Its not just Spam and DDOS anymore (was Re: OT: Re: User negligence?)

Tue Jul 29 08:00:14 UTC 2003

For a laugh, take a look at this spammer site, www.ushplans.com, currently 
hosted by Net Access Corporation.  It claims to be "US Health Plans Inc., 
The Nations (sic) Leading Dental Plan" but its head office appears to be a 
mail drop box in New Jersey and its only known employee appears to be a 
telephone answering machine in Georgia.  The domain name registration 
details give a fake address.  NAC has been hosting this site for the last 
year, I've asked them three times to investigate and remove it, but I didn't 
get any constructive response.

>From: william+nanog at hq.dreamhost.com (Will Yardley)
>To: nanog at merit.edu
>Subject: Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User 
>negligence?)
>Date: Mon, 28 Jul 2003 11:43:43 -0700
>MIME-Version: 1.0
>Received: from mc9-f35.bay6.hotmail.com ([65.54.166.42]) by 
>mc9-s18.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 
>2003 11:45:32 -0700
>Received: from trapdoor.merit.edu ([198.108.1.26]) by 
>mc9-f35.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 
>2003 11:45:32 -0700
>Received: by trapdoor.merit.edu (Postfix)id E06BF9124D; Mon, 28 Jul 2003 
>14:43:48 -0400 (EDT)
>Received: by trapdoor.merit.edu (Postfix, from userid 56)id A9FBA9124E; 
>Mon, 28 Jul 2003 14:43:48 -0400 (EDT)
>Received: from segue.merit.edu (segue.merit.edu [198.108.1.41])by 
>trapdoor.merit.edu (Postfix) with ESMTP id 6C42B9124Dfor 
><nanog at trapdoor.merit.edu>; Mon, 28 Jul 2003 14:43:45 -0400 (EDT)
>Received: by segue.merit.edu (Postfix)id 4C2835DDF2; Mon, 28 Jul 2003 
>14:43:45 -0400 (EDT)
>Received: from mail.hq.newdream.net (mail.hq.newdream.net [66.33.200.10])by 
>segue.merit.edu (Postfix) with ESMTP id C3F025DDF0for <nanog at merit.edu>; 
>Mon, 28 Jul 2003 14:43:44 -0400 (EDT)
>Received: from 127.0.0.1 (zugzug.hq.newdream.net [127.0.0.1])by 
>drama.hq.newdream.net (Postfix) with SMTP id E6AB93B2EDfor 
><nanog at merit.edu>; Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
>Received: by mail.hq.newdream.net (Postfix, from userid 1012)id D84513B2EB; 
>Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
>X-Message-Info: MxAodtZPLiQ6HPHOc8rBiXjgUFkT69DC
>Delivered-To: nanog-outgoing at trapdoor.merit.edu
>Delivered-To: nanog at trapdoor.merit.edu
>Delivered-To: nanog at merit.edu
>Message-ID: <20030728184343.GC29468 at hq.newdream.net>
>Mail-Followup-To: nanog at merit.edu
>References: <Law12-F88E2sCRBHZXF0000ea4c at hotmail.com>
>In-Reply-To: <Law12-F88E2sCRBHZXF0000ea4c at hotmail.com>
>Organization: New Dream Network
>X-Message-Flag: Why are you reading this?
>User-Agent: Mutt/1.5.3i
>Sender: owner-nanog at merit.edu
>Precedence: bulk
>Errors-To: owner-nanog-outgoing at merit.edu
>X-Loop: nanog
>Return-Path: owner-nanog at merit.edu
>X-OriginalArrivalTime: 28 Jul 2003 18:45:32.0357 (UTC) 
>FILETIME=[6C832750:01C35538]
>
>
>On Mon, Jul 28, 2003 at 08:56:01AM +0000, Peter Gray wrote:
>
> > On the subject of host security issues and spam, try doing a search of 
>the
> > Usenet archive for '"Net Access Corporation" spam'.  You get 328 
>results.
> > And those are just the spams which people have traced to NAC, never mind
> > the millions of untraced ones....
>
>The fact that their abusebot automatically forwards complaints to the
>spammer^Wcustomer (even setting the 'From' address on the autoresponse
>to the customer's address) may have something to do with this.
>
>--
>"Since when is skepticism un-American?
>Dissent's not treason but they talk like it's the same..."
>(Sleater-Kinney - "Combat Rock")
>
>

_________________________________________________________________
On the move? Get Hotmail on your mobile phone http://www.msn.co.uk/msnmobile