North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User negligence?)

  • From: Peter Gray
  • Date: Tue Jul 29 04:04:10 2003

For a laugh, take a look at this spammer site, www.ushplans.com, currently hosted by Net Access Corporation. It claims to be "US Health Plans Inc., The Nations (sic) Leading Dental Plan" but its head office appears to be a mail drop box in New Jersey and its only known employee appears to be a telephone answering machine in Georgia. The domain name registration details give a fake address. NAC has been hosting this site for the last year, I've asked them three times to investigate and remove it, but I didn't get any constructive response.

From: [email protected] (Will Yardley)
To: [email protected]
Subject: Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User negligence?)
Date: Mon, 28 Jul 2003 11:43:43 -0700
MIME-Version: 1.0
Received: from mc9-f35.bay6.hotmail.com ([65.54.166.42]) by mc9-s18.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 2003 11:45:32 -0700
Received: from trapdoor.merit.edu ([198.108.1.26]) by mc9-f35.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 2003 11:45:32 -0700
Received: by trapdoor.merit.edu (Postfix)id E06BF9124D; Mon, 28 Jul 2003 14:43:48 -0400 (EDT)
Received: by trapdoor.merit.edu (Postfix, from userid 56)id A9FBA9124E; Mon, 28 Jul 2003 14:43:48 -0400 (EDT)
Received: from segue.merit.edu (segue.merit.edu [198.108.1.41])by trapdoor.merit.edu (Postfix) with ESMTP id 6C42B9124Dfor <[email protected]>; Mon, 28 Jul 2003 14:43:45 -0400 (EDT)
Received: by segue.merit.edu (Postfix)id 4C2835DDF2; Mon, 28 Jul 2003 14:43:45 -0400 (EDT)
Received: from mail.hq.newdream.net (mail.hq.newdream.net [66.33.200.10])by segue.merit.edu (Postfix) with ESMTP id C3F025DDF0for <[email protected]>; Mon, 28 Jul 2003 14:43:44 -0400 (EDT)
Received: from 127.0.0.1 (zugzug.hq.newdream.net [127.0.0.1])by drama.hq.newdream.net (Postfix) with SMTP id E6AB93B2EDfor <[email protected]>; Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
Received: by mail.hq.newdream.net (Postfix, from userid 1012)id D84513B2EB; Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
X-Message-Info: MxAodtZPLiQ6HPHOc8rBiXjgUFkT69DC
Delivered-To: [email protected]
Delivered-To: [email protected]
Delivered-To: [email protected]
Message-ID: <[email protected]>
Mail-Followup-To: [email protected]
References: <[email protected]>
In-Reply-To: <[email protected]>
Organization: New Dream Network
X-Message-Flag: Why are you reading this?
User-Agent: Mutt/1.5.3i
Sender: [email protected]
Precedence: bulk
Errors-To: [email protected]
X-Loop: nanog
Return-Path: [email protected]
X-OriginalArrivalTime: 28 Jul 2003 18:45:32.0357 (UTC) FILETIME=[6C832750:01C35538]


On Mon, Jul 28, 2003 at 08:56:01AM +0000, Peter Gray wrote:

> On the subject of host security issues and spam, try doing a search of the
> Usenet archive for '"Net Access Corporation" spam'. You get 328 results.
> And those are just the spams which people have traced to NAC, never mind
> the millions of untraced ones....

The fact that their abusebot automatically forwards complaints to the
spammer^Wcustomer (even setting the 'From' address on the autoresponse
to the customer's address) may have something to do with this.

--
"Since when is skepticism un-American?
Dissent's not treason but they talk like it's the same..."
(Sleater-Kinney - "Combat Rock")


_________________________________________________________________
On the move? Get Hotmail on your mobile phone http://www.msn.co.uk/msnmobile