|Two new Spam sewers continuumdatacenters.com and OVH.NET||Rick Scott||3/14/13 8:41 AM|
for the last month Ive been recieving daily spams from
continuumdatacenters.com and ovh.net. No response from either abuse
desk and spam continues. I didn't find them in Spamhaus but highly
recommend they be added.
Just posting in the News.admin.net-abuse.email group so other admins
know a block to add and to let the two ISPs know that I'm escalating
since they are ignoring reports.
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Thor Kottelin||3/14/13 8:51 AM|
"Rick Scott" <w7...@yahoo.com> wrote in message
> for the last month Ive been recieving daily spams fromOvh.net is a French cheapo very dark hat web hosting provider with a
whopping 89 listings on Spamhaus:
The following allocations are from RIPE NCC - block and be rid of.
20010129 184.108.40.206/19 ALLOCATED PA
20040518 220.127.116.11/18 ALLOCATED PA
20050815 18.104.22.168/17 ALLOCATED PA
20060920 22.214.171.124/16 ALLOCATED PA
20080715 126.96.36.199/16 ALLOCATED PA
20090605 188.8.131.52/16 ALLOCATED PA
20100119 184.108.40.206/15 ALLOCATED PA
20101129 220.127.116.11/16 ALLOCATED PA
20110520 18.104.22.168/16 ALLOCATED PA
20110916 22.214.171.124/16 ALLOCATED PA
20120116 126.96.36.199/16 ALLOCATED PA
20120515 188.8.131.52/17 ALLOCATED PA
20120706 184.108.40.206/16 ALLOCATED PA
20130110 220.127.116.11/22 ALLOCATED PA
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Rick Scott||3/14/13 9:58 AM|
Thanks Thor. I had used Network-tools and they said not listed.
Just received a note from continuum data ... unfortunately its as I
feared. They forward the complaint to the sender instead
of doing the right thing. I provided copies of my last months spam cop
reports. See if they do the right thing.
> From: sup...@continuumdatacenters.com <sup...@continuumdatacenters.com>
> Subject: Re: [#26969] Two new Spam sewers continuumdatacenters.com and OVH.NET
> To: "Rick Scott" <w7...@yahoo.com>
> Date: Thursday, March 14, 2013, 9:46 AM
> Thank you for the response. Please note we do receive
> multiple SpamCop reports and all SpamCop reports are
> immediately forwarded on to the offending customer. If you
> could please provide us with more details I would be happy
> to look in to this further for you.
> Mike Thoene | Manager, Network Operations Center
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Rick Scott||3/14/13 10:29 AM|
> > From: supp...@continuumdatacenters.com <supp...@continuumdatacenters.com>
> > Subject: Re: [#26969] Two new Spam sewers continuumdatacenters.com and OVH.NETApparently Ive hit a nerve posting here. After a month the end result
was what should have happened long ago. but we shall see if its true
tying to shine me
>I have just received word from my customer that he immediately has terminated his abusive customer. If you do receive additional SPAM messages, please do not hesitate to ask.
>Thanks, and have an excellent day!
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Catherine Jefferson||3/14/13 10:39 AM|
You forgot to mention the blocks. Or (for that matter) to provide any
spam evidence. There's not much that *any* of us can do with this post
without more information. (Continuumdatacenters.com is a large web
host, and ovh.net is France's largest ISP -- no blocklist for any larger
group than your family can afford to block those domains en masse.)
Catherine Jefferson <tw8...@ergosphere.net>
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Thor Kottelin||3/14/13 11:08 AM|
"Catherine Jefferson" <spam...@spambouncer.org> wrote in message
> On 3/14/2013 8:41 AM, Rick Scott wrote:
> You forgot to mention the blocks. Or (for that matter) to provide anyOTOH, pinhole blocking is not useful either, as ovh.net moves its spammers
around so frequently. From my viewpoint, 18.104.22.168/17 and 22.214.171.124/16
are probably the worst allocations, and the following smaller chunks have
proved particularly spammer-infested:
But Spamhaus has a more comprehensive list.
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Rick Scott||3/14/13 11:08 AM|
On Mar 14, 10:39 am, Catherine Jefferson <spamt...@spambouncer.org>
> On 3/14/2013 8:41 AM, Rick Scott wrote:
> > continuumdatacenters.com and ovh.net. No response from either abuse
> You forgot to mention the blocks. Or (for that matter) to provide any> --
> Catherine Jefferson <tw86...@ergosphere.net>
The last time I posted the actual spam I got burned for that.
Make up your minds.
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Rick Scott||3/14/13 11:14 AM|
Just to be fair though I will post the blocks
OVH.net the last month has come from 192.95.0.XXX (mostly 161 - 189)
Continuum Data Centers, he says they were disconnected but they
came from 199.96.82.XXX (1 - 16 mostly)
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||David Ritz||3/14/13 12:33 PM|
-----BEGIN PGP SIGNED MESSAGE-----
On Thursday, 14 March 2013 17:51 +0200,
in article <khsrm4$1fh$1...@news.albasani.net>,
Don't forget, OVH provides hosting within ARIN allocations, based in
$ whois -a n\ OVH-ARIN-\* | iprange2cidr.pl
$ whois -r OVH | iprange2cidr.pl # (consolidated)
As for continuumdatacenters.com, I've never encountered them. They
only have three SBL listings
$ whois -a n\ CDC-LMB-ARIN\* | iprange2cidr.pl
David Ritz <dr...@mindspring.com>
Be kind to animals; kiss a shark.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (Darwin)
Comment: Public Keys: <http://dritz.home.mindspring.com/keys.txt>
-----END PGP SIGNATURE-----
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Jessica||3/14/13 1:54 PM|
On Thu, 14 Mar 2013 10:29:59 -0700, Rick Scott wrote:Translation:
You've been listwashed from this particular spammer's list until he buys
his next millyuns CD.
|unk...@googlegroups.com||3/14/13 4:52 PM||<This message has been deleted.>|
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Sam||3/14/13 5:16 PM|
Rick Scott writes:
> Just posting in the News.admin.net-abuse.email group so other adminsI've been getting spammed from ovh.net for ~5/6 months now, on and off. I've
had some success in stopping some of the spew, in case of ovh.net, by
sending an announcement to every ovh.net and ovh.co.uk address I have on
file, that I'm now automatically forwarding them all the spam from their
latest pet spammer.
That usually puts the lid on things. Until some other spambag starts spewing
from ovh.net, I send a few polite notes to ab...@ovh.net, they get ignored,
I then start forwarding all of their spam to all of their email addresses
again; then it stops. At some point, I'm going to go back through my
archives, get a copy of all ovh.net spam sources that spammed me in the last
year, and inform my ovh.net bitch distribution list that since abuse@ is
ineffective, I'm appointing them to the OVH abuse desk, and they will be
automatically getting all their spam, going forward, until they get their
I started getting spammed from some mainsleazer snowshoeing from
continuumdatacenters.com's IP address range back in February. After
receiving no response to two complaints to ab...@continuumdatacenters.com,
the next two complaints were also sent to ab...@he.net, asking them to
disconnect this spam-friendly hosting provider from their network.
No further spam was received. I can't say with certainly, but it looks like
the professional spam generator that was snowshoeing out of
continuumdatacenters.com probably got the boot, I lost my "before" notes, of
what I saw on those IP addresses, if any, to compare against the "after" or
"now", and to see if something has changed.
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||David Ritz||3/14/13 5:59 PM|
-----BEGIN PGP SIGNED MESSAGE-----On Thursday, 14 March 2013 19:52 -0400,
in article <87sj3xt...@usenet.ankman.de>,
Andreas Kohlbach <march13....@spamgourmet.com> wrote:
> David Ritz wrote on 14. March 2013:
> But spam comes in green. ;-)
I've seen more in the way of network attacks, from OVH space. In any
case, OVH is clue impervious, with respect to network abuse and
security issues. I wouldn't have started blocking OVH, at the
firewall, had they actually addressed reported issues. Repeat
attacks, from previously reported IP addresses, days or weeks later,
indicated to me that the lights are on, at <ab...@ovh.net>, but
-----END PGP SIGNATURE-----
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Jessica||3/14/13 6:44 PM|
On Thu, 14 Mar 2013 19:16:48 -0500, Sam wrote:The most likely result of that would be for OVH to block you from mailing
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||That Person II||3/14/13 7:41 PM|
On Fri, 15 Mar 2013 01:44:33 +0000 (UTC), Jessica <m...@privacy.net>
Yep, Just like ab...@as5577.net and ab...@blacklotus.net
That's where most of my spam is coming from.
http://www.churchofcommongood.org IS A
SCAM for Andrew Jacob Stephens Stevens
Lumber Heavy Industries Cartel Card# 18502
Just that other person
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Rick Scott||3/15/13 9:38 AM|
On Mar 14, 7:41 pm, That Person II <m...@example.com> wrote:
> Yep, Just like ab...@as5577.net
>yes and curse their upstream .iptransit.com and Level3. Also Hostkey
that keeps allowing them to spam out. Most of the messages
come from host key and they have a ton of Hashbuster crap in the
message. Plus they found that spamcop will barf on too many
links so they dump 15 or 20 links in the messsage.
|Re: Two new Spam sewers continuumdatacenters.com and OVH.NET||Hal Murray||4/3/13 2:10 AM|
In article <kht21b$h83$1...@news.sosdg.org>,
Catherine Jefferson <spam...@spambouncer.org> writes:Where do you rate ovh.net relative to Yahoo? :(
As far as I can tell, they are ignoring abuse reports.
OVH is hosting a phisher's redirector at:
I first reported it on Mar-09. I just sent in a 5th report.
These are my opinions. I hate spam.