Overview of spam from Demon.co.uk

15 Feb 2006

Note: Automated spam monitoring stopped several years ago. These web pages are maintained for historical reasons. Some may be updated from time to time as news about the individual sites becomes available.

No spam today

Overview of last 14 reports

date	posts	total	BI
11 Sep 2000	35	219	80.60	full headers
23 Jul 2000	30	358	82.66	full headers
09 Jun 2000	23	163	57.62	full headers
28 Apr 2000	26	239	75.49	full headers
07 Apr 2000	20	120	47.02
14 Mar 2000	44	348	119.34
25 Feb 2000	105	587	235.30
19 Jan 2000	15	115	38.80
03 Jan 2000	15	105	36.34
16 Dec 1999	13	110	32.45
06 Dec 1999	29	168	67.85
22 Nov 1999	19	103	44.11
16 Nov 1999	14	139	40.03
05 Nov 1999	17	185	54.89

Overview of history

	posts	total	BI
Total spam since 22 Oct 1999	439	3247	1105.19
Peak spam on 25 Feb 2000	105	587	235.30
Peak daily spam on 5 Nov 1999	4	46	13.72	(4-day average)
Average daily spam	1.3	9.6	3.29

full history also available

General information about Demon.co.uk

Added 4 Sept 1997.

Demon is a major ISP serving a variety of sites, including large corporations and single users which share network bandwidth at a reasonable price. Most of Demon's members are legitimate users. Some are spammers.

The X-NNTP-Posting-Host header can reliably identify the sender of spam from a Demon domain.

See Demon's acceptable use policies.

Ownership & Contact Info
Site history

Ownership & Contact Info

Demon owns the following domains:

Demon.net: Used for their own addresses, not delegated to customers.
Demon.com: Mostly unused
Demon.org: Mostly unused
Demon.co.uk: Addresses for UK customers
Demon.nl: Addresses for dutch customers

Whois identifies demon.co.uk as

   Domain Name: DEMON.CO.UK

   Registered For: Demon Internet Ltd.

   Domain Registered By: DEMON

   Record last updated on 20-Aug-97 by denesh@demon.net.

   Domain servers listed in order:

   NS0.DEMON.CO.UK                   158.152.1.65
   NS1.DEMON.CO.UK                   158.152.1.193
   SEC1.DNS.UK.PSI.NET               154.32.105.34

Site history

27 Jan 2000: Saylor rejoins Demon. Spams are again images with embedded URL.
13 April 1999: Tom Saylor (Asian-girl-erotica.com) joins Demon. Spams are images with embedded URL.
27 April 1998: There is a rogue canceller operating at Demon. Spam reports include rogue cancels.
4 Sept 1997: Added to tracking list.

To report spam, contact abuse@demon.net

A complete history may also be available.

General notes:

Only a small subset of usenet (261 groups) was sampled. Only articles that hadn't been cancelled yet were counted. Actual spam may have been much greater.
Heuristics that detect single-posted articles are, by their very nature, somewhat shaky. Innocent articles may be tagged as spam because they share certain characteristics or keywords with actual spam. In particular, a posted spam complaint that includes the spam in its entirety will very often be identified as spam.
Some posts may be forgeries intended to look like they came from Demon.co.uk.
The first entry in the history file is not used to compute peak or average spam counts, as this entry covers an unknown number of days. This may cause an apparent disreprency between spam totals and spam averages.

Return to top | Return to spam summaries | complete history

The opinions expressed on this page are solely those of Ed Falk and do not necessarily represent those of any other organization, (although I hope they do). I wish to thank Rahul.net for hosting this web page.