pub-ip.psi.net 3,711 3,711 100.00 >10/5/98 20 ny.pub-ip.psi.net 1,342 1,208 90.00 >10/6/98 9 ny.pub-ip.psi.net 3,072 3,072 100.00 >10/7/98 6 ny.pub-ip.psi.net 3,033 3,033 100.00 >10/8/98 14 ny.pub-ip.psi.net 2,437 2,437 100.00 >10/9/98 11 ny.pub-ip.psi.net 2,796 2,796 100.00 >10/10/98 10 ny.pub-ip.psi.net 2,425 2,214 91.00 >10/11/98 7 ny.pub-ip.psi.net 3,200 3,200 100.00 >10/12/98 7 ny.pub-ip.psi.net 4,332 4,332 100.00 >10/13/98 5 ny.pub-ip.psi.net 3,500 3,500 100.00 >10/14/98 3 ny.pub-ip.psi.net 3,010 3,010 100.00 >10/15/98 5 ny.pub-ip.psi.net 2,809 2,809 100.00 >10/16/98 6 ny.pub-ip.psi.net 3,483 3,483 100.00 >10/17/98 7 ny.pub-ip.psi.net 4,164 4,164 100.00 >10/18/98 7 ny.pub-ip.psi.net 3,021 3,021 100.00 >10/19/98 5 ny.pub-ip.psi.net 4,905 4,905 100.00 >10/20/98 3 ny.pub-ip.psi.net 5,733 5,733 100.00 >10/23/98 18 ny.pub-ip.psi.net 1,177 1,177 100.00 >10/24/98 5 ny.pub-ip.psi.net 3,856 3,856 100.00 >10/25/98 3 ny.pub-ip.psi.net 5,912 5,912 100.00 >10/3/98 41 rochester.ny.pub-ip.psi.net 454 454 100.00 >Total Articles 118,483 >Total Spam 117,969 >Average %Spam 99.57 month! This is not "asleep at the wheel". This is willful negligence. D - Florida >9/28/98 49 38.11.73.0 (Orlando, FL) 476 476 100.00 Ninety five percent spam. >9/29/98 41 38.11.73.0 (Orlando, FL) 656 656 100.00 >10/2/98 61 38.11.73.0 (Orlando, FL) 327 327 100.00 >10/13/98 35 38.11.73.0 (Orlando, FL) 534 534 100.00 >10/17/98 76 38.11.73.0 (Orlando, FL) 347 347 100.00 >10/21/98 97 38.11.73.0 (Orlando, FL) 226 226 100.00 >10/24/98 32 38.11.73.0 (Orlando, FL) 715 715 100.00 >10/13/98 52 38.30.153.0 (St Petersburg, FL) 357 357 100.00 >10/14/98 10 38.30.153.0 (St Petersburg, FL) 1,848 1,848 100.00 >10/15/98 15 38.30.153.0 (St Petersburg, FL) 1,753 1,753 100.00 >10/16/98 15 38.30.153.0 (St Petersburg, FL) 1,648 1,648 100.00 >10/17/98 28 38.30.153.0 (St Petersburg, FL) 1,011 1,011 100.00 >10/18/98 30 38.30.153.0 (St Petersburg, FL) 811 811 100.00 >10/20/98 89 38.30.51.0 (Miami, FL) 266 266 100.00 >10/5/98 32 38.30.71.0 (Miami, FL) 678 678 100.00 >9/26/98 39 fl.pub-ip.psi.net 660 609 92.00 >9/27/98 55 fl.pub-ip.psi.net 566 456 81.00 >9/28/98 34 fl.pub-ip.psi.net 767 715 93.00 >9/29/98 2 fl.pub-ip.psi.net 6,269 6,194 99.00 >10/1/98 88 fl.pub-ip.psi.net 335 251 75.00 >10/2/98 50 fl.pub-ip.psi.net 518 387 75.00 >10/3/98 33 fl.pub-ip.psi.net 770 665 86.00 >10/4/98 43 fl.pub-ip.psi.net 676 553 82.00 >10/5/98 25 fl.pub-ip.psi.net 1,041 886 85.00 >10/6/98 26 fl.pub-ip.psi.net 1,203 1,094 91.00 >10/7/98 24 fl.pub-ip.psi.net 1,199 1,107 92.00 >10/8/98 80 fl.pub-ip.psi.net 394 265 67.00 >10/9/98 14 fl.pub-ip.psi.net 1,495 1,406 94.00 >10/10/98 60 fl.pub-ip.psi.net 422 367 87.00 >10/11/98 13 fl.pub-ip.psi.net 1,721 1,612 94.00 >10/12/98 28 fl.pub-ip.psi.net 1,131 1,092 97.00 >10/15/98 41 fl.pub-ip.psi.net 770 699 91.00 >10/17/98 24 fl.pub-ip.psi.net 1,199 1,156 96.00 >10/18/98 50 fl.pub-ip.psi.net 491 444 90.00 >10/19/98 64 fl.pub-ip.psi.net 410 342 83.00 >10/23/98 16 fl.pub-ip.psi.net 1,415 1,332 94.00 >10/24/98 52 fl.pub-ip.psi.net 674 460 68.00 >10/25/98 23 fl.pub-ip.psi.net 1,294 1,215 94.00 >9/26/98 29 fort-lauderdale.fl.pub-ip.psi.net 981 981 100.00 >9/30/98 30 fort-lauderdale.fl.pub-ip.psi.net 1,003 1,002 100.00 >10/2/98 44 fort-lauderdale.fl.pub-ip.psi.net 794 511 64.00 >10/20/98 20 fort-lauderdale.fl.pub-ip.psi.net 1,244 1,244 100.00 >9/27/98 36 margate.fl.pub-ip.psi.net 766 766 100.00 >10/4/98 20 margate.fl.pub-ip.psi.net 1,704 1,704 100.00 >10/8/98 37 margate.fl.pub-ip.psi.net 733 733 100.00 >10/15/98 25 margate.fl.pub-ip.psi.net 1,120 1,120 100.00 >10/16/98 31 margate.fl.pub-ip.psi.net 805 805 100.00 >10/22/98 24 margate.fl.pub-ip.psi.net 987 987 100.00 >10/24/98 43 margate.fl.pub-ip.psi.net 591 591 100.00 >9/26/98 82 orlando.fl.pub-ip.psi.net 275 275 100.00 >9/28/98 75 orlando.fl.pub-ip.psi.net 231 231 100.00 >Total 48,307 45,910 >Average %Spam 95.04 E - San Francisco, CA >9/26/98 94 38.28.60.0 (San Francisco, CA) 234 234 100.00 Way to go Spamboy! A perfect 100% spam for the City on the Bay. >9/28/98 33 38.28.60.0 (San Francisco, CA) 736 736 100.00 >10/1/98 42 38.28.60.0 (San Francisco, CA) 510 510 100.00 >10/4/98 53 38.28.60.0 (San Francisco, CA) 418 418 100.00 >10/5/98 52 38.28.60.0 (San Francisco, CA) 387 387 100.00 >10/6/98 39 38.28.60.0 (San Francisco, CA) 639 639 100.00 >10/12/98 69 38.28.60.0 (San Francisco, CA) 360 360 100.00 >10/14/98 75 38.28.60.0 (San Francisco, CA) 262 262 100.00 >10/15/98 71 38.28.60.0 (San Francisco, CA) 353 353 100.00 >9/29/98 92 38.28.61.0 (San Francisco, CA) 254 254 100.00 >9/30/98 42 38.28.61.0 (San Francisco, CA) 765 765 100.00 >10/1/98 30 38.28.61.0 (San Francisco, CA) 965 965 100.00 >10/2/98 16 38.28.61.0 (San Francisco, CA) 1,163 1,163 100.00 >10/3/98 60 38.28.61.0 (San Francisco, CA) 337 337 100.00 >10/4/98 72 38.28.61.0 (San Francisco, CA) 293 293 100.00 >10/6/98 38 38.28.61.0 (San Francisco, CA) 657 657 100.00 >10/7/98 73 38.28.61.0 (San Francisco, CA) 321 321 100.00 >10/24/98 34 38.28.61.0 (San Francisco, CA) 710 710 100.00 >10/25/98 44 38.28.61.0 (San Francisco, CA) 652 652 100.00 >Total 10,016 10,016 >Average %Spam 100.00 Not a single legitimate article from the S.F. POP on nineteen of the F - The rest of California >9/26/98 34 ca.pub-ip.psi.net 993 752 76.00 Only eighty two percent. Good neighbors, by PSI standards. >9/27/98 11 ca.pub-ip.psi.net 3,136 3,136 100.00 >9/29/98 13 ca.pub-ip.psi.net 2,154 2,020 94.00 >10/1/98 15 ca.pub-ip.psi.net 1,858 1,660 89.00 >10/2/98 87 ca.pub-ip.psi.net 375 213 57.00 >10/6/98 45 ca.pub-ip.psi.net 830 569 69.00 >10/8/98 21 ca.pub-ip.psi.net 1,613 1,426 88.00 >10/9/98 43 ca.pub-ip.psi.net 742 475 64.00 >10/11/98 59 ca.pub-ip.psi.net 460 353 77.00 >10/12/98 70 ca.pub-ip.psi.net 480 338 70.00 >10/13/98 39 ca.pub-ip.psi.net 501 501 100.00 >10/14/98 52 ca.pub-ip.psi.net 634 416 66.00 >10/15/98 88 ca.pub-ip.psi.net 278 278 100.00 >10/17/98 47 ca.pub-ip.psi.net 713 522 73.00 >10/18/98 63 ca.pub-ip.psi.net 661 327 49.00 >10/20/98 87 ca.pub-ip.psi.net 469 319 68.00 >10/21/98 27 ca.pub-ip.psi.net 1,018 872 86.00 >10/22/98 87 ca.pub-ip.psi.net 491 281 57.00 >10/24/98 79 ca.pub-ip.psi.net 456 289 63.00 >Total 17,862 14,747 >Average %Spam 82.56 G -- Delaware >9/27/98 79 38.30.157.0 (Wilmington, DE) 299 299 100.00 Another entire POP uncontaminated by non-EMP. Thank the Balto Blaster >9/28/98 8 38.30.157.0 (Wilmington, DE) 2,947 2,947 100.00 >9/29/98 11 38.30.157.0 (Wilmington, DE) 2,609 2,609 100.00 >9/30/98 29 38.30.157.0 (Wilmington, DE) 1,035 1,035 100.00 >9/28/98 79 de.pub-ip.psi.net 222 222 100.00 >9/29/98 79 de.pub-ip.psi.net 305 305 100.00 >10/6/98 53 de.pub-ip.psi.net 501 501 100.00 >Total 7,918 7,918 >Average %Spam 100.00 for this one. H -- Tucson, AZ >10/5/98 26 az.pub-ip.psi.net 886 850 96.00 My good buddy Larry "danappyguy" Wojtowicz of the Adultsights gang. >10/12/98 40 az.pub-ip.psi.net 906 828 91.00 >10/16/98 29 az.pub-ip.psi.net 933 848 91.00 >10/21/98 29 az.pub-ip.psi.net 912 856 94.00 >10/22/98 31 az.pub-ip.psi.net 906 853 94.00 >10/23/98 29 az.pub-ip.psi.net 886 859 97.00 >10/25/98 31 az.pub-ip.psi.net 885 855 97.00 >10/1/98 34 tucson.az.pub-ip.psi.net 902 848 94.00 >10/2/98 25 tucson.az.pub-ip.psi.net 860 850 99.00 >10/3/98 27 tucson.az.pub-ip.psi.net 873 848 97.00 >10/4/98 34 tucson.az.pub-ip.psi.net 851 850 100.00 >10/6/98 30 tucson.az.pub-ip.psi.net 858 858 100.00 >10/8/98 34 tucson.az.pub-ip.psi.net 860 847 98.00 >10/9/98 21 tucson.az.pub-ip.psi.net 873 850 97.00 >10/17/98 34 tucson.az.pub-ip.psi.net 859 849 99.00 >10/19/98 27 tucson.az.pub-ip.psi.net 875 848 97.00 >10/20/98 33 tucson.az.pub-ip.psi.net 850 850 100.00 >10/24/98 29 tucson.az.pub-ip.psi.net 852 852 100.00 >Total 15,827 15,299 >Average %Spam 96.66 It took a Cease and Desist Order to get him to stop signing up at MCI2000. What's the chance that PSI will do that? Or do _anything_? I -- Newark, NJ >10/6/98 55 newark.nj.pub-ip.psi.net 489 489 100.00 I tried to find those two articles that slipped past the Hippo. No >10/9/98 45 newark.nj.pub-ip.psi.net 464 464 100.00 >10/13/98 43 newark.nj.pub-ip.psi.net 464 464 100.00 >10/16/98 54 newark.nj.pub-ip.psi.net 464 464 100.00 >10/20/98 58 newark.nj.pub-ip.psi.net 464 464 100.00 >10/22/98 61 newark.nj.pub-ip.psi.net 463 463 100.00 >10/23/98 52 newark.nj.pub-ip.psi.net 476 476 100.00 >10/24/98 51 newark.nj.pub-ip.psi.net 465 463 100.00 >Total 3,749 3,747 >Average %Spam 99.95 luck. J - Virginia >9/26/98 28 va.pub-ip.psi.net 1,035 988 95.00 Only missed making the Top 100 on -one- day of the past month. >9/27/98 29 va.pub-ip.psi.net 1,088 1,047 96.00 >9/28/98 67 va.pub-ip.psi.net 294 258 88.00 >9/29/98 57 va.pub-ip.psi.net 495 451 91.00 >9/30/98 64 va.pub-ip.psi.net 507 478 94.00 >10/1/98 31 va.pub-ip.psi.net 931 912 98.00 >10/2/98 14 va.pub-ip.psi.net 1,358 1,325 98.00 >10/3/98 21 va.pub-ip.psi.net 1,318 1,318 100.00 >10/4/98 32 va.pub-ip.psi.net 906 888 98.00 >10/5/98 45 va.pub-ip.psi.net 503 472 94.00 >10/6/98 31 va.pub-ip.psi.net 831 793 95.00 >10/7/98 13 va.pub-ip.psi.net 1,807 1,690 94.00 >10/8/98 35 va.pub-ip.psi.net 965 842 87.00 >10/9/98 53 va.pub-ip.psi.net 443 422 95.00 >10/10/98 35 va.pub-ip.psi.net 655 579 88.00 >10/11/98 14 va.pub-ip.psi.net 1,672 1,569 94.00 >10/12/98 21 va.pub-ip.psi.net 1,493 1,341 90.00 >10/13/98 21 va.pub-ip.psi.net 914 857 94.00 >10/14/98 13 va.pub-ip.psi.net 1,663 1,663 100.00 >10/15/98 7 va.pub-ip.psi.net 2,226 2,226 100.00 >10/16/98 14 va.pub-ip.psi.net 1,685 1,685 100.00 >10/17/98 51 va.pub-ip.psi.net 477 459 96.00 >10/18/98 10 va.pub-ip.psi.net 2,807 2,735 97.00 >10/19/98 9 va.pub-ip.psi.net 2,432 2,432 100.00 >10/20/98 11 va.pub-ip.psi.net 2,228 2,193 98.00 >10/21/98 10 va.pub-ip.psi.net 2,164 2,164 100.00 >10/22/98 13 va.pub-ip.psi.net 2,265 2,197 97.00 >10/23/98 8 va.pub-ip.psi.net 2,134 2,134 100.00 >10/25/98 27 va.pub-ip.psi.net 1,056 1,036 98.00 >Total 38,352 37,154 >Average %Spam 96.88 Roughly ninety seven percent spam. K -- All The Rest >9/30/98 55 38.254.16.0 571 571 100.00 An assortment of POPs, averaging ninety eight percent spam. >10/13/98 100 38.30.182.0 180 180 100.00 >10/2/98 91 boston-xcom.ma.pub-ip.psi.net 218 208 95.00 >9/28/98 95 dc.pub-ip.psi.net 177 177 100.00 >10/1/98 100 ga.pub-ip.psi.net 239 207 87.00 >10/5/98 4 harvey.la.pub-ip.psi.net 6,764 6,754 100.00 >10/6/98 14 harvey.la.pub-ip.psi.net 1,497 1,496 100.00 >9/28/98 94 md.pub-ip.psi.net 180 180 100.00 >10/1/98 94 oh.pub-ip.psi.net 314 239 76.00 >10/2/98 63 oh.pub-ip.psi.net 378 324 86.00 >10/3/98 75 oh.pub-ip.psi.net 328 268 82.00 >10/4/98 33 oh.pub-ip.psi.net 869 869 100.00 >10/17/98 96 or.pub-ip.psi.net 240 240 100.00 >10/18/98 71 or.pub-ip.psi.net 300 300 100.00 >10/10/98 100 vt.pub-ip.psi.net 225 225 100.00 >10/14/98 53 vt.pub-ip.psi.net 378 378 100.00 >Total 12,858 12,616 >Average %Spam 98.12 L - Grand Total >Total Articles 466,201 264 separate NNTP entries in the Hippo reports in 30 days. >Total Spam 447,596 >Average %Spam 96.01 Ninety six percent spam. Four Hundred thousand spamites. Which necessitate four hundred CONCLUSION Can anyone come up with any reason -whatsoever- why PSI should *NOT* =================================== Faithfully Submitted, -- Rick "Lysander Spooner" Buchanan You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| ||||||||||||||