Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User negligence?)

["Peter Gray" <petgray () hotmail com>]

For a laugh, take a look at this spammer site, www.ushplans.com, currently 
hosted by Net Access Corporation.  It claims to be "US Health Plans Inc., 
The Nations (sic) Leading Dental Plan" but its head office appears to be a 
mail drop box in New Jersey and its only known employee appears to be a 
telephone answering machine in Georgia.  The domain name registration 
details give a fake address.  NAC has been hosting this site for the last 
year, I've asked them three times to investigate and remove it, but I didn't 
get any constructive response.

> From: william+nanog () hq dreamhost com (Will Yardley)
> To: nanog () merit edu
> Subject: Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User 
> negligence?)
> Date: Mon, 28 Jul 2003 11:43:43 -0700
> MIME-Version: 1.0
> Received: from mc9-f35.bay6.hotmail.com ([65.54.166.42]) by 
> mc9-s18.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 
> 2003 11:45:32 -0700
> Received: from trapdoor.merit.edu ([198.108.1.26]) by 
> mc9-f35.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 
> 2003 11:45:32 -0700
> Received: by trapdoor.merit.edu (Postfix)id E06BF9124D; Mon, 28 Jul 2003 
> 14:43:48 -0400 (EDT)
> Received: by trapdoor.merit.edu (Postfix, from userid 56)id A9FBA9124E; 
> Mon, 28 Jul 2003 14:43:48 -0400 (EDT)
> Received: from segue.merit.edu (segue.merit.edu [198.108.1.41])by 
> trapdoor.merit.edu (Postfix) with ESMTP id 6C42B9124Dfor 
> <nanog () trapdoor merit edu>; Mon, 28 Jul 2003 14:43:45 -0400 (EDT)
> Received: by segue.merit.edu (Postfix)id 4C2835DDF2; Mon, 28 Jul 2003 
> 14:43:45 -0400 (EDT)
> Received: from mail.hq.newdream.net (mail.hq.newdream.net [66.33.200.10])by 
> segue.merit.edu (Postfix) with ESMTP id C3F025DDF0for <nanog () merit edu>; 
> Mon, 28 Jul 2003 14:43:44 -0400 (EDT)
> Received: from 127.0.0.1 (zugzug.hq.newdream.net [127.0.0.1])by 
> drama.hq.newdream.net (Postfix) with SMTP id E6AB93B2EDfor 
> <nanog () merit edu>; Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
> Received: by mail.hq.newdream.net (Postfix, from userid 1012)id D84513B2EB; 
> Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
> X-Message-Info: MxAodtZPLiQ6HPHOc8rBiXjgUFkT69DC
> Delivered-To: nanog-outgoing () trapdoor merit edu
> Delivered-To: nanog () trapdoor merit edu
> Delivered-To: nanog () merit edu
> Message-ID: <20030728184343.GC29468 () hq newdream net>
> Mail-Followup-To: nanog () merit edu
> References: <Law12-F88E2sCRBHZXF0000ea4c () hotmail com>
> In-Reply-To: <Law12-F88E2sCRBHZXF0000ea4c () hotmail com>
> Organization: New Dream Network
> X-Message-Flag: Why are you reading this?
> User-Agent: Mutt/1.5.3i
> Sender: owner-nanog () merit edu
> Precedence: bulk
> Errors-To: owner-nanog-outgoing () merit edu
> X-Loop: nanog
> Return-Path: owner-nanog () merit edu
> X-OriginalArrivalTime: 28 Jul 2003 18:45:32.0357 (UTC) 
> FILETIME=[6C832750:01C35538]
>
>
> On Mon, Jul 28, 2003 at 08:56:01AM +0000, Peter Gray wrote:
>
> > On the subject of host security issues and spam, try doing a search of 
> the
> > Usenet archive for '"Net Access Corporation" spam'.  You get 328 
> results.
> > And those are just the spams which people have traced to NAC, never mind
> > the millions of untraced ones....
>
> The fact that their abusebot automatically forwards complaints to the
> spammer^Wcustomer (even setting the 'From' address on the autoresponse
> to the customer's address) may have something to do with this.
>
> --
> "Since when is skepticism un-American?
> Dissent's not treason but they talk like it's the same..."
> (Sleater-Kinney - "Combat Rock")

_________________________________________________________________
On the move? Get Hotmail on your mobile phone http://www.msn.co.uk/msnmobile