North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Wiltel has gone pink.

  • From: Roy
  • Date: Mon Mar 13 20:12:02 2006 
Jo Rhett wrote:
This morning we have started receive an abundance of spam from Wiltel
customers, pointing boldly back to websites hosted in Wiltel space.

OrgAbuseHandle: WAC18-ARIN
OrgAbuseName: Wiltel Abuse Contact
OrgAbusePhone: +1-918-547-2000
OrgAbuseEmail: [email protected]

Messages to [email protected] are being rejected.

This phone number goes to their "conferencing group", which doesn't know
what 'abuse' is, or even what an IP network is.

I went through 4 levels of management, and was informed that they no longer
had an abuse team -- that this was disbanded in a recent reorganization.
In short, it would appear that Wiltel is now selling pink contracts.

WilTel's abuse department has long been MIA. I never even got an acknowledgment from them much less getting the problem fixed. The only difference now is that they are bouncing the messages rather than dev-nulling them

They also don't believe in edge filtering.. Here are some stats for today

10 deny ip 0.0.0.0 1.255.255.255 any (111 matches)
20 deny ip 2.0.0.0 0.255.255.255 any (97 matches)
30 deny ip 5.0.0.0 0.255.255.255 any (102 matches)
40 deny ip 7.0.0.0 0.255.255.255 any (106 matches)
50 deny ip 10.0.0.0 0.255.255.255 any (6487 matches)
60 deny ip 23.0.0.0 0.255.255.255 any (120 matches)
70 deny ip 27.0.0.0 0.255.255.255 any (126 matches)
80 deny ip 31.0.0.0 0.255.255.255 any (107 matches)
90 deny ip 36.0.0.0 1.255.255.255 any (1458 matches)
100 deny ip 39.0.0.0 0.255.255.255 any (137 matches)
110 deny ip 42.0.0.0 0.255.255.255 any (127 matches)
120 deny ip 49.0.0.0 0.255.255.255 any (146 matches)
130 deny ip 50.0.0.0 0.255.255.255 any (124 matches)
140 deny ip 77.0.0.0 0.255.255.255 any (138 matches)
150 deny ip 78.0.0.0 1.255.255.255 any (243 matches)
160 deny ip 92.0.0.0 3.255.255.255 any (868 matches)
170 deny ip 96.0.0.0 15.255.255.255 any (2754 matches)
180 deny ip 112.0.0.0 7.255.255.255 any (1896 matches)
190 deny ip 120.0.0.0 0.255.255.255 any (337 matches)
200 deny ip 169.254.0.0 0.0.255.255 any (744 matches)
210 deny ip 172.16.0.0 0.15.255.255 any (827 matches)
220 deny ip 173.0.0.0 0.255.255.255 any (150 matches)
230 deny ip 174.0.0.0 1.255.255.255 any (870 matches)
240 deny ip 176.0.0.0 7.255.255.255 any (3860 matches)
250 deny ip 184.0.0.0 3.255.255.255 any (765 matches)
260 deny ip 192.0.2.0 0.0.0.255 any
270 deny ip 192.168.0.0 0.0.255.255 any (873 matches)
280 deny ip 197.0.0.0 0.255.255.255 any (127 matches)
290 deny ip 198.18.0.0 0.1.255.255 any
300 deny ip 223.0.0.0 0.255.255.255 any (121 matches)
310 deny ip 224.0.0.0 31.255.255.255 any

Maybe Level3 can straighten some of it out.

Roy Engehausen