Overview of spam from Media_One

15 Feb 2006

Note: Automated spam monitoring stopped several years ago. These web pages are maintained for historical reasons. Some may be updated from time to time as news about the individual sites becomes available.

No spam today

Overview of last 14 reports

datepoststotalBI
11 Sep 2000 5122798.82full headers
23 Jul 2000 207255218.98full headers
07 Jul 2000 1331009345.18full headers
23 Jun 2000 60372133.74full headers
09 Jun 2000 107848283.87
19 May 2000 150601283.01
05 May 2000 1211836.51
28 Apr 2000 1713245.76
21 Apr 2000 95282140.51
07 Apr 2000 3322379.86
14 Mar 2000 5414379.05
25 Feb 2000 2361633582.69
24 Jan 2000 2828489.15
19 Jan 2000 3302647934.50

Overview of history

poststotalBI
Total spam since 29 Oct 1999323728644 9056.28
Peak spam on 6 Dec 1999102011868 3458.81
Peak daily spam on 6 Dec 19991451695 494.12(7-day average)
Average daily spam10.089.5 28.21

full history also available

General information about Media_One

Added Sep 2, 1997. Media-1 specializes in porn spams for the site "pornofthemonth", hosted by quik.com, and 6t9.com.

Media 1 is connected through verio.net. The contact address given below in the whois output is bogus.

Currently forging the domain name Media21.com in the headers. It is believed that the real Media21.com is innocent.

Media 1 is the same as, or associated with LibidoX

Disconnected by e.spire in December, 1997.

Ownership & Contact Info

Whois indicates that Media One is

Media One NETBLK-MEDIAONE2
   4400 140th Ave. N., #170
   Clearwater, Fl 34622
   US

   Netname: MEDIAONE2
   Netblock: 209.12.183.0 - 209.12.183.255

   Coordinator:
      Abad, David d_abad@CONKNET.COM
      (603)588-2177

   Record last updated on 07-Jul-97.
   Database last updated on 2-Sep-97 05:14:00 EDT.
(Note: this information is at least partially bogus.)

Whois identifies Media21.com as

WEEDN FAMILY TRUST (MEDIA57-DOM)
   c/o portofino america inc. 6 el paseo
   SANTA BARBARA, CA 93101
   US

   Domain Name: MEDIA21.COM

   Administrative Contact, Technical Contact, Zone Contact:
      WEEDN FAMILY TRUST  (WF67-ORG)  no.valid.email@WORLDNIC.NET
      8058849626, Fax- 8058840172
   Billing Contact:
      WEEDN FAMILY TRUST  (WF67-ORG)  no.valid.email@WORLDNIC.NET
      8058849626, Fax- 8058840172

   Record last updated on 13-May-98.
   Record created on 13-May-98.
   Database last updated on 18-Apr-99 12:28:48 EDT.
It is believed that Media21 is innocent; their domain name is being forged.

Whois indicates that pornofthemonth is

Registrant:
DUNCAN, ALLAN (PORNOFTHEMONTHCLUB-DOM)
   P.O. BOX 24 B 19
   LOS ANGELES, CA 90024
   US

   Domain Name: PORNOFTHEMONTHCLUB.COM

   Administrative Contact, Technical Contact, Zone Contact:
      DUNCAN, ALLAN  (AD7265)  no.valid.email@WORLDNIC.NET
      310 477 0104
   Billing Contact:
      DUNCAN, ALLAN  (AD7265)  no.valid.email@WORLDNIC.NET
      310 477 0104

   Record last updated on 28-Mar-99.
   Record created on 09-Mar-99.
   Database last updated on 12-Apr-99 19:00:42 EDT.

   Domain servers in listed order:

   NS.QUIK.COM                  205.162.86.17
   VENUS.SUPERSTORE.COM         205.162.86.1

Site history


NetNews Feeds

Mediaone receives netnews feeds from the following sites that I know of:

These sites have been added to the reporting list for Media1 to keep them aware of the problem, and to suggest that they terminate their netnews feed with Media1 until such time that Media1 adopts an anti-spam policy and regains control of their servers.


Sample Spam

Path: cam-news-hub1.bbnplanet.com!cpk-news-hub1.bbnplanet.com! news.gtei.net!newsfeed.cwix.com!24.92.226.150!newsf1.twcny.rr.com! cyclone.rr.com!lsnws01.we.mediaone.net!clnws01.we.mediaone.net.POSTED! not-for-mail From: "Insaniac" <Insaniac@mediaone.net> Newsgroups: alt.fan.prettyboy.sex,alt.fan.sexy-wings, alt.franco.sexe.rencontre,alt.francosexe.rencontre, alt.games.nettvshows.newsexpress,alt.homosexual,alt.homosexual.lesbian, alt.homosexuality,alt.homosexuality.death-metal,alt.magick.sex, alt.magick.sex.angs Subject: Porn Of The Month Club Lines: 12 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Message-ID: <Rg6P2.2$yZ1.170@clnws01.we.mediaone.net> Date: Thu, 8 Apr 1999 10:43:19 -0700 NNTP-Posting-Host: 24.30.104.41 X-Trace: clnws01.we.mediaone.net 923594929 24.30.104.41 (Thu, 08 Apr 1999 11:08:49 PDT) NNTP-Posting-Date: Thu, 08 Apr 1999 11:08:49 PDT Porn Of The Month Club Porn Of The Month Club the worlds premiere site for the purchase of discount erotica. Where Merchants, Members and Non-Members buy R to XXX rated products. www.pornofthemonthclub.com Need I say more. Path: newstank.sol.net!portc02.blue.aol.com!nyd.news.ans.net! news.idt.net!netnews.com!newshub.northeast.verio.net! worldfeed.news.gte.net!dallas-news-feed2.bbnplanet.com!news.gtei.net! media21.Media21.com!sexyone.com NNTP-Posting-Host: 206.251.105.2 Newsgroups: alt.binaries.pictures.erotica Date: Fri, 16 Apr 1999 23:00:26 -0400 Message-ID: <16049922.4829@sexyone.com> From: "Judy" <judy@sexyone.com> Subject: My pussy is wet 18731 Reply-To: Blondie@excite.com Lines: 821 Want to see the best in Amateur Hardcore sex? Want to be satisfied? Goto - http://goto.6t9.com/np Sample posted through
Cwix: Path: cpk-news-hub1.bbnplanet.com!news.gtei.net!newsfeed.cwix.com! 204.210.251.99!storm.twcol.com!denws01.mw.mediaone.net! denws02.mw.mediaone.net!not-for-mail From: pcqkpq@yahoo.com Newsgroups: alt.sys.amiga.miami,alt.sys.amiga.thor,alt.sys.amiga.uucp, alt.sys.amiga.uucp.patches,alt.sys.icl,alt.sys.intergraph, alt.sys.mac.newuser-help,alt.sys.pc-clone,alt.sys.pc-clone.acer, alt.sys.pc-clone.compaq,alt.sys.pc-clone.dell, alt.sys.pc-clone.gateway2000,alt.sys.pc-clone.micron, alt.sys.pc-clone.packardbell,alt.sys.pc-clone.quantex, alt.sys.pc-clone.zeos,alt.sys.pc532,alt.sys.pdp10,alt.sys.pdp11, alt.sys.pdp8 Subject: You like Hot action??? 6632 Date: 17 Apr 1999 20:05:12 GMT Organization: MediaOne Express -=- MidWest Region Lines: 9 Message-ID: <7fapho$1dp$293@denws02.mw.mediaone.net> NNTP-Posting-Host: nic-30-c30-216.mw.mediaone.net alt.sys.amiga.uucp.patches:1412 alt.sys.intergraph:8478 alt.sys.pc-clone.dell:22323 alt.sys.pc-clone.gateway2000:170515 alt.sys.pc-clone.micron:4883 alt.sys.pc532:311 alt.sys.pdp10:2232 alt.sys.pdp8:4463 Then come over to my site, adults only please http://adult.sexhound.net/coolchiks/main.html See ya there, Wendy oufdorjusfepxbqijvyhvojrfdcowjtsdbcywjnsonltotkcfhujbtqlhxqykqnoftqxbsuocdi

To report spam, contact one or more of

A complete history may also be available.

General notes:

Return to top | Return to spam summaries | complete history

The opinions expressed on this page are solely those of Ed Falk and do not necessarily represent those of any other organization, (although I hope they do). I wish to thank Rahul.net for hosting this web page.

This page maintained by Ed Falk