idevnews.com: Spamming Red Hat contacts
As of September 7, 2012, this crap is being sent to addresses that have been given to Red Hat either as part of a support contract or when registering for Red Hat events. Abuse@Red Hat and a local connection of mine have been notified. Abuse@Red Hat has completely failed to respond. My local connection promptly said he’d check if they have given their list to a partner. I don’t think he’s got back on it yet. The addresses indicated to Red Hat haven’t even been listwashed. What cluelessness is this?
Spamming IP: 65.49.36.27
Spam headers:
From events@idevnews.com Tue Dec 4 01:19:17 2012 Return-Path: <events@idevnews.com> Received: from mail7.soatube.com (mail7.soatube.com [65.49.36.27]) by x (Postfix) with SMTP id x for <x>; Tue, 4 Dec 2012 01:19:15 +0200 (EET) From: <events@idevnews.com> To: x Message-ID: <1934037086.218448.1354571831159.JavaMail.javamailuser@localhost> Subject: CLOUD-CON: Integration - White Papers Available Now - IBM, Ping Identity, SOA Software, Dell-Boomi - Dec 13th MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_218444_1371135651.1354571831158" List-Unsubscribe: <http://maildb.idevnews.com/apis//unsubscribe?cId=x&eId=x&em=x> X-Complaints-To: abuse@idevnews.com Date: Tue, 4 Dec 2012 01:19:15 +0200 (EET)
Human-readable contents:
————-
CLOUD-CON: Integration – Download White Papers Now!
————-Attend Live: December 13, 2012 (1pm ET / 10am PT)
https://www.idevnews.com/registration/?event_id=227&code=x
————-
Expert Speakers
————-
[IBM]
– Laura Olson – Product Line Manager, WebSphere[Informatica]
– Darren Cunningham – VP of Marketing for Informatica Cloud[Dell / Boomi]
– Chris McNabb – Director of Product Management
– Rob Moyer – MDM Product Manager[Ping Identity]
– Hans Zandbelt – Technical Architect Office of the CTO[SOA Software]
– Alistair Farquharson – CTO————-
White Papers
————-
[IBM]
– IBM Web API Services[Informatica]
– Cloud Integration for Hybrid IT
– Informatica Cloud Architecture and Security Overview[Dell / Boomi]
– Kelly-Moore Paints Gains Efficiencies With Integration
– Enterprise Integration Made Easy with iPaaS[Ping Identity]
– The Three Tiers of Single Sign-On (SSO)
– Extending Security to the Cloud with Adaptive Federation[SOA Software]
– Enterprise-Ready API Management Done Socially
– Building an Enterprise API & Developer Community with Atmosphere————-
Register Now:https://www.idevnews.com/registration/?event_id=227&code=x
————-……………
A message from:
Integration Developer News
2200 Lake Road #105
Belmont, CA 94002One-Click to Unsubscribe – http://maildb.idevnews.com/apis//unsubscribe?cId=x&eId=x&em=x
……………
I got exactly the same crap from idevnews. And I wasn’t on any Red Hat list. And I didn’t subscribe to idevnews. So they must have grabbed a lot of lists.
I have unsubscribed via the link, let’s see if that helps.
Somebody else got this spam too.
I got hit by these guys back in March of 2011 from 64.62.145.53 (with later soatube.com attempts from other ranges). I believe the email address they hit was used when dealing with Red Hat, but it’s not tagged or anything so I can’t say that’s definitively the source.
The IP ranges they use are all registered to Digital Smart Technologies by way of Hurricane Electric:
64.62.145.48/28
65.49.36.0/27
184.105.143.64/28
I tried complaining to Hurricane Electric’s abuse address back when this first happened, but nothing came of it (not even an auto-response).
So did I, now. Got an auto-ack.
Your message (“[HE ABUSE #48137][64.62.145.51] soatube.com spammer”) has been assigned the tracking ID [#2038675].
—–Original Message—–
We have received a complaint about your account. Please investigate and fix within 24 hours.
Hurricane Electric Abuse Department
support@he.net
[copy-paste of my original complaint, sent as is to spammer; at least they’ve now been pointed to this blog]
From: <events@idevnews.com>
To: x
Subject: Download Slides – Cloud Integration Experts: IBM, Ping Identity,
SOA Software, Dell-Boomi – Dec 13th
X-Complaints-To: abuse@idnpostmaster.com
Date: Sun, 9 Dec 2012 21:mm:ss +0200 (EET)
<abuse@idnpostmaster.com>: host smtp.secureserver.net[216.69.186.201] said: 550
#5.1.0 Address rejected. (in reply to RCPT TO command)
Impressive.
[whois.arin.net]
Digital Smart Technologies, Inc. HURRICANE-CE1998-9B1 (NET-65-49-36-0-1) 65.49.36.0 – 65.49.36.31
Hurricane Electric, Inc. HURRICANE-9 (NET-65-49-0-0-1) 65.49.0.0 – 65.49.127.255
NetRange: 65.49.36.0 – 65.49.36.31
CIDR: 65.49.36.0/27
OriginAS:
NetName: HURRICANE-CE1998-9B1
NetHandle: NET-65-49-36-0-1
Parent: NET-65-49-0-0-1
NetType: Reassigned
RegDate: 2009-12-06
Updated: 2009-12-06
Ref: http://whois.arin.net/rest/net/NET-65-49-36-0-1
CustName: Digital Smart Technologies, Inc.
Address: 3627 Morningside Dr
City: El Sobrante
StateProv: CA
PostalCode: 94803
Country: US
RegDate: 2009-12-06
Updated: 2011-03-19
Ref: http://whois.arin.net/rest/customer/C02371724