Meet The Top 10 Comment Spammers

By Angsuman Chakraborty, Gaea News Network
Wednesday, January 3, 2007

Over the last couple of weeks I have been inundated with spam comments. I identified the culprits. Meet them, know them and block them.

1 Offence count IP Address Owned by
2 32715 82.137.247.131 & 82.137.247.132 person: Samer AL Nashef
address: 1 Mazza Autostrad Damascus, Syria. P.O.BOX 11774
phone: +963 11 6122240
fax-no: +963 11 6121240
e-mail: alnashef@scs-net.org
nic-hdl: SAN26-RIPE
source: RIPE # Filtered

person: Maizer Ibrahim
address: Memo
address: Baghdad Street 31
address: Alazbakia
address: P.O. Box 8254
address: Syria
phone: +963 11 2311293
fax-no: +963 11 2319975
e-mail: memo@hamshointl.com
nic-hdl: MI424-RIPE
source: RIPE # Filtered

3 5233 81.177.0.5 person: Evgeniy Ivanov
address: Epolis hosting Ltd.
address: 125222, Moscow, Russia
address: Penyaginskaya str., 6
e-mail: support@epolis.ru
remarks: phone: +7 095 5087386
phone: +7 495 5087386
remarks: fax-no: +7 095 5087386
fax-no: +7 495 5087386
nic-hdl: EI144-RIPE
4 4237 213.42.21.77 Uses as proxy:
Emirates Telecommunication Corporation
address: P.O. Box 1150, Dubai, UAE
phone: +971 4 2025510
fax-no: +971 4 2948300
e-mail: lir@nic.ae
5 2295 12.45.169.249 OrgName: CORE LABS
OrgID: CORELA-4
Address: 6316 Windfern
City: Houston
StateProv: TX
PostalCode: 77040
Country: US

NetRange: 12.45.169.0 - 12.45.169.255
CIDR: 12.45.169.0/24
NetName: CORELABS916-169
NetHandle: NET-12-45-169-0-1
Parent: NET-12-0-0-0-1
NetType: Reassigned
Comment:
RegDate: 2000-05-23
Updated: 2000-05-23

RTechHandle: MF472-ARIN
RTechName: Frazier, Marc
RTechPhone: +1-713-329-7485
RTechEmail: mfrazier@corelabcorp.com

OrgTechHandle: JMA236-ARIN
OrgTechName: Malek, James
OrgTechPhone: +1-713-328-2676
OrgTechEmail: jmalek@corelab.com

6 2229 212.138.64.172 Part of this IP block has been used for proxy/cache service at the National level in Saudi Arabia. All Saudi Arabia web traffic will come from this IP block.
7 2155 212.138.64.178
8 2076 148.233.159.58
9 2029 148.233.159.57
10 1885 212.138.64.173
Discussion

manu
October 20, 2009: 5:31 pm

have you noticed the “remarks:” for the IPs 212.138.64.x ?

“All Saudi Arabia web traffic will come from this IP block.”

basically you can divide the number of people online in saudi arabia by 256 and obtain the chances of that person having that IP.

YOUR VIEW POINT
NAME : (REQUIRED)
MAIL : (REQUIRED)
will not be displayed
WEBSITE : (OPTIONAL)
YOUR
COMMENT :