Now that I’m on vacation until the New Year, I have time to pursue this nonsense with the ISP that was used to send the spoof comments. If I get no response by Monday, I will follow up with the full emails that landed in my inbox as comment notifiers, including all header information. It’s Saturday Friday there, but it’s daytime in India, and ISPs are staffed 24/7.
Following is the text I sent to both email addresses listed in the “Whois” listing for the offending IP address. It lists Mumbai, but that’s probably just where the ISP is based.
Dear Sir or Madam,
This afternoon, I received spam comments at my blog (http://therustynail@wordpress.com) that appear to be spoofed from someone using the IP address 220.226.42.49.
According to “Whois,” it’s one of yours.
IP Information for 220.226.42.49
Whois Record
inetnum: 220.224.0.0 – 220.227.255.255
netname: RCOM
descr: Reliance Communications Ltd
descr: Dhirubai Ambani Knowledge City
descr: Thane Belapur Road, KoparKhairane
descr: Navi Mumbai – 400710
descr: India
country: IN
admin-c: KK799-AP
tech-c: SC1210-AP
status: ALLOCATED PORTABLE
notify:
notify:
Below are copies of the four comments received, supposedly from three different authors, supposedly using three different email addresses, but all trace back to your company.
These blog comments all relate to a publication, Taj Mahal Review, based in Allahabad. All relate to an entry on my blog concerning an entry that highlighted some of Cyberwit.net’s (owner of Taj Mahal Review) shadier business practices, at least by U.S. publishing standards. Cyberwit lists two email address on its “About Us” page: one at cyberwit.net, and another at the rediffmail.com portal.
You will find that the people at the Yahoo and Gmail addresses have nothing to do with Cyberwit or Taj Mahal Review. The one supposedly at rediffmail.com has had business dealings with the company, but experienced delivery problems with a book she had ordered from them.
I would highly appreciate it if you could investigate who is using your service to send these spoof emails and prevent the person from doing so in the future.
Kind regards,
Russell Nayle
Bulk action:
Bulk action:
Bulk action:
Bulk action: