North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: Comment spammers chewing blogger bandwidth like crazy
On Sat, 13 Jan 2007, Gregory Hicks wrote: > > > Date: Sat, 13 Jan 2007 18:58:02 +0000 (GMT) > > From: "Chris L. Morrow" <christopher.morrow@xxxxxxxxxxxxxxxxxxx> > > Subject: Re: Comment spammers chewing blogger bandwidth like crazy > > To: Thomas Leavitt <thomas@xxxxxxxxxxxxxxxxx> > > Cc: nanog <nanog@xxxxxxxxx> > > > > > > > > On Sat, 13 Jan 2007, Thomas Leavitt wrote: > > > > > Why has 22.214.171.124, an IP in Ukraine, been eating a tremendous > > > amount of bandwidth? What are they doing? > > > > this isn't in the ukraine, it's in NYC behind ISPrime. Phil is fairly > > hhelpful, you might ask them to 'figure out what the heck is going on' > > with that ip :) > > > > -Chris > > (unless the ukraine got a whole lot closer to IAD than I thought: > > 64 bytes from 126.96.36.199: icmp_seq=1 ttl=55 time=13.1 ms > > 64 bytes from 188.8.131.52: icmp_seq=2 ttl=55 time=24.5 ms > > Um-m-m-m... > > % Information related to '184.108.40.206 - 220.127.116.11' > > inetnum: 18.104.22.168 - 22.214.171.124 > netname: NETCATHOST > descr: NetcatHosting yes, but 'whois info' is not often 'correct' especially in this case, traceroute to it, unless ISPrime has some time-space vortex that ip (that one of the /22) is actually in NYC. speed-o-light don't often lie...