[Tech] Spam: AHBL 'congela' lo spazio IP spagnolo

Dal sito AHBL:

The Abusive Hosts Blocking List (AHBL) is a list of known abusive hosts and networks on the Internet. The list is updated in real-time and combines the best features of the various blocklists found on the Internet with custom data sources from The Summit Open Source Development Group, developers of anti-spam and anti-abuse software and services.



The AHBL is designed to identify and track spam sources, spam friendly providers, open proxies, open relays, DDoS drones, virus/trojan infected machines, and other hosts which pose a risk to the Internet.

A seguito di un incremento impressionante della mole di spam e scam generata a partire dal range degli indirizzi IP di rima-tde.net, AHBL ha sostanzialmente bloccato la quasi totalità dello spazio IP della struttura in questione, e quindi della Spagna:

Notice To All Telefonica De Espana Users



The AHBL is blocking nearly all of Telefonica De Espana IP space currently. This is because of the ever increasing amount of spam and illegal 419 coming from rima-tde.net IP space.



(TDE is the govt run ISP of Spain)



TDE does not seem to care one way or another about the abuse and illegal activities coming from their network, and has not responded to any abuse or spam complaints, nor have they seem to have dealt with any of their customers.



In order for TDE netspace to be delisted, the following must occour:



* TDE must contact admins@2mbit.com and inform us of how they plan to clean up their network, and how they are currently cleaning up their network. If you are an end user, DO NOT CONTACT US. We are only interested in hearing from TDE themselves at this point.



* TDE must terminate their users which are sending spam and 419 scams and not just move them to another netblock to avoid the blocking.



* TDE must agree to continue to police their networks and deal with abuse in a timely fashion (72 hours or less).



Once TDE has compiled with the above, TDE netspace will be delisted. However, should it become known that TDE is ignoring complaints, or playing games with the spam fighting community, their netspace will be relisted and not removed for a minimum of 6 months.



The AHBL will not tolerate abuse from any network.



This block would not be necessary if TDE actually made even the slightest effort to clean up their network - which they have yet to do.



-------------------------------------



Update - April 26th, 2004

TDE contacted us by e-mail and we were told by them that the cause of all of the 419 scams and spam was from the scammers operating out of Internet Cafe locations, and that they were working with the police to try and stop the problem.



However, when asked why TDE does not just block outgoing port 25 on their dynamic clients, we received no reply. We also asked that TDE provide us with details on exactly what their dynamic ranges are, so that we could better tune our blocks, and they have yet to get back to us on that either.



The only reason why we have resorted to this broad of a block is because TDE has not shown any effort to work with us to isolate the problem, and we continue to receive thousands of 419/spam attempts daily by Rima-TDE netspace to our own mail servers and other mail servers we monitor or run.

Fonte: The Abusive Hosts Blocking List.