Google Groups Home
Help | Sign in
thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  11 messages - Collapse all
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
SuN Tsu  
View profile
 More options Aug 26 2004, 10:48 am
Newsgroups: news.admin.net-abuse.email
From: bananana...@blockedby.us (SuN Tsu)
Date: 26 Aug 2004 07:48:32 -0700
Local: Thurs, Aug 26 2004 10:48 am
Subject: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz
thePlanet.com is host to some of the most egregious spammers and
phishers on the Internet.  Just yesterday it was announced that,

http://aolsvc.news.aol.com/news/article.adp?id=20031121131809990001&_...

"The search warrants were executed at homes in San Antonio and
Belleaire, Texas; Johnson City and Fulton, N.Y.; and Waukesha, Wis.
Another search was conducted at the office of The Planet, a
Dallas-based Internet service provider."

Although thePlanet is *not* the subject of the investigation, perhaps
it should be since they are still hosting an AOL phisher which is
still live after being both reported to their abuse department and
posted in NANAE.  They didn't even acknowledge receipt of the LART.

::  <quote>  ::

ab...@thePlanet.com,  please cancel the AOL phisher hosted by you at 
/...@rfedp.biz  which is still very much alive on  67.19.148.74

/...@rfedp.biz

This AOL niche spammer seems to like your service, but others would
prefer that you cancel their account for violation of your TOS/AUP. 
One would think that you now have grounds to cancel all of Bernie
Peters / SPEWS S2134 / Reflected.net domains hosted with you.

Google Search: theplanet spews s2134

Results 1 - 10 of about 87 for theplanet spews s2134

<http://groups.google.com/groups?q=theplanet+spews+s2134&hl=en&lr=&ie=...>

Thank you for your time and consideration in this matter.

Best Regards,

::  </quote>  ::

More information is expected today about the massive arrests and
search warrants executed by the US government.  If only they would
execute a few of the spammers as an example as well.

Cheers,

SuN

--
"Nobody saw me.  I didn't do it.  You can't prove a thing."
-O.J. Simpson,   or was it Bart?


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Karen in MN  
View profile
 More options Aug 26 2004, 11:15 am
Newsgroups: news.admin.net-abuse.email
From: "Karen in MN" <ask.me.for.my.email.address>
Date: Thu, 26 Aug 2004 10:15:02 -0500
Local: Thurs, Aug 26 2004 11:15 am
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz

"SuN Tsu" <bananana...@blockedby.us> wrote in message

news:5a07596f.0408260648.525f81d9@posting.google.com...
> thePlanet.com is host to some of the most egregious spammers and
> phishers on the Internet.  Just yesterday it was announced that,

http://aolsvc.news.aol.com/news/article.adp?id=20031121131809990001&_...

> "The search warrants were executed at homes in San Antonio and
> Belleaire, Texas; Johnson City and Fulton, N.Y.; and Waukesha, Wis.
> Another search was conducted at the office of The Planet, a
> Dallas-based Internet service provider."

Is that article available somewhere else?  I tried to go to it, but it
apparently wants a screen name and password, and I don't have an account
there.

    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Roland Mundloch  
View profile
 More options Aug 26 2004, 12:00 pm
Newsgroups: news.admin.net-abuse.email
From: Roland Mundloch <rom_no_s...@yahoo.de>
Date: Thu, 26 Aug 2004 18:00:11 +0200
Local: Thurs, Aug 26 2004 12:00 pm
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz

Karen in MN wrote:
> Is that article available somewhere else?  I tried to go to it, but it
> apparently wants a screen name and password, and I don't have an account
> there.

the're some media reports out (google news): e.g.

Feds launch Internet crime crackdown, From Terry Frieden
CNN Thursday, August 26, 2004 Posted: 1502 GMT (2302 HKT)

edition.cnn.com/2004/TECH/08/26/cybercrime.probe/

CU
Roland


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
SPAMJAMR  
View profile
 More options Aug 26 2004, 1:47 pm
Newsgroups: news.admin.net-abuse.email
From: SPAMJAMR <Letzta...@aol.com>
Date: 26 Aug 2004 10:47:55 -0700
Local: Thurs, Aug 26 2004 1:47 pm
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz
In article <5a07596f.0408260648.525f8...@posting.google.com>, SuN Tsu says...

>thePlanet.com is host to some of the most egregious spammers and
>phishers on the Internet.  Just yesterday it was announced that,

>http://aolsvc.news.aol.com/news/article.adp?id=20031121131809990001&_...>2e6&cid=842

I think that only works for AOL members.

>"The search warrants were executed at homes in San Antonio and
>Belleaire, Texas; Johnson City and Fulton, N.Y.; and Waukesha, Wis.
>Another search was conducted at the office of The Planet, a
>Dallas-based Internet service provider."

>Although thePlanet is *not* the subject of the investigation, perhaps
>it should be since they are still hosting an AOL phisher

Perhaps, but the article and charges on those accused has nothing to do with the
phishers:

"The FBI seized computers, software and equipment as part of an investigation
into illegal sharing of copyright movies, music and games..."

--
--

Paging Snotty Richter, please pick up the red "You're Fucked Now" phone.
Keep the Internet clean, practise spammus interruptus


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Thane  
View profile
 More options Aug 26 2004, 4:12 pm
Newsgroups: news.admin.net-abuse.email
From: m...@ix.netcom.com (Thane)
Date: 26 Aug 2004 13:12:17 -0700
Local: Thurs, Aug 26 2004 4:12 pm
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz

I copy the FBI on these phish attempts, particularly the ones that
reference a US site or ISP. (Submit a tip on their website).

Thane


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
You have no need to know  
View profile
 More options Aug 27 2004, 10:03 am
Newsgroups: news.admin.net-abuse.email
From: You have no need to know <anjahnoa...@fl.net.invalid>
Date: Fri, 27 Aug 2004 14:03:04 GMT
Local: Fri, Aug 27 2004 10:03 am
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz
Abandoning the right to remain silent, SuN Tsu at Thu, 26 Aug 2004
07:48:32 -0700 said:

> thePlanet.com is host to some of the most egregious spammers and
> phishers on the Internet.  Just yesterday it was announced that,

NET-67-18-240-0-1 suballocated from thePlanet.com joined a select group of
subnets I have blackholed today for sshd probing.

--
Avoid reality at all costs.
$email =~ s/n(.)a(.)n(.)a(.)e(.+)invalid/$1$2$3$4$5au/;


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
SuN Tsu  
View profile
 More options Aug 27 2004, 3:40 pm
Newsgroups: news.admin.net-abuse.email
From: bananana...@blockedby.us (SuN Tsu)
Date: 27 Aug 2004 12:40:09 -0700
Local: Fri, Aug 27 2004 3:40 pm
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz

Good suggestion!

"Your tip has been successfully submitted."

Oh, Phil, Behalten Sie Ihre Oren Steif.

Listen for the knock.  :)

Cheers,

SuN

--
"Nobody saw me.  I didn't do it.  You can't prove a thing.

Hmm, we'll (tinw) see what the FBI has to say about that!


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
SuN Tsu  
View profile
 More options Aug 27 2004, 3:56 pm
Newsgroups: news.admin.net-abuse.email
From: bananana...@blockedby.us (SuN Tsu)
Date: 27 Aug 2004 12:56:19 -0700
Local: Fri, Aug 27 2004 3:56 pm
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz
You have no need to know <anjahnoa...@fl.net.invalid> wrote in message <news:pan.2004.08.27.13.57.30.121815@fl.net.invalid>...

> Abandoning the right to remain silent, SuN Tsu at Thu, 26 Aug 2004
> 07:48:32 -0700 said:

> > thePlanet.com is host to some of the most egregious spammers and
> > phishers on the Internet.  Just yesterday it was announced that,

> NET-67-18-240-0-1 suballocated from thePlanet.com joined a select group of
> subnets I have blackholed today for sshd probing.

You are correct.

Internet America began buying smaller ISP's a few years back.  When
they did, both customer service and satisfaction deteriorated.  Spammy
knows how to "play" ISP's who try to grow too fast and who value money
over good buisiness ethics.

Still, thePlanet.com *never* did acknowledge the LART and the phisher
is *still* live.  That bad belongs to thePlanet.

CustName: Internet America
Address: 350 N. St. Paul, Suite 3000
City: Dallas
StateProv: TX
PostalCode: 75201
Country: US
RegDate: 2004-05-19
Updated: 2004-05-19

NetRange: 67.18.240.0 - 67.18.255.255
CIDR: 67.18.240.0/20
NetName: NETBLK-PLNT-IA-1
NetHandle: NET-67-18-240-0-1
Parent: NET-67-18-0-0-1
NetType: Reassigned
Comment: ab...@airmail.net
RegDate: 2004-05-19
Updated: 2004-05-19

TechHandle: PP46-ARIN
TechName: Pathos, Peter
TechPhone: +1-214-782-7800
TechEmail: ab...@theplanet.com

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-214-782-7802
OrgAbuseEmail: ab...@theplanet.com

OrgNOCHandle: TECHN33-ARIN
OrgNOCName: Technical Support
OrgNOCPhone: +1-214-782-7800
OrgNOCEmail: adm...@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: adm...@theplanet.com

Cheers,

SuN

--
"Nobody saw me.  I didn't do it.  You can't prove a thing."
-O.J. Simpson,   or was it Bart?


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Some Bastard  
View profile
 More options Aug 27 2004, 8:27 pm
Newsgroups: news.admin.net-abuse.email
From: Some Bastard <spam-use...@btfh.net>
Date: Fri, 27 Aug 2004 18:27:43 -0600
Local: Fri, Aug 27 2004 8:27 pm
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz
On Fri, 27 Aug 2004 14:03:04 GMT, You have no need to know

<anjahnoa...@fl.net.invalid> wrote:
>Abandoning the right to remain silent, SuN Tsu at Thu, 26 Aug 2004
>07:48:32 -0700 said:

>> thePlanet.com is host to some of the most egregious spammers and
>> phishers on the Internet.  Just yesterday it was announced that,

>NET-67-18-240-0-1 suballocated from thePlanet.com joined a select group of
>subnets I have blackholed today for sshd probing.

why not firewall the entire spammy shithole? nothing useful comes from
the planet of spam.

For some spammers, there are rbl's.
For one certain Bastard elsewhere, there's iptables.
Used to block jackasses all over the world.
Dont recieve mail without it.
http://mail.btfh.net/spam.txt
http://mail.btfh.net/asia-spam.txt


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
You have no need to know  
View profile
 More options Aug 28 2004, 12:29 am
Newsgroups: news.admin.net-abuse.email
From: You have no need to know <anjahnoa...@fl.net.invalid>
Date: Sat, 28 Aug 2004 04:29:37 GMT
Local: Sat, Aug 28 2004 12:29 am
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz
Abandoning the right to remain silent, Some Bastard at Fri, 27 Aug 2004
18:27:43 -0600 said:

> On Fri, 27 Aug 2004 14:03:04 GMT, You have no need to know
> <anjahnoa...@fl.net.invalid> wrote:

>>Abandoning the right to remain silent, SuN Tsu at Thu, 26 Aug 2004
>>07:48:32 -0700 said:

>>> thePlanet.com is host to some of the most egregious spammers and
>>> phishers on the Internet.  Just yesterday it was announced that,

>>NET-67-18-240-0-1 suballocated from thePlanet.com joined a select group of
>>subnets I have blackholed today for sshd probing.

> why not firewall the entire spammy shithole? nothing useful comes from
> the planet of spam.

One I migrate my MX to my box I may do that. For the moment ssh and http
probes matter more. So far ssh probers from these have been blackholed:

203.123.36.0/255.255.255.224
61.16.172.192/255.255.255.192
202.147.31.128/255.255.255.128
218.38.14.0/255.255.255.0
67.18.240.0/255.255.240.0
202.197.112.0/255.255.240.0
140.115.0.0/255.255.0.0
148.208.0.0/255.255.0.0
211.206.0.0/255.254.0.0
211.208.0.0/255.252.0.0

--
Avoid reality at all costs.
$email =~ s/n(.)a(.)n(.)a(.)e(.+)invalid/$1$2$3$4$5au/;


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
SuN Tsu  
View profile
 More options Aug 28 2004, 12:42 pm
Newsgroups: news.admin.net-abuse.email
From: bananana...@blockedby.us (SuN Tsu)
Date: 28 Aug 2004 09:42:45 -0700
Local: Sat, Aug 28 2004 12:42 pm
Subject: Re: thePlanet.com in hte news - and a *live* phisher still at 67.19.148.74, /@rfedp.biz