{"id":240,"date":"2015-11-30T04:12:38","date_gmt":"2015-11-30T04:12:38","guid":{"rendered":"https:\/\/scientificspam.net\/?p=240"},"modified":"2016-06-27T09:09:32","modified_gmt":"2016-06-27T09:09:32","slug":"as29550-simply-transit-ltd-poundhost","status":"publish","type":"post","link":"https:\/\/www.scientificspam.net\/?p=240","title":{"rendered":"(RESOLVED) AS29550 Simply Transit Ltd \/ PoundHost"},"content":{"rendered":"<p>It&#8217;s not often that it occurs to you to list an entire Internet service provider&#8217;s network, but we&#8217;re there now.<br \/>\n<!--more--><br \/>\nWhen they write to you to ask for a delisting, naming a specific customer in their initial message that you&#8217;ve identified as a problem, telling you they have terminated them&#8230;<\/p>\n<blockquote><p>I understand that this was added due to an issue with enet*blaster on one of our subsidiaries. We have suspended and terminated a large number of accounts relating to these spammers and believe that we have removed them from our network. If you have evidence of further issues from these spammers please share this with us so that we can take further action.<\/p><\/blockquote>\n<p>We identified the following accounts, all live, to them, in response.  We asked for the removal of reverse DNS associated with the spamming customer.  We also asked them to let us know who were behind Poundhost-9201, 9203, 10420, 10439, 11314 and what their current status was.  No reply.<\/p>\n<pre>\r\ninetnum:        213.229.76.8 - 213.229.76.15\r\nnetname:        Poundhost-9203\r\n\r\ninetnum:        85.234.147.8 - 85.234.147.8\r\nnetname:        Poundhost-10420\r\n\r\ninetnum:        213.229.69.136 - 213.229.69.137\r\nnetname:        Poundhost-10439\r\n\r\ninetnum:        92.48.88.254 - 92.48.88.254\r\nnetname:        Poundhost-11314\r\n\r\ninetnum:        92.48.114.88 - 92.48.114.91\r\nnetname:        Poundhost-10420\r\n\r\ninetnum:        92.48.109.88 - 92.48.109.95\r\nnetname:        Poundhost-11314\r\n\r\ninetnum:        213.229.64.216 - 213.229.64.223\r\nnetname:        Poundhost-10439\r\n\r\ninetnum:        92.48.86.148 - 92.48.86.151\r\nnetname:        Poundhost-9201\r\n\r\ninetnum:        92.48.125.56 - 92.48.125.63\r\nnetname:        Poundhost-11314\r\n<\/pre>\n<p>Yesterday, then, this gem:<\/p>\n<blockquote><p>Unfortunately the information you have provided us with so far is not sufficient for us to take any action regarding the apparent spam issue. Please provide evidence of the spamming in the form of copies of the spam emails including the headers.<\/p><\/blockquote>\n<p>So they were shining us on in the first place and had not actually terminated anything.<\/p>\n<p>So, 92.48.64.0\/18, 213.229.64.0\/18, and<\/p>\n<pre>\r\ninetnum:        91.186.19.82 - 91.186.19.83\r\nnetname:        Poundhost-11314\r\n<\/pre>\n<p>91.186.0.0\/19 are now listed in their entirety. Thanks for playing, Poundhost.<\/p>\n<p><strong>Update 27 Jun 2016<\/strong><\/p>\n<p>The escalation listings for 91.186.0.0\/19, 92.48.64.0\/18, 94.76.192.0\/18 and 213.229.64.0\/18 have been removed following detailed enough communications from the operator regarding the removal of certain spammers and assurances that they will have a reasonably hard time trying to obtain services again.  Thank you, Poundhost.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It&#8217;s not often that it occurs to you to list an entire Internet service provider&#8217;s network, but we&#8217;re there now.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[126,125,127],"class_list":["post-240","post","type-post","status-publish","format-standard","hentry","category-escalation-listing","tag-as29550","tag-isp-problem","tag-poundhost"],"_links":{"self":[{"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=\/wp\/v2\/posts\/240","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=240"}],"version-history":[{"count":3,"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=\/wp\/v2\/posts\/240\/revisions"}],"predecessor-version":[{"id":296,"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=\/wp\/v2\/posts\/240\/revisions\/296"}],"wp:attachment":[{"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=240"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=240"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.scientificspam.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}