[cobalt-users] SPAM revisited... (OT)

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Today I got my first piece of spam directed to my
"jblists@xxxxxxxxxxxxx" attributed to the cobalt lists.  Coincidence? 
Or based on my post yesterday?

Not sure.

It came with this header...

Subject: 1 Hot Web Server!
Date: Fri, 11 Aug 2000 16:04:55
From: "Hot Web Server" <hotwebserver@xxxxxxxxxx>
To: <jblists@xxxxxxxxxxxxx>

Did anyone else get it?  If so, contact me offlist, and we'll close this
guy down; possibly in a matter of hours.

One of the tricks they decided to play was to put a decimal (rather than
dotted-quad) IP# into their email as their site.  However, once there it
was only ten seconds to figure out who they were (their site name was on
their site).

Looking at their whois record I determined who they are and who their
upstream is.

Coincidentally their upstream happens to be a company I've been buying a
lot of upstream capacity from for four years.  So I imagine I've got a
bit of leverage with them.

I've already contacted their upstream's noc.

So, Mr. Hot Web Server, be on notice that unless you're buying a lot of
connectivity from your upstream, they'd probably rather keep my
four-year-old account than your new one.

Oh well.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205