[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Feedback: Worm infested server @ Bharti 202.56.239.78

Anty Spam nospam at dev.null
Mon Apr 4 02:43:49 EDT 2005


"Anty Spam" <nospam at dev.null> wrote in message
news:d1t1n3$vpl$1 at news.spamcop.net...
> Hi All
>
> The following two worm attempts refer
> http://www.spamcop.net/sc?id=z745308652zb954fdc03dd52f4b85b68463b3299470z
> and
> http://www.spamcop.net/sc?id=z745309531z8ea5780a36e8501468ad92d10a7657dcz
>
> Each time a Netsky is attached (and removed :-)
>
>
> I has tried the techsupport at bharti.com and postmaster at bharti.com
addresses.
> For more than a month!
>
> Yet with regularity, these mails arrive from 202.56.239.78, up to 5 per
day.
>
> Normally the "bounce" message is acompanied by one or two nonsense mails.
> All mails have a Netsky attached.


Feedback on this issue.

My ISP has not extremely helpful on this issue. I got a "Report to spamcop"
response - Ughhhhhhhhhhhhhhh. One born every minute. Luckily I am not
paying...

Also, my philosophy on an issue such as this: Never give up. Escalate.
(reminds me a bit of the frog and the stork)As such I stepped up the heat.

I started polling "security" newsgroups "that it is best not to be known on"
about the morality of taking down such a server based on the circumstances.
Complete with IP address. (I was sure this generated a lot attention from
undersirables) . Also made Bharti aware of these.

I dug around. Found the Indian IT act.

Based upon the above, combined with the fact that I had proof of which
addresses did in fact receive my mails, I requested my mails be forwarded to
the legal department. I mentioned and quoted the act, clean up costs etc etc
to which I am entitled.  I also happended to ask if "X". was still doing
their support, since this could hurt them.

After this mail, I have not received another worm. Persistence pays.

Since replies here mentioned bad/non-existent service: There are articles
floating about on the net about who is doing their support in which areas.

I think I hit a nerve when I mentioned "X".

Cheers









More information about the SpamCop-List mailing list