Apologies, the contact info should have been updated. I will try to get it updated asap. We are aware of the problem and working to correct it. We have a very large customer base of primarily small-medium businesses, generally clueless as to cyber security. It turns out that the process we had in place for tracking/dealing with abuse complaints was ineffective. We are changing the process try and catch/block compromised machines as soon as possible. Tim McKee -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Scott Francis Sent: Wednesday, May 29, 2002 18:11 To: Daniel Lark Cc: nanog@merit.edu Subject: Re: Abuse Contact at NuVox On Wed, May 29, 2002 at 04:03:58PM -0600, dlark@elmresources.com said:
I am consistently seeing a host from within nuvox.net trying to send spam through one of my mail servers. Anybody have a contact name, etc. for them? The abuse auto-reply is obviously less than helpful.
A litle work with the WHOIS servers should yield the IP block in question, and the block's owner (TriVergent Communications, Inc.). ---- [sfrancis@crypto:~]$ whois -a 64.89.70.4 [No name] (EXTNS7-HST) EXTNS1.NUVOX.NET 64.89.70.4 Carolina Online, Inc. (NETBLK-CAON-IP4-1) CAON-IP4-1 64.89.64.0 - 64.89.95.255 TriVergent Communications, Inc. (NETBLK-CAON-MAIN-SRVRS-109) CAON-MAIN-SRVRS-109 64.89.70.1 - 64.89.70.127 [sfrancis@crypto:~]$ whois -a NETBLK-CAON-MAIN-SRVRS-109 TriVergent Communications, Inc. (NETBLK-CAON-MAIN-SRVRS-109) 301 N. Main St., Suite 750 Greenville, SC 29606 US Netname: CAON-MAIN-SRVRS-109 Netblock: 64.89.70.1 - 64.89.70.127 Coordinator: McKee, Timothy (TM659-ARIN) trm3@trivergent.net (864) 370-7718 Record last updated on 27-Jul-2000. Database last updated on 28-May-2002 23:38:30 EDT. ---- -- Scott Francis darkuncle@ [home:] d a r k u n c l e . n e t Systems/Network Manager sfrancis@ [work:] t o n o s . c o m GPG public key 0xCB33CCA7 illum oportet crescere me autem minui