Overview of spam from Cwix.com

15 Feb 2006

Note: Automated spam monitoring stopped several years ago. These web pages are maintained for historical reasons. Some may be updated from time to time as news about the individual sites becomes available.

No spam today

Overview of last 14 reports

date	posts	total	BI
11 Sep 2000	60	283	113.89	full headers
23 Jul 2000	39	395	120.87	full headers
07 Jul 2000	34	336	104.23	full headers
23 Jun 2000	34	338	102.07	full headers
09 Jun 2000	43	396	122.11
19 May 2000	19	183	55.69
05 May 2000	25	200	67.81
28 Apr 2000	16	119	40.89
21 Apr 2000	39	201	80.21
07 Apr 2000	110	1505	389.77
14 Mar 2000	36	277	97.00
25 Feb 2000	18	182	56.80
19 Jan 2000	216	1756	599.26
14 Jan 2000	20	89	38.79

Overview of history

	posts	total	BI
Total spam since 5 Nov 1999	955	7830	2566.63
Peak spam on 19 Jan 2000	216	1756	599.26
Peak daily spam on 19 Jan 2000	43	351	119.85	(5-day average)
Average daily spam	3.0	25.0	8.18

full history also available

General information about Cwix.com

Added 17 Mar 1999. CWIX is Cable & Wireless Internet Exchange. CWIX has been purchasing other ISPs lately, including MCI

Cable & Wireless has a lax or non-existant abuse department. abuse@cwix.com bounces. spamcomplaint@cwixmail.com also bounces.

Cable & Wireless seems to be a rogue site. See MAPS RBL nomination. C&W netblocks are being added to the RBL and C&W seems not to care.

CWIX currently (Mar 1999) hosts Netzilla

Ownership & Contact Info
Site history
Sample Spam

Ownership & Contact Info

Whois identifies cwix.com as

Cable & Wireless Internet Exchange (CWIX-DOM)
   1919 Gallows Road
   Vienna, VA 22182

   Domain Name: CWIX.COM

   Administrative Contact:
      DNS Services  (DS757-ORG) pdns@CW.NET
      877-932-2949, Fax- - 703-341-6140
   Technical Contact, Zone Contact:
      Cable & Wireless DNS Services  (MDS6-ORG)  PDNS@CW.NET
      877-932-2949, Fax- - 703-341-4591
   Billing Contact:
      Cable & Wireless DNS Services  (MDS6-ORG)  PDNS@CW.NET
      877-932-2949, Fax- - 703-341-4591

Site history

24 Jan 2000: Tom Saylor now spamming.
17 Mar 1999: Added to tracking list.

Sample Spam

Path: ...!newsfeed.cwix.com!205.136.1.211!news.cwi.net! spamkiller1.cwix.com!news.cwix.com!not-for-mail From: fuck@all.thetime (GreatFuckingTimes) Newsgroups: alt.sex.boredom Subject: 500 LIVE XXX SEX CHANELS Message-ID: <fuck-1703990938490001@news.cwix.com> Organization: Simply The Best Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 8bit X-Newsreader: Yet Another NewsWatcher 2.2.0b13 Lines: 12 Date: Wed, 17 Mar 1999 15:35:35 GMT NNTP-Posting-Host: 166.62.42.69 X-Complaints-To: news@cw.net X-Trace: news.cwix.com 921684935 166.62.42.69 (Wed, 17 Mar 1999 10:35:35 EDT) NNTP-Posting-Date: Wed, 17 Mar 1999 10:35:35 EDT -=-=-=-=-=-=-=-=-=- BABENET -=-=-=-=-=-=-=-=-=-=- NINE LIVE VIDEO FEEDS THE BEST ARROUND REAL LIVE PRON STARS BEST OF THE BABES DOUBLE DOSE HOLLYWOOD HARLETS COCK AND PUSSY PUSSY CAM HOT DUDE STUD FUCKERS HE-SHE TRANSSEXUALS 500 CHANELS OF XXX MOVIES --> http://members.sexzilla.com/sisko/babenet <-- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

To report spam, contact one or more of

A complete history may also be available.

General notes:

Only a small subset of usenet (261 groups) was sampled. Only articles that hadn't been cancelled yet were counted. Actual spam may have been much greater.
Heuristics that detect single-posted articles are, by their very nature, somewhat shaky. Innocent articles may be tagged as spam because they share certain characteristics or keywords with actual spam. In particular, a posted spam complaint that includes the spam in its entirety will very often be identified as spam.
Some posts may be forgeries intended to look like they came from Cwix.com.
The first entry in the history file is not used to compute peak or average spam counts, as this entry covers an unknown number of days. This may cause an apparent disreprency between spam totals and spam averages.

Return to top | Return to spam summaries | complete history

The opinions expressed on this page are solely those of Ed Falk and do not necessarily represent those of any other organization, (although I hope they do). I wish to thank Rahul.net for hosting this web page.