It’s not often that it occurs to you to list an entire Internet service provider’s network, but we’re there now.
When they write to you to ask for a delisting, naming a specific customer in their initial message that you’ve identified as a problem, telling you they have terminated them…
I understand that this was added due to an issue with enet*blaster on one of our subsidiaries. We have suspended and terminated a large number of accounts relating to these spammers and believe that we have removed them from our network. If you have evidence of further issues from these spammers please share this with us so that we can take further action.
We identified the following accounts, all live, to them, in response. We asked for the removal of reverse DNS associated with the spamming customer. We also asked them to let us know who were behind Poundhost-9201, 9203, 10420, 10439, 11314 and what their current status was. No reply.
inetnum: 126.96.36.199 - 188.8.131.52 netname: Poundhost-9203 inetnum: 184.108.40.206 - 220.127.116.11 netname: Poundhost-10420 inetnum: 18.104.22.168 - 22.214.171.124 netname: Poundhost-10439 inetnum: 126.96.36.199 - 188.8.131.52 netname: Poundhost-11314 inetnum: 184.108.40.206 - 220.127.116.11 netname: Poundhost-10420 inetnum: 18.104.22.168 - 22.214.171.124 netname: Poundhost-11314 inetnum: 126.96.36.199 - 188.8.131.52 netname: Poundhost-10439 inetnum: 184.108.40.206 - 220.127.116.11 netname: Poundhost-9201 inetnum: 18.104.22.168 - 22.214.171.124 netname: Poundhost-11314
Yesterday, then, this gem:
Unfortunately the information you have provided us with so far is not sufficient for us to take any action regarding the apparent spam issue. Please provide evidence of the spamming in the form of copies of the spam emails including the headers.
So they were shining us on in the first place and had not actually terminated anything.
So, 126.96.36.199/18, 188.8.131.52/18, and
inetnum: 184.108.40.206 - 220.127.116.11 netname: Poundhost-11314
18.104.22.168/19 are now listed in their entirety. Thanks for playing, Poundhost.
Update 27 Jun 2016
The escalation listings for 22.214.171.124/19, 126.96.36.199/18, 188.8.131.52/18 and 184.108.40.206/18 have been removed following detailed enough communications from the operator regarding the removal of certain spammers and assurances that they will have a reasonably hard time trying to obtain services again. Thank you, Poundhost.