[an error occurred while processing this directive]
This spam report is at PornoSpam Page 1
Porno spammers seem to enjoy using Earthlink for their spams. First, I will confirm
DNS resolves:
This address resolves:
italy-c.it.earthlink.net [204.250.46.18]
This address also resolves:
1Cust229.tnt6.lax3.da.uu.net [153.37.69.229]
This address does not resolve via an IP or DNS lookup:
alt1.grlselsss.com(205.5.28.62)
OK, time for the "whois" lookups on other listed domains:
>whois grlselsss.com
No match for "GRLSELSSS.COM".
OK, so I must now do traceroutes. I hate doing those because then I have to go and
format them. Oh well. I do what I have to do.
But before I do that, let me see who owns the originating IP address:
>whois 205.5.28.0
SPAWAR (JMCIS-BLOCK)
DEPARTMENT OF THE NAVY
SPACE AND NAVAL WARFARE SYSTEM COMMAND
WASHINGTON, DC 20363-5100
Netname: JMCIS-BLOCK
Netblock: 205.0.0.0 - 205.117.255.0
Maintainer: DNIC
Coordinator:
Greunke, Stephen C. (SCG) STEVE.GREUNKE@NCC.NCTS.NAVY.MIL
(904) 452-3501 ext. 5470 (DSN) 922-3501 ext 5470
Domain System inverse mapping provided by:
NCC.NCTS.NAVY.MIL 134.229.200.3
GATE.NCTS.NAVY.MIL 138.147.10.10
Record last updated on 21-Apr-97.
Database last updated on 7-Sep-97 04:42:18 EDT.
Hmm, that's interesting. I'm sure that is a forged address though. I will altert them
anyways. Seems that we might have some bad "seamen" out there.
>whois 206.19.62.0
CERFnet (NETBLK-CERFNET-BLK) CERFNET-BLK-206 206.16.0.0 - 206.19.255.0
CERFnet customer - IUSA Net (NETBLK-CERF-IUSANET) CERF-IUSANET
206.19.0.0 - 206.19.95.255
To single out one record, look it up with "!xxx", where xxx is the
handle, shown in parenthesis following the name, which comes first.
This is consistent with the traceroute, so I will not do a traceroute now. Thank
goodness!
I am now going to look up the Cerfnet domains mainly to get contact names.
>whois cerfnet.net
CERFnet (CERFNET-DOM)
P.O. Box 919014
San Diego, CA 92191
US
Domain Name: CERFNET.NET
Administrative Contact:
Mohta, Pushpendra (PM200) pushp@CERF.NET
619-455-3900 FAX (619) 455-3990 FAX (619) 455-3990
Technical Contact, Zone Contact:
CERFnet Hostmaster (CERF-HM) dns@CERF.NET
(619) 455-3900
Billing Contact:
CERFnet Hostmaster (CERF-HM) dns@CERF.NET
(619) 455-3900
Record last updated on 15-Jan-97.
Record created on 13-Dec-94.
Database last updated on 7-Sep-97 04:42:18 EDT.
Domain servers in listed order:
NOC.CERF.NET 192.153.156.22
NOC.NEAR.NET 192.52.71.21
Normally I'd do additional lookups but I think this is sufficient for the time being.