Alaska Software Inc. - spamming reported
Username: Password:
AuthorTopic: spamming reported
politicallyincorrect spamming reported
on Fri, 18 Feb 2005 20:28:02 -0700
Registrant:
UUNET Pipex (PIPEX2-DOM)
    Internet House
    332 Science Park
    Milton Road
    Cambridge, Cambs cb4 0bz
    UK

    Domain Name: PIPEX.COM

    Administrative Contact:
       UUNET Pipex  (UCRYFPWVHO)		dnradmin@uk.uu.net
       Internet House
       332 Science Park
       Milton Road
       Cambridge, Cambs cb4 0bz
       UK
       +44 118 905 5500

    Technical Contact:
       UK, MCI UK  (PIP-NOC)		support@uk.uu.net
       MCI
       Internet House
       Cambridge, Cambs CB4 0BZ
       UK
       +44 1223 382 220 fax: +44 118 905 5059

    Record expires on 04-Jun-2005.
    Record created on 05-Jun-1994.
    Database last updated on 18-Feb-2005 22:09:47 EST.

    Domain servers in listed order:

    NS0-P.DNS.PIPEX.NET          158.43.129.80
    NS1-P.DNS.PIPEX.NET          158.43.193.80


Network Whois record
Queried whois.ripe.net with "81.178.241.78"...

% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

inetnum:      81.178.241.64 - 81.178.241.127
netname:      PIPEX-DSL-DYNAMIC
descr:        ADSL Dynamic IP address pool
country:      GB
admin-c:      MC1269-RIPE
tech-c:       JW698-RIPE
tech-c:       DG5477-RIPE
status:       ASSIGNED PA
mnt-by:       PIPEX-MNT
changed:      johnw@pipex.net 20040715
source:       RIPE
remarks:      INFRA-AW

route:        81.178.0.0/15
descr:        PIPEX Internet
origin:       AS25346
mnt-by:       PIPEX-MNT
source:       RIPE
changed:      johnw@pipex.net 20030630

person:       Mark Cook
address:      Pipex Internet Ltd
address:      1 Meadway Court
address:      Rutherford Close
address:      SG1 2EX Stevenage
address:      GB
phone:        +44 1438 758738
fax-no:       +44 8702 434440
e-mail:       lir@pipex.net
nic-hdl:      MC1269-RIPE
mnt-by:       PIPEX-MNT
changed:      davids@uk.uu.net 20010813
changed:      stephenb@uk.uu.net 20020425
changed:      hendrik.volker@deu.mci.com 20040709
source:       RIPE

person:       David Gethings
address:      PIPEX Internet Ltd
address:      4 Falcon Way
address:      Shire Park
address:      Welwyn Garden City
address:      UK
phone:        +44 1707 299530
fax-no:       +44 8702 434440
e-mail:       davidg@pipex.net
nic-hdl:      DG5477-RIPE
mnt-by:       PIPEX-MNT
changed:      stephenb@uk.uu.net 20001113
changed:      davidg@pipex.net 20030514
changed:      davidg@pipex.net 20030516
remarks:      Complaints should be sent to abuse@dsl.pipex.com
remarks:      Any complains sent directly to me will be deleted
source:       RIPE

person:       John Whyte
address:      Pipex Internet Ltd
address:      Falcon Gate
address:      Falcon Way
address:      Shire Park, Welwyn Garden City
address:      UK
phone:        +44 01717 299534
fax-no:       +44 8702 434440
nic-hdl:      JW698-RIPE
e-mail:       johnw@pipex.net
changed:      johnw@pipex.net 20030121
mnt-by:       PIPEX-MNT
remarks:      Complaints should be sent to abuse@dsl.pipex.com
remarks:      Any complains sent directly to me will be deleted
source:       RIPE



DNS records
name class type data time to live
81-178-241-78.dsl.pipex.com IN A 81.178.241.78 600s (00:10:00)
pipex.com IN NS ns0-p.dns.pipex.net 86400s (1.00:00:00)
pipex.com IN NS ns1-p.dns.pipex.net 86400s (1.00:00:00)
pipex.com IN SOA server: ns0-p.dns.pipex.net
email: hostmaster.uk.uu.net
serial: 2004111501
refresh: 28800
retry: 7200
expire: 2419200
minimum ttl: 1800
  86400s (1.00:00:00)
78.241.178.81.in-addr.arpa IN PTR 81-178-241-78.dsl.pipex.com 85651s 
(23:47:31)

Traceroute
Tracing route to 81-178-241-78.dsl.pipex.com [81.178.241.78]...

hop rtt rtt rtt   ip address fully qualified domain name
1 0 0 0   216.46.228.229 port-216-3073253-es128.devices.datareturn.com
2 0 0 0   64.29.192.145 port-64-1949841-zzt0prespect.devices.datareturn.com
3 0 0 0   64.29.192.226 daa.g921.ispb.datareturn.com
4 0 0 0   168.215.241.133 hagg-01-ae0-1001.dlfw.twtelecom.net
5 0 0 0   66.192.253.120 core-01-ge-0-3-1-506.dlfw.twtelecom.net
6 21 21 21   66.192.255.93
7 21 21 21   66.192.244.36
8 29 29 29   66.192.252.98
9 39 39 39   213.248.80.154 nyk-bb1-pos0-3-0.telia.net
10 110 138 110   213.248.65.89 ldn-bb1-pos7-1-0.telia.net
11 109 109 109   213.248.64.98 ldn-b1-pos13-0.telia.net
12 112 112 112   213.248.100.42 pipex-104706-ldn-b1.c.telia.net
13   
14   
15   
16   

Trace aborted

Service scan
FTP - 21 Error: TimedOut
SMTP - 25 Error: TimedOut
HTTP - 80 Error: TimedOut
POP3 - 110 Error: TimedOut
NNTP - 119 Error: TimedOut

-- end --
URL for this output  |  return to CentralOps.net
Phil Ide
Re: spamming reported
on Mon, 21 Feb 2005 11:02:24 +0000
politicallyincorrect,

> Registrant:
> UUNET Pipex (PIPEX2-DOM)
>     Internet House
>     332 Science Park
>     Milton Road
>     Cambridge, Cambs cb4 0bz
>     UK

Well done, you've just reported one the UK's largest ISP's as spammers, and
probably (likely) had nothing to do with the spam at all.

Regards,

Phil Ide

***************************************
* Xbase++ FAQ, Libraries and Sources: *
* goto: http://www.idep.org.uk/xbase  *
***************************************

Black holes suck.
Thomas Braun Re: spamming reported
on Mon, 21 Feb 2005 14:16:40 +0100
Phil Ide wrote:

> Well done, you've just reported one the UK's largest ISP's as spammers, and
> probably (likely) had nothing to do with the spam at all.

At least one of their DSL (dial-up?) lines was used to post the article.
... so the correct address for the abuse complaint would have been
abuse@dsl.pipex.com. (not that I think this will help fighting spam at all,
that fight has been lost a long time ago )

Thomas Braun
Phil Ide
Re: spamming reported
on Tue, 22 Feb 2005 11:24:21 +0000
Thomas,

> At least one of their DSL (dial-up?) lines was used to post the article.
> ... so the correct address for the abuse complaint would have been
> abuse@dsl.pipex.com. (not that I think this will help fighting spam at all,
> that fight has been lost a long time ago )

I think the fight is going our way.  Use of anti-spam software such as
Spamhilator has drastically reduced the amount of spam getting through
(although it still travels to the endpoint, so doesn't reduce the burden on
your connection).  Mail-client vendors such as Pegasus and Microsoft now
include anti-spam algorithms.

The problem is getting the hoi-poloi to use this technology effectively.  I
would guess that the number of people on the net who are genuinely 'at one'
with their computer/environment (e.g. developers) is probably less than 5%
of the netwide community (possibly even less than 1%). With only minor
exceptions, these people are the only people who are currently reaping the
rewards of anti-spam software, with other AS users insufficiently
profficient or able to use it properly.

Good anti-spam software requires user interaction to maintain it's careful
balancing act of deciding whether something is good or bad, and this is the
biggest problem because people want AS software they can install and
forget.

Spamhilator is one of several AS tools that is making headway here.  It can
be configured to automatically update itself, and it can use on-line
databases of known spam messages to identify about 60% of spam messages,
greatly reducing the burden on user.

Regards,

Phil Ide

***************************************
* Xbase++ FAQ, Libraries and Sources: *
* goto: http://www.idep.org.uk/xbase  *
***************************************

Real hackers' method: COPY CON: PROGRAM.EXE
politicallyincorrect Re: spamming reported
on Thu, 24 Feb 2005 08:38:39 -0700
Well I would agree with you phil, except traces elements lead back to a 
person using PIPEX, I sent the EMAIL package alone with its residual 
trace elements... I know this is an fruitless, but you know, I have 
worked with DShield and if anything it does place Enormous pressure on 
IP carries to take some responsibility in hand... If every one spent 
just a few mins a day terrorizing IP spammers, there would be less, and 
less is better....

Peace
Kurt


Phil Ide wrote:
> politicallyincorrect,
> 
> 
>>Registrant:
>>UUNET Pipex (PIPEX2-DOM)
>>    Internet House
>>    332 Science Park
>>    Milton Road
>>    Cambridge, Cambs cb4 0bz
>>    UK
> 
> 
> Well done, you've just reported one the UK's largest ISP's as spammers, and
> probably (likely) had nothing to do with the spam at all.
> 
> Regards,