[AusNOG] apnic - desi valli spam?!

Damien Gardner Jnr rendrag at rendrag.net
Fri Feb 20 16:04:39 EST 2009


Hrrm, doing some digging through the whois DB (didn't realise you  
could now search by email - yes, it's been a while since i went  
searching for anything in the apnic db ;) ), I'm wondering if he's  
just thrown together a script to do queries against the DB along the  
lines of [A-Z][A-Z][0-9][0-9]-AU.  Searching in there, it seems that  
all the addresses WERE in there - even the one I thought that wasn't  
(forgot I'd ended up with a /23 from my last employer, which somehow  
they created a contact handle for, after their membership lapsed...).   
I guess it'd only take 5 mins to throw together a shell script to wrap  
around whois, to pull out a huge amount of email addresses...  But  
either way, yeah, that membership lapsed in jan 2007!  I might email  
helpdesk to see about getting the emails removed from the DB :)

At first I was thinking 'wow, someones doing a smear campaign,  
pretending to be a nominee!', then I checked the headers, and if it  
wasn't him, they did a very good job!

---
Received: from smtpauth.net4india.com (unknown [202.71.129.139])
	by mailx.rendrag.net.au (Postfix) with ESMTP id 6CBF4810C29
	for <damien.gardner at adaptivesystems.com.au>; Fri, 20 Feb 2009  
00:28:04 +1100 (EST)
Received: from [202.71.131.3] (helo=net4domains.com)
	by smtpauth.net4india.com with smtp (Exim 4.54 #1)
	id 1La8wW-00089G-On
	for <damien.gardner at adaptivesystems.com.au>; Thu, 19 Feb 2009  
18:57:56 +0530
From: "Desi S Valli" <desi.v at net4.in>
----

--DG

On 20/02/2009, at 3:50 PM, Sean K. Finn wrote:

> Ok, I’m now in agreement that Desi probably doesn’t quite understand  
> how to represent member interest properly if he thinks that type of  
> spamming is O.k.
>
> Of course, it could be a ploy to discredit him by his competition,  
> but doesn’t sound like it since Apnic contacted him as per
> http://www.apnic.net/news/2009/0220.html
>
> Cheers,
> Sean.
>
> From: Damien Gardner Jnr [mailto:rendrag at rendrag.net]
> Sent: Friday, 20 February 2009 2:44 PM
> To: Sean K. Finn
> Cc: 'ausnog at lists.ausnog.net'
> Subject: Re: [AusNOG] apnic - desi valli spam?!
>
> On 20/02/2009, at 2:51 PM, Sean K. Finn wrote:
> Did anyone receive one on an email NOT linked to an APNIC address?
>
> Well I for one am not an APNIC member.. - A number of the addresses  
> I received emails to were addresses which were associated with long- 
> gone netblocks and contact handles, but one of the addresses was on  
> a domain created AFTER the company I was the contact for, let their  
> membership lapse! (We're talking 2 1/2 years ago!)
>
> Cheers,
>
> DG
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20090220/47dc9a8e/attachment.html>


More information about the AusNOG mailing list