OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Constant spam from Verizon.net

From: Keith T. Morgan (keith.morganterradon.com)
Date: Mon Jul 11 2005 - 15:21:54 CDT


Unfortunately, some of our systems are hosted on verizon. We see, and
shoot down thousands of exploit attempts and spam mails per day from IP
addresses that are logically near our address space. We sent email to
abuseverizon.net only to receive an autoreply that states that we are
not whitelisted to send to them. I then asks for a process of jumping
through a fire-ringed hoop while dancing an irish jig, and if the moon
and stars align while you're doing it, you can send them email.

Here's what I think happened:

Verizon Security Tech: "We're getting ten thousand abuse complaints per
day, I'm overwhelmed."
Verizon PHB: "Hey, what if we made it a lot harder for people to send
you email! That'd cut down the workload right?"
Verizon Security Tech: "uh, well, yeah, but ummm...."
Verizon PHB: "Great! Problem solved! I fixed teh intarweb! Next item
on the agenda...."

Pure conjecture on my part, but it wouldn't surprise me.

Good luck reporting security incidents to Verizon.
   

> -----Original Message-----
> From: Patrick Kremer [mailto:patricknicsys.net]
> Sent: Thursday, July 07, 2005 2:49 PM
> To: incidentssecurityfocus.com
> Subject: Constant spam from Verizon.net
>
> I am at a loss for what to do.
>
> I'm taking spam messages at the rate of 6,000 per day from a
> specific e-mail
> address linked to several Verizon DSL IP addresses.
>
> I have sent numerous logfiles to both security and
> abuseverizon.net and
> have received no response.
>
> I have spoken with their tech support numerous times and both
> they and their
> supervisors say they can not help, they claim the e-mail
> addresses are the
> only recourse.
>
> Does anyone have any other contact information?
>
**************************************************************************************************
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager or the
sender immediately and do not disclose the contents to anyone or make copies.

** this message has been scanned for viruses, vandals and malicious content **
**************************************************************************************************