Subject: [RFD] UDP proposal: BIGPOND/TELSTRA (Telstra Corporation Limited): A Request for Remedial Action

David Ritz

unread,

Mar 6, 2003, 3:08:12 AM3/6/03

to

-----BEGIN PGP SIGNED MESSAGE-----

This message is being sent bcc to a few interested parties.

Posted and mailed

Posted to news.admin.net-abuse.policy, news.admin.net-abuse.misc,
news.admin.net-abuse.bulletins, aus.net.access, aus.net.news,
aus.net.policy.

Please direct follow ups to news.admin.net-abuse.policy. Please see
<http://www.killfile.org/~tskirvin/nana/nanap-charter.html> prior to
posting to this moderated newsgroup.

===========================================================================

This Request For Discussion comes after much consideration and
significant effort on my part and the part of others to avoid this
action. Unfortunately, I feel the options have been exhausted. As
always, it is my hope that the reasons for remedial action may be
adequately addressed, in order to prevent any UDP action.

Telstra has an abysmal history with respect to ignoring long term
net-abuse issues. Trying to get any response from them is next to
impossible. In the past five years, I've only managed to elicit a
response from them on one issue. At that time, I was attempting
to de-peer Matt Middleton's rouge spam feed, in October, 1998.
Other than that, the best I've been able to manage are auto-acks.

Even when their nntp servers are being hijacked, flooding Usenet
with malicious rogue cancels and supersedes messages, let alone
thousands spammed posts, reports are met with deafening silence.

This unresponsiveness is mirrored by their Bigpond subsidiary.
Here, I can see their resident spammers being reassigned to
different IPs, but they continue their operations unimpeded. All
previous attempts at opening channels of communication have
apparently fallen on deaf ears, including stern warnings that
their failure to act against ongoing abuse issues would lead
directly to this opening of formal Usenet Death Penalty
discussions.

As I prepared this RFD, I pulled all of the Cancelled Spam
Statistics relating to Telstra (and more specifically, Bigpond).
From 03 Apr 1998 through 04 March 2003, all appearances of any
'Top Spam Sources by Injection Site', 'Top Spam Sources by
Upstream Site', 'Top Spam Sources by Posting-Host' and 'Top Spam
Sources by Path Tail' showing Telstra or Bigpond averaged 1,230
spam cancels directed against these posts.

If we assume that the average number of articles shown in the
Ultra Hippo statistics is close to being correct, 2,629 articles
were posted to news-server.bigpond.net.au on a daily basis, from
21 Mar 2002, through 22 Mar 2003. Over approximately the same
time spam, a daily average of 1,578 cyberspam cancels are being
issued against this output. This would indicate that over that
past year 60% of the articles posted to news-server.bigpond.net.au
are spam.

==========================================================================

=======================================================================
Cancelled Spam Statistics courtesy of Andrew Gierth
(see news.admin.net-abuse.bulletins)

==========================================================================

While the Ultra Hippo statistics shown indicate they are _only_
dropping 41% of this feed, that such a small site, in terms of
overall volume, has averaged the 18th highest source of spam over
this period, is a clear indication that little or nothing is being
done to stem this never ending pink tide.

When you look at the KByte counts, shown in the Ultra Hippo
statistics, you'll note that the bulk of the spam coming from
Bigpond consists of binary posts, with 69,644 KB dropped daily.
Of these, a significant and unacceptably high number of binaries
are being posted to text only newsgroups.

=========================================================================
Top 100 Sites identified by Ultra/Spam Hippo Despam
Ultra Hippo - Top 100 Spam News Sites
See news.admin.net-abuse.bulletins and <http://www.spamhippo.com>

Date n/100 Source Total spam %spam KBytes
=========================================================================
2002.03.21 44 news-server.bigpond.net.au 1598 443 28 47396
2002.03.22 62 news-server.bigpond.net.au 1253 235 19 34571
2002.03.23 20 news-server.bigpond.net.au 1685 654 39 70391
2002.03.24 16 news-server.bigpond.net.au 1622 658 41 34120
2002.03.25 22 news-server.bigpond.net.au 1884 854 45 36645
2002.03.26 28 news-server.bigpond.net.au 1779 515 29 43592
2002.03.27 24 news-server.bigpond.net.au 1817 852 47 67726
2002.03.28 29 news-server.bigpond.net.au 1662 599 36 47753
2002.03.30 39 news-server.bigpond.net.au 1313 432 33 49785
2002.03.31 86 news-server.bigpond.net.au 1194 107 9 7107
2002.04.01 39 news-server.bigpond.net.au 1585 487 31 17559
2002.04.02 41 news-server.bigpond.net.au 1464 525 36 34593
2002.04.03 49 news-server.bigpond.net.au 1648 336 20 37082
2002.04.04 16 news-server.bigpond.net.au 2190 975 45 86567
2002.04.05 32 news-server.bigpond.net.au 1528 540 35 36950
2002.04.06 53 news-server.bigpond.net.au 1338 370 28 31755
2002.04.07 13 news-server.bigpond.net.au 2203 1454 66 102011
2002.04.08 35 news-server.bigpond.net.au 1384 457 33 37386
2002.04.09 11 news-server.bigpond.net.au 2677 1852 69 118893
2002.04.10 40 news-server.bigpond.net.au 1470 410 28 36714
2002.04.11 9 news-server.bigpond.net.au 2501 1480 59 81368
2002.04.12 40 news-server.bigpond.net.au 1547 443 29 34422
2002.04.13 50 news-server.bigpond.net.au 1326 287 22 21121
2002.04.14 10 news-server.bigpond.net.au 2556 1505 59 100860
2002.04.15 50 news-server.bigpond.net.au 1364 263 19 30299
2002.04.16 8 news-server.bigpond.net.au 2547 1494 59 59094
2002.04.17 21 news-server.bigpond.net.au 1811 566 31 36773
2002.04.18 12 news-server.bigpond.net.au 2452 1362 56 77944
2002.04.19 62 news-server.bigpond.net.au 1252 231 18 26047
2002.04.20 47 news-server.bigpond.net.au 1655 282 17 25007
2002.04.21 15 news-server.bigpond.net.au 2067 1336 65 97134
2002.04.22 62 news-server.bigpond.net.au 1441 227 16 23585
2002.04.23 18 news-server.bigpond.net.au 3010 1446 48 73164
2002.04.24 25 news-server.bigpond.net.au 2162 857 40 69012
2002.04.25 17 news-server.bigpond.net.au 2443 1484 61 85057
2002.04.26 24 news-server.bigpond.net.au 2066 690 33 37367
2002.04.27 10 news-server.bigpond.net.au 2495 1281 51 74182
2002.04.28 7 news-server.bigpond.net.au 2168 1075 50 65087
2002.04.29 16 news-server.bigpond.net.au 2006 851 42 43376
2002.04.30 13 news-server.bigpond.net.au 1872 655 35 33110
2002.05.01 29 news-server.bigpond.net.au 1679 313 19 25015
2002.05.02 52 news-server.bigpond.net.au 1869 215 12 6611
2002.05.03 26 news-server.bigpond.net.au 1800 522 29 19328
2002.05.04 18 news-server.bigpond.net.au 1942 703 36 40736
2002.05.05 26 news-server.bigpond.net.au 2249 378 17 29373
2002.05.06 3 news-server.bigpond.net.au 4084 2796 68 35482
2002.05.07 22 news-server.bigpond.net.au 2421 593 24 31690
2002.05.08 11 news-server.bigpond.net.au 2691 867 32 66639
2002.05.09 35 news-server.bigpond.net.au 1807 329 18 27090
2002.05.10 19 news-server.bigpond.net.au 3499 970 28 74749
2002.05.11 18 news-server.bigpond.net.au 3169 685 22 79515
2002.05.12 25 news-server.bigpond.net.au 2535 773 30 29151
2002.05.13 27 news-server.bigpond.net.au 2080 572 28 27669
2002.05.14 14 news-server.bigpond.net.au 2586 971 38 29474
2002.05.15 21 news-server.bigpond.net.au 2405 1091 45 45708
2002.05.16 16 news-server.bigpond.net.au 2451 887 36 76320
2002.05.17 11 news-server.bigpond.net.au 2812 1397 50 44004
2002.05.18 7 news-server.bigpond.net.au 3318 1284 39 67095
2002.05.19 30 news-server.bigpond.net.au 2900 614 21 53305
2002.05.20 21 news-server.bigpond.net.au 4271 1407 33 57746
2002.05.21 88 news-server.bigpond.net.au 1787 129 7 9673
2002.05.22 8 news-server.bigpond.net.au 4446 3020 68 67193
2002.05.23 40 news-server.bigpond.net.au 1991 426 21 11692
2002.05.24 8 news-server.bigpond.net.au 4431 3004 68 23514
2002.05.25 3 news-server.bigpond.net.au 5203 2641 51 63730
2002.05.26 10 news-server.bigpond.net.au 2706 1021 38 32611
2002.05.27 21 news-server.bigpond.net.au 3323 851 26 34897
2002.05.28 17 news-server.bigpond.net.au 3329 1405 42 59432
2002.05.29 23 news-server.bigpond.net.au 2149 883 41 36203
2002.05.30 11 news-server.bigpond.net.au 2881 1517 53 59427
2002.05.31 16 news-server.bigpond.net.au 3317 1542 46 38089
2002.06.01 10 news-server.bigpond.net.au 3352 1428 43 30119
2002.06.02 13 news-server.bigpond.net.au 2530 1195 47 59089
2002.06.03 15 news-server.bigpond.net.au 3076 1204 39 48171
2002.06.04 12 news-server.bigpond.net.au 4022 1842 46 93745
2002.06.05 19 news-server.bigpond.net.au 3032 1387 46 108632
2002.06.06 20 news-server.bigpond.net.au 2638 1042 39 43399
2002.06.07 14 news-server.bigpond.net.au 5081 2023 40 138012
2002.06.08 18 news-server.bigpond.net.au 2913 1194 41 80905
2002.06.09 9 news-server.bigpond.net.au 3092 1685 54 80848
2002.06.10 19 news-server.bigpond.net.au 2914 1420 49 98405
2002.06.11 19 news-server.bigpond.net.au 3148 1201 38 137386
2002.06.12 25 news-server.bigpond.net.au 3136 914 29 62118
2002.06.13 12 news-server.bigpond.net.au 3981 1464 37 71202
2002.06.14 14 news-server.bigpond.net.au 3602 1256 35 90289
2002.06.15 21 news-server.bigpond.net.au 3434 1332 39 83297
2002.06.16 13 news-server.bigpond.net.au 2946 1556 53 124982
2002.06.17 19 news-server.bigpond.net.au 3631 1419 39 58532
2002.06.18 12 news-server.bigpond.net.au 4185 1683 40 134861
2002.06.19 17 news-server.bigpond.net.au 3236 1434 44 57467
2002.06.20 4 news-server.bigpond.net.au 3557 2511 71 209056
2002.06.21 4 news-server.bigpond.net.au 4156 2984 72 275221
2002.06.22 5 news-server.bigpond.net.au 4136 2104 51 196814
2002.06.23 6 news-server.bigpond.net.au 2950 1613 55 181700
2002.06.24 20 news-server.bigpond.net.au 2795 1255 45 53747
2002.06.25 16 news-server.bigpond.net.au 3088 1700 55 207899
2002.06.26 14 news-server.bigpond.net.au 2997 1574 53 96029
2002.06.27 13 news-server.bigpond.net.au 3190 1033 32 62887
2002.06.28 13 news-server.bigpond.net.au 3484 1642 47 75515
2002.06.29 16 news-server.bigpond.net.au 3035 1371 45 78696
2002.06.30 10 news-server.bigpond.net.au 2503 1205 48 53027
2002.07.01 10 news-server.bigpond.net.au 2795 1380 49 143229
2002.07.02 5 news-server.bigpond.net.au 3127 1671 53 83837
2002.07.03 12 news-server.bigpond.net.au 2776 1084 39 32588
2002.07.04 19 news-server.bigpond.net.au 4874 1212 25 45070
2002.07.05 8 news-server.bigpond.net.au 4110 1567 38 88659
2002.07.06 17 news-server.bigpond.net.au 2942 742 25 73882
2002.07.07 6 news-server.bigpond.net.au 3922 1327 34 64205
2002.07.08 17 news-server.bigpond.net.au 2863 1165 41 69604
2002.07.09 25 news-server.bigpond.net.au 1683 510 30 45902
2002.07.10 11 news-server.bigpond.net.au 3243 1550 48 106838
2002.07.11 15 news-server.bigpond.net.au 2639 1165 44 79718
2002.07.12 9 news-server.bigpond.net.au 3348 1851 55 117589
2002.07.13 12 news-server.bigpond.net.au 2112 868 41 62844
2002.07.14 7 news-server.bigpond.net.au 2550 1339 53 69718
2002.07.15 16 news-server.bigpond.net.au 2172 891 41 38351
2002.07.16 7 news-server.bigpond.net.au 3438 1827 53 134828
2002.07.17 9 news-server.bigpond.net.au 3409 1529 45 84468
2002.07.18 12 news-server.bigpond.net.au 4060 1633 40 71009
2002.07.19 26 news-server.bigpond.net.au 2555 615 24 39616
2002.07.20 18 news-server.bigpond.net.au 2524 999 40 49142
2002.07.21 10 news-server.bigpond.net.au 2784 1372 49 75149
2002.07.22 15 news-server.bigpond.net.au 2939 1612 55 112879
2002.07.23 23 news-server.bigpond.net.au 2337 907 39 173517
2002.07.24 16 news-server.bigpond.net.au 2925 1437 49 87152
2002.07.25 38 news-server.bigpond.net.au 2855 456 16 36381
2002.07.26 20 news-server.bigpond.net.au 3290 1244 38 76192
2002.07.27 5 news-server.bigpond.net.au 3988 1880 47 132420
2002.07.28 10 news-server.bigpond.net.au 3814 2176 57 108818
2002.07.29 12 news-server.bigpond.net.au 3270 1649 50 146213
2002.07.30 9 news-server.bigpond.net.au 2816 1459 52 76862
2002.07.31 10 news-server.bigpond.net.au 2685 1364 51 94555
2002.08.01 30 news-server.bigpond.net.au 2346 666 28 50096
2002.08.02 17 news-server.bigpond.net.au 2912 1359 47 28437
2002.08.03 7 news-server.bigpond.net.au 3470 2192 63 111919
2002.08.04 11 news-server.bigpond.net.au 2952 1186 40 68992
2002.08.05 12 news-server.bigpond.net.au 2801 1547 55 66844
2002.08.06 45 news-server.bigpond.net.au 1883 275 15 38613
2002.08.07 93 news-server.bigpond.net.au 2098 85 4 2159
2002.08.08 5 news-server.bigpond.net.au 3600 2109 59 119776
2002.08.09 28 news-server.bigpond.net.au 2060 511 25 3038
2002.08.10 38 news-server.bigpond.net.au 2848 281 10 16970
2002.08.11 75 news-server.bigpond.net.au 2942 116 4 12326
2002.08.12 48 news-server.bigpond.net.au 2127 256 12 530
2002.08.13 15 news-server.bigpond.net.au 2963 856 29 4871
2002.08.14 33 news-server.bigpond.net.au 2004 413 21 27975
2002.08.15 15 news-server.bigpond.net.au 2230 719 32 39602
2002.08.16 13 news-server.bigpond.net.au 2638 1264 48 60057
2002.08.17 16 news-server.bigpond.net.au 1882 789 42 41726
2002.08.18 4 news-server.bigpond.net.au 2533 1425 56 78938
2002.08.19 16 news-server.bigpond.net.au 2820 1253 44 70147
2002.08.20 14 news-server.bigpond.net.au 2889 1543 53 72988
2002.08.21 6 news-server.bigpond.net.au 3014 1830 61 105635
2002.08.22 6 news-server.bigpond.net.au 3676 1622 44 119121
2002.08.23 26 news-server.bigpond.net.au 2148 463 22 26997
2002.08.24 3 news-server.bigpond.net.au 3005 1687 56 96819
2002.08.25 9 news-server.bigpond.net.au 2611 1340 51 69521
2002.08.26 10 news-server.bigpond.net.au 2032 751 37 44722
2002.08.27 7 news-server.bigpond.net.au 2072 951 46 59965
2002.08.28 7 news-server.bigpond.net.au 2801 1439 51 84547
2002.08.29 11 news-server.bigpond.net.au 1993 944 47 57198
2002.08.30 8 news-server.bigpond.net.au 2327 1195 51 90765
2002.08.31 93 news-server.bigpond.net.au 1524 69 5 3707
2002.09.02 60 news-server.bigpond.net.au 1572 207 13 23604
2002.09.03 21 news-server.bigpond.net.au 2263 414 18 10130
2002.09.04 9 news-server.bigpond.net.au 2717 895 33 11693
2002.09.05 18 news-server.bigpond.net.au 2414 595 25 33087
2002.09.06 19 news-server.bigpond.net.au 3022 1007 33 44742
2002.09.07 5 news-server.bigpond.net.au 3466 1896 55 106881
2002.09.08 9 news-server.bigpond.net.au 3574 1354 38 64167
2002.09.09 10 news-server.bigpond.net.au 3029 1166 38 95282
2002.09.10 3 news-server.bigpond.net.au 3370 2377 71 117143
2002.09.11 4 news-server.bigpond.net.au 3383 1689 50 91805
2002.09.12 13 news-server.bigpond.net.au 2327 756 32 30156
2002.09.13 13 news-server.bigpond.net.au 2395 1044 44 43007
2002.09.14 11 news-server.bigpond.net.au 2650 1337 50 123138
2002.09.15 10 news-server.bigpond.net.au 2306 1281 56 51418
2002.09.16 12 news-server.bigpond.net.au 2205 1080 49 49882
2002.09.17 10 news-server.bigpond.net.au 2295 1208 53 56061
2002.09.18 9 news-server.bigpond.net.au 2729 1148 42 52198
2002.09.19 22 news-server.bigpond.net.au 2007 817 41 49282
2002.09.20 5 news-server.bigpond.net.au 2839 1869 66 93790
2002.09.21 11 news-server.bigpond.net.au 2665 1342 50 69850
2002.09.22 8 news-server.bigpond.net.au 2162 1355 63 66467
2002.09.23 12 news-server.bigpond.net.au 3571 1302 36 88548
2002.09.24 17 news-server.bigpond.net.au 2211 795 36 54855
2002.09.25 7 news-server.bigpond.net.au 2779 1800 65 92024
2002.09.26 6 news-server.bigpond.net.au 2881 1677 58 118177
2002.09.27 11 news-server.bigpond.net.au 1905 705 37 41929
2002.09.28 5 news-server.bigpond.net.au 3202 1852 58 127150
2002.09.29 3 news-server.bigpond.net.au 3410 2072 61 122775
2002.09.30 18 news-server.bigpond.net.au 3240 694 21 53993
2002.10.01 21 news-server.bigpond.net.au 2365 488 21 34406
2002.10.02 6 news-server.bigpond.net.au 2932 1378 47 102358
2002.10.04 8 news-server.bigpond.net.au 2892 1372 47 159062
2002.10.05 7 news-server.bigpond.net.au 3178 1603 50 103849
2002.10.06 8 news-server.bigpond.net.au 3520 1783 51 125999
2002.10.07 9 news-server.bigpond.net.au 3818 1558 41 108278
2002.10.08 17 news-server.bigpond.net.au 8011 1269 16 99686
2002.10.09 8 news-server.bigpond.net.au 6008 1944 32 139370
2002.10.10 17 news-server.bigpond.net.au 2437 724 30 46441
2002.10.11 7 news-server.bigpond.net.au 2948 1710 58 128341
2002.10.12 7 news-server.bigpond.net.au 3343 1809 54 137664
2002.10.13 12 news-server.bigpond.net.au 2767 1239 45 78670
2002.10.14 10 news-server.bigpond.net.au 2639 1179 45 56734
2002.10.15 5 news-server.bigpond.net.au 3172 1944 61 128630
2002.10.16 3 news-server.bigpond.net.au 3906 2449 63 743920
2002.10.17 2 news-server.bigpond.net.au 3812 2338 61 546303
2002.10.18 11 news-server.bigpond.net.au 2545 1133 45 317287
2002.10.19 18 news-server.bigpond.net.au 2350 606 26 234302
2002.10.20 23 news-server.bigpond.net.au 2523 740 29 49549
2002.10.21 18 news-server.bigpond.net.au 2369 680 29 47986
2002.10.22 7 news-server.bigpond.net.au 3188 1006 32 45226
2002.10.23 19 news-server.bigpond.net.au 2480 527 21 54210
2002.10.24 37 news-server.bigpond.net.au 2093 354 17 131780
2002.10.25 76 news-server.bigpond.net.au 1733 140 8 15350
2002.10.26 41 news-server.bigpond.net.au 1667 296 18 40180
2002.10.27 10 news-server.bigpond.net.au 3696 1045 28 60426
2002.10.28 12 news-server.bigpond.net.au 2516 763 30 37676
2002.10.29 9 news-server.bigpond.net.au 2606 867 33 63842
2002.10.30 19 news-server.bigpond.net.au 2592 608 23 43884
2002.10.31 19 news-server.bigpond.net.au 2500 550 22 43639
2002.11.01 13 news-server.bigpond.net.au 2527 653 26 50240
2002.11.02 33 news-server.bigpond.net.au 4093 333 8 15064
2002.11.03 24 news-server.bigpond.net.au 2278 536 24 21080
2002.11.04 10 news-server.bigpond.net.au 2471 826 33 56922
2002.11.05 9 news-server.bigpond.net.au 2972 1161 39 87934
2002.11.06 15 news-server.bigpond.net.au 2520 673 27 38481
2002.11.07 11 news-server.bigpond.net.au 2468 720 29 51773
2002.11.08 10 news-server.bigpond.net.au 2646 785 30 50553
2002.11.09 9 news-server.bigpond.net.au 3079 1264 41 110307
2002.11.10 15 news-server.bigpond.net.au 2370 686 29 34192
2002.11.11 9 news-server.bigpond.net.au 2797 1039 37 75494
2002.11.12 8 news-server.bigpond.net.au 3037 1293 43 97478
2002.11.13 12 news-server.bigpond.net.au 2549 725 28 42929
2002.11.14 12 news-server.bigpond.net.au 2479 790 32 56873
2002.11.15 11 news-server.bigpond.net.au 2135 941 44 76122
2002.11.16 13 news-server.bigpond.net.au 2600 710 27 41074
2002.11.17 11 news-server.bigpond.net.au 2265 928 41 67430
2002.11.18 11 news-server.bigpond.net.au 2688 742 28 74519
2002.11.19 14 news-server.bigpond.net.au 2119 620 29 37421
2002.11.20 10 news-server.bigpond.net.au 2375 669 28 41599
2002.11.21 18 news-server.bigpond.net.au 2044 589 29 36249
2002.11.22 6 news-server.bigpond.net.au 2762 1220 44 63222
2002.11.23 5 news-server.bigpond.net.au 2624 1233 47 92536
2002.11.24 18 news-server.bigpond.net.au 2158 559 26 34816
2002.11.25 8 news-server.bigpond.net.au 2449 929 38 57528
2002.11.26 12 news-server.bigpond.net.au 2171 680 31 41005
2002.11.27 9 news-server.bigpond.net.au 2788 977 35 46576
2002.11.28 3 news-server.bigpond.net.au 3282 1395 43 76222
2002.11.29 12 news-server.bigpond.net.au 2885 783 27 47970
2002.11.30 27 news-server.bigpond.net.au 2483 379 15 31781
2002.12.01 21 news-server.bigpond.net.au 2081 388 19 43195
2002.12.02 2 news-server.bigpond.net.au 2924 1316 45 203581
2002.12.03 11 news-server.bigpond.net.au 2483 943 38 110259
2002.12.04 8 news-server.bigpond.net.au 2076 783 38 35584
2002.12.05 14 news-server.bigpond.net.au 2485 795 32 30457
2002.12.06 2 news-server.bigpond.net.au 3395 2229 66 117989
2002.12.07 5 news-server.bigpond.net.au 2632 1190 45 57829
2002.12.08 9 news-server.bigpond.net.au 1862 717 39 30703
2002.12.09 23 news-server.bigpond.net.au 2030 350 17 12777
2002.12.10 17 news-server.bigpond.net.au 2029 488 24 39537
2002.12.11 10 news-server.bigpond.net.au 2376 718 30 63771
2002.12.12 8 news-server.bigpond.net.au 2192 1019 46 63008
2002.12.13 6 news-server.bigpond.net.au 2271 1167 51 91769
2002.12.14 7 news-server.bigpond.net.au 2411 1196 50 82503
2002.12.15 8 news-server.bigpond.net.au 2060 824 40 48528
2002.12.16 7 news-server.bigpond.net.au 2453 1173 48 99306
2002.12.17 6 news-server.bigpond.net.au 3454 1734 50 93675
2002.12.18 7 news-server.bigpond.net.au 2862 1143 40 73208
2002.12.19 9 news-server.bigpond.net.au 2734 1379 50 101011
2002.12.20 3 news-server.bigpond.net.au 3095 2068 67 101422
2002.12.21 6 news-server.bigpond.net.au 2304 1498 65 83610
2002.12.22 5 news-server.bigpond.net.au 2236 1419 63 91673
2002.12.23 2 news-server.bigpond.net.au 2617 1809 69 126055
2002.12.24 9 news-server.bigpond.net.au 1786 1175 66 70648
2002.12.25 2 news-server.bigpond.net.au 2045 1624 79 115977
2002.12.26 6 news-server.bigpond.net.au 2056 1196 58 67279
2002.12.27 4 news-server.bigpond.net.au 2617 1606 61 115198
2002.12.28 3 news-server.bigpond.net.au 2881 1890 66 133321
2002.12.29 4 news-server.bigpond.net.au 2561 1779 69 76577
2002.12.30 6 news-server.bigpond.net.au 2396 1192 50 63975
2002.12.31 10 news-server.bigpond.net.au 2353 1069 45 63678
2003.01.01 6 news-server.bigpond.net.au 2677 1446 54 77122
2003.01.02 12 news-server.bigpond.net.au 2302 739 32 61292
2003.01.03 19 news-server.bigpond.net.au 1842 578 31 43432
2003.01.04 35 news-server.bigpond.net.au 2084 276 13 34240
2003.01.05 17 news-server.bigpond.net.au 2097 549 26 23272
2003.01.06 16 news-server.bigpond.net.au 2434 697 29 32473
2003.01.07 13 news-server.bigpond.net.au 2790 751 27 44743
2003.01.08 18 news-server.bigpond.net.au 1978 487 25 30847
2003.01.09 60 news-server.bigpond.net.au 1537 158 10 16263
2003.01.10 28 news-server.bigpond.net.au 1851 421 23 46437
2003.01.11 91 news-server.bigpond.net.au 1483 80 5 5027
2003.01.12 7 news-server.bigpond.net.au 2394 1259 53 88205
2003.01.13 12 news-server.bigpond.net.au 2857 1244 44 83049
2003.01.14 6 news-server.bigpond.net.au 2518 1684 67 78149
2003.01.15 19 news-server.bigpond.net.au 2269 711 31 39738
2003.01.16 19 news-server.bigpond.net.au 2251 766 34 40256
2003.01.17 42 news-server.bigpond.net.au 1821 294 16 43929
2003.01.18 16 news-server.bigpond.net.au 2525 924 37 82074
2003.01.19 19 news-server.bigpond.net.au 2294 797 35 80142
2003.01.20 14 news-server.bigpond.net.au 2386 802 34 54362
2003.01.21 12 news-server.bigpond.net.au 2756 1487 54 108005
2003.01.22 19 news-server.bigpond.net.au 2191 837 38 53364
2003.01.23 22 news-server.bigpond.net.au 2349 597 25 48332
2003.01.24 9 news-server.bigpond.net.au 2257 1257 56 68071
2003.01.25 8 news-server.bigpond.net.au 2622 1549 59 99047
2003.01.26 7 news-server.bigpond.net.au 3058 1506 49 105867
2003.01.27 8 news-server.bigpond.net.au 2583 1045 40 76266
2003.01.28 16 news-server.bigpond.net.au 2294 717 31 34193
2003.01.29 49 news-server.bigpond.net.au 1850 211 11 7608
2003.01.30 9 news-server.bigpond.net.au 2695 1024 38 64833
2003.01.31 32 news-server.bigpond.net.au 1797 366 20 14716
2003.02.01 15 news-server.bigpond.net.au 2348 1180 50 68740
2003.02.02 32 news-server.bigpond.net.au 1759 410 23 28063
2003.02.03 27 news-server.bigpond.net.au 1642 391 24 16765
2003.02.04 18 news-server.bigpond.net.au 1975 511 26 21073
2003.02.05 9 news-server.bigpond.net.au 2067 788 38 27882
2003.02.06 25 news-server.bigpond.net.au 1868 426 23 15262
2003.02.07 38 news-server.bigpond.net.au 1743 299 17 14695
2003.02.08 21 news-server.bigpond.net.au 2147 516 24 51082
2003.02.09 24 news-server.bigpond.net.au 2072 520 25 37457
2003.02.10 36 news-server.bigpond.net.au 1687 272 16 13050
2003.02.11 48 news-server.bigpond.net.au 2223 207 9 9512
2003.02.12 18 news-server.bigpond.net.au 2532 750 30 41941
2003.02.13 7 news-server.bigpond.net.au 3654 1800 49 125962
2003.02.14 16 news-server.bigpond.net.au 2890 835 29 52629
2003.02.15 11 news-server.bigpond.net.au 2694 781 29 41606
2003.02.16 12 news-server.bigpond.net.au 2908 717 25 33832
2003.02.17 6 news-server.bigpond.net.au 1736 1736 100 101737
2003.02.18 3 news-server.bigpond.net.au 5257 1585 30 91467
2003.02.19 30 news-server.bigpond.net.au 3147 298 9 10514
2003.02.20 2 news-server.bigpond.net.au 2872 1362 47 85534
2003.02.21 1 news-server.bigpond.net.au 4251 3115 73 81929
2003.02.22 4 news-server.bigpond.net.au 4794 3413 71 113361
2003.02.23 3 news-server.bigpond.net.au 3867 2310 60 127328
2003.02.24 11 news-server.bigpond.net.au 1861 765 41 47280
2003.02.25 12 news-server.bigpond.net.au 1564 572 37 20632
2003.02.26 21 news-server.bigpond.net.au 1611 383 24 30193
2003.02.27 89 news-server.bigpond.net.au 1116 98 9 3544
2003.02.28 12 news-server.bigpond.net.au 570 570 100 20169
2003.03.01 32 news-server.bigpond.net.au 1513 285 19 12832
2003.03.02 13 news-server.bigpond.net.au 1778 696 39 25482
2003.03.03 2 news-server.bigpond.net.au 4195 3013 72 167201
2003.03.04 13 news-server.bigpond.net.au 1469 542 37 36783
=========================================================================
TOTAL 909770 370620 41 24096718
=========================================================================
AVERAGE 18 2629 1071 41 69644
=========================================================================

==========================================================================

As a specific area of concern, Bigpond's *.qld.bigpond.net.au
IPs appear most consistently in the NNPH and at the highest
volume of spam. While I'll save some space (and the reader's
patience), *.qld.bigpond.net.au has appeared in the Cancelled
Spam Statistics 291 times, since 28 Mar 2002. During this period
of time, 321,211 spam cancels have been directed against articles
originating from these addresses, averaging 1,104 per appearance.

Another area of concern is the *.sa.bigpond.net.au IP address.
These have appeared in the NNPH stats a total of 210 times,
averaging 454 cancelled articles per appearance.

One possible reason that Bigpond/Telstra appears to be making no
headway, is that as soon as one of their spammers disappears from
one IP address, they immediately turn up at another.

==========================================================================

See <http://dsrs.nntp.sol.net/reports/custom.20030603051150.html>
for a detailed report, including numbered hyperlinks to the articles.

DSRS posting research results

Please note, this search was generated at 2003/03/06 05:11:50 GMT
and the articles presented may no longer be available. You may
click on any article reference (the first hyperlink in each line)
and retrieve the referenced article without a DSRS login, however
you will need a DSRS login to perform any other searches.

Please visit http://dsrs.nntp.sol.net for details!

Search: exact NNTP-Posting-Host: for "203.45.178.119" from
2003/03/03 00:00:00 to 2003/03/03 23:59:59 CST

1: 2381 1.0000 xcf...@tbm.com 203.45.178.119
alt.binaries.picture . New Teen Boy Mo Mon, 03 Mar 2003 23:
2: 55234 1.0000 xcf...@tbm.com 203.45.178.119
alt.binaries.picture . New Teen Boy Mo Mon, 03 Mar 2003 23:
3: 94252 2.4495 tdy...@bma.com 203.45.178.119
alt.binaries.picture . B M A - Cute Tue, 04 Mar 2003 02:
<...>
536: 30836 2.4495 203.45.178.119
537: 2154 1.0000 203.45.178.119
538: 50930 2.4495 203.45.178.119
TOTALS ------- -------
538: 25672636 958.3521

* The second number in each line is the number of bytes for the
article. The third is the Breidbart Index, defined as the square
root of the number of groups posted to.

==========================================================================

See <http://dsrs.nntp.sol.net/reports/custom.20030603051726.html>
for a detailed report, including numbered hyperlinks to the articles.

DSRS posting research results

Please note, this search was generated at 2003/03/06 05:17:26 GMT
and the articles presented may no longer be available. You may
click on any article reference (the first hyperlink in each line)
and retrieve the referenced article without a DSRS login, however
you will need a DSRS login to perform any other searches.

Search: exact NNTP-Posting-Host: for "203.45.178.119" from
2003/03/04 00:00:00 to 2003/03/04 23:59:59 CST

1: 87899 2.4495 onl...@tbm.com 203.45.178.119
alt.binaries.picture . MY TRUE EXPERI Tue, 04 Mar 2003 21:
2: 60220 2.4495 onl...@tbm.com 203.45.178.119
alt.binaries.picture . MY TRUE EXPERI Tue, 04 Mar 2003 21:
3: 70295 2.4495 lkn...@tbm.com 203.45.178.119
alt.binaries.picture . MY TRUE EXPERI Tue, 04 Mar 2003 21:
<...>
613: 22533 2.4495 203.45.178.119
614: 50971 2.4495 203.45.178.119
615: 46328 1.0000 203.45.178.119
TOTALS ------- -------
615: 26019348 1103.4781

==========================================================================

See <http://dsrs.nntp.sol.net/reports/custom.20030603050901.html>
for a detailed report, including numbered hyperlinks to the articles.

DSRS posting research results

Please note, this search was generated at 2003/03/06 05:09:01 GMT
and the articles presented may no longer be available. You may
click on any article reference (the first hyperlink in each line)
and retrieve the referenced article without a DSRS login, however
you will need a DSRS login to perform any other searches.

Search: exact NNTP-Posting-Host: for "203.45.178.13" from
2003/03/05 00:00:00 to 2003/03/05 23:09:01 CST

1: 50815 2.4495 mpn...@bma.com 203.45.178.13
alt.binaries.picture >> New Australian Wed, 05 Mar 2003 22:
2: 56955 2.4495 pcn...@bma.com 203.45.178.13
alt.penthouse.sex.pi >> New Australian Wed, 05 Mar 2003 22:
3: 53501 2.4495 pcn...@bma.com 203.45.178.13
alt.penthouse.sex.pi >> New Australian Wed, 05 Mar 2003 22:
<...>
592: 46650 2.4495 203.45.178.13
593: 63612 2.4495 203.45.178.13
594: 49662 2.4495 203.45.178.13
TOTALS ------- -------
594: 23453042 1107.1195

==========================================================================

Guessing whether accounts are being cancelled and the spammers are
signing right back up, or Bigpond is simply reassigning them IPs,
would be purely conjecture on my part. Regardless, it is time for
this to stop.

==========================================================================
News Peers
==========================================================================

Unfortunately, the Maxwell Path analysis tool
<http://tfeed.maxwell.syr.edu/tfeed/usepaths.html> is down.
Fortunately, I have plenty of samples available locally.

Here's a Path analysis is taken from 1,179 sets of spam headers
provided to Bigpond and Telstra on 03 Mar 2003.

==========================================================================
Proposal
==========================================================================

Proposed: a two phase Usenet Death Penalty of telstra.net

1) a full passive UDP; shunning or Path aliasing
"news-server.bigpond.net.au" and "newsfeeds.bigpond.com".

2) a full active UDP; cancelling all Usenet posts showing
a bigpond.net.au or bigpond.com origin.

This proposed UDP action is a boycott and will in no way impinge
upon any service for which the users of news-server.bigpond.net.au
are paying. These users will be able to continue posting and
reading news, just as they are. The only effect would be on where
articles posted to news-server.bigpond.net.au appear, beyond
TELSTRA.NET's borders.

Please see:

"Usenet Death Penalty FAQ"
<http://www.stopspam.org/usenet/faqs/udp.html>

"Spam Glossary" <http://www.rahul.net/falk/glossary.html#udp>

"Net Abuse FAQ"
<http://www.cybernothing.org/faqs/net-abuse-faq.html#3.19>.

Should an UDP be called, the standard five business day notice
will be provided, so that the UDP target can take whatever
necessary action to alleviate the need for moving to the
enforcement stage of the called UDP.

As with any announced UDP action, all resources will be made
available to the target ISP, in an attempt to limit the necessity
for such drastic steps being taken. It is truly unfortunate that
it has come to this action of last resort.

Respectfully submitted, 06 March 2003.

- --
David Ritz <dr...@suespammers.org>
The suespammers.org mail server is located in California; do not
send unsolicited bulk e-mail or unsolicited commercial e-mail to my
suespammers.org address.

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Security 7.0.3

iQCVAwUBPmcB06dkAgrqVVPRAQH5uAQAuQnL7jY+unhoP/jmO1q9CXdQ2zHpsSqU
ksGgs8rMsE0amxfT+Guz2EDA5g4TMD5NwXtUmxi7cPBWqnT4njUre21Am04IDm6o
XgAQbCzhhd2h7v9WDBuM69tG/Qp+raPHPATgpSeMzy7Vs7LIThDmdHxgnF1vJWCd
8r/B3bdZ/hw=
=0JAL
-----END PGP SIGNATURE-----
--
All postings to news.admin.net-abuse.bulletins are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/

David Ritz

unread,

Mar 6, 2003, 3:08:12 AM3/6/03

to

David Ritz

unread,

Mar 6, 2003, 10:14:32 AM3/6/03

to

-----BEGIN PGP SIGNED MESSAGE-----

Posted and mailed

===========================================================================

==========================================================================

DSRS posting research results

==========================================================================

DSRS posting research results

==========================================================================

DSRS posting research results

==========================================================================

==========================================================================
News Peers
==========================================================================

==========================================================================
Proposal
==========================================================================

Please see:

"Spam Glossary" <http://www.rahul.net/falk/glossary.html#udp>

--

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/naa-charter.html