Dedicated spam server 69.65.32.124

[AnthonyCea]

We received a report from a fellow forum administrator member who was hit with an automated spambot operator that was spoofing Google bot, it turns out these morons are running a dedicated spam server bot operation from dedicated servers.

69.65.32.124 samael.ironservers.net

Be on the lookout for this IP range to attack your forum running GoogleBot user agent.

Dedicated spam server data center and IP range

OrgName: GigeNET
OrgID: ECOMD
Address: 545 E. Algonquin Rd
Address: Suite D
City: Arlington Heights
StateProv: IL
PostalCode: 60005
Country: US

ReferralServer: rwhois://rwhois.servernap.net:4321

NetRange: 69.65.0.0 - 69.65.63.255
CIDR: 69.65.0.0/18
NetName: IPNAP
NetHandle: NET-69-65-0-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.SERVERNAP.COM
NameServer: NS2.SERVERNAP.COM
NameServer: NS3.IAD.SERVERNAP.COM
Comment: www.gigenet.com
RegDate: 2003-07-30
Updated: 2006-01-23

OrgTechHandle: IPADM152-ARIN
OrgTechName: IP Administrator
OrgTechPhone: +1-800-561-2656
OrgTechEmail: ip-admin@coloquest.com

[DCortez]

I found this on another IP I banned recently.

samael.ironservers.net

[AnthonyCea]

That is the host name of that particular IP, cut and paste the IP into this tool

www.dnstools.com

Seems these guys might be running a fake web hosting company as a front for their automated spambot operations.

Registrant:
Dmt inc.
Los Cedros #3613
Santiago, Santiago 7550000
CL

Registrar: NAMESDIRECT
Domain Name: IRONSERVERS.NET
Created on: 29-APR-08
Expires on: 30-APR-10
Last Updated on: 23-JAN-10

Administrative, Technical Contact:
Alvarado, Maximiliano dmtinc@gmail.com
Dmt inc.
Los Cedros #3613
Santiago, Santiago 7550000
CL
86956916


Domain servers in listed order:
NS1.IRONSERVERS.NET
NS2.IRONSERVERS.NET
NS3.IRONSERVERS.NET