[anti-abuse-wg] Bezeq International - bezeqint.net

Hello Rom,

Thank you for response here.

This past weekend, I forwarded you two more Spam messages with their complete headers that had come from "bezeqint.net" e-mail servers.

And here is another one, sent by Nigerian criminals, that came this morning:

---

Return-Path: <lapointe_young at hotmail.com>
Received: from samuel.mail.atl.earthlink.net ([207.69.200.65])
	by mdl-raibs.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1w2IKm1Xd3Nl36y0; Mon, 13 Jan 2014 09:44:10 -0500 (EST)
Received: from sa10.bezeqint.net ([192.115.104.24])
	by samuel.mail.atl.earthlink.net (EarthLink SMTP Server) with ESMTP id 1w2IKk6Ed3Nl3pv0
	for <rezaf at mindspring.com>; Mon, 13 Jan 2014 09:44:09 -0500 (EST)
Received: from User (bzq-79-179-14-87.red.bezeqint.net [79.179.14.87])
	by sa10.bezeqint.net (Bezeq International SMTP out Mail Server) with SMTP id B9D051C286;
	Mon, 13 Jan 2014 15:12:06 +0200 (IST)
Reply-To: <mrslapointe_unoffice at e-mail.ua>
From: "Mrs. Carman Lapointe-Young."<lapointe_young at hotmail.com>
Subject: With Trust
Date: Mon, 13 Jan 2014 14:12:12 +0100
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <201401130944.1w2IKk6Ed3Nl3pv0 at samuel.mail.atl.earthlink.net>
X-ELNK-Received-Info: spv=1;
X-ELNK-AV: 0

---

As you see, this Spam had come "from User (bzq-79-179-14-87.red.bezeqint.net [79.179.14.87])". These fraudsters, have created an Ukraine-based e-mail address, <mrslapointe_unoffice at e-mail.ua>, to manage their scam.

In every instance that I have reported so far, these African based criminals have direct access to "bezeqint.net" e-mail servers. and are able to send anything that they want, and this ISP does not do anything to prevent or stop these criminals from using its e-mail servers.

Perhaps you could use your good working relationship with Bezeq International and remind them that if they continue providing such an easy access to criminals, other networks and ISPs will block all their IP addresses and will block any traffic coming from their servers, if they have not done already.

Thank you,

Reza Farzan


+++++


-----Original Message-----
>From: Rom Shahak <nvrom at 013netvision.co.il>
>Sent: Jan 8, 2014 3:34 AM
>To: Reza Farzan <rezaf at mindspring.com>, "anti-abuse-wg at ripe.net" <anti-abuse-wg at ripe.net>
>Cc: Israel CERT <report at CERT.gov.il>
>Subject: Re: [anti-abuse-wg] Bezeq International - bezeqint.net
>
>Hello Reza,
>
>We have working relationship with them and if you will send me some technical details such as meta data of the spam and your contact details I will ask
>
>our abuse department to give them a call and forward to them this info.
>
>Thanks
>
>Rom
>
>-----Original Message-----
>From: anti-abuse-wg-bounces at ripe.net [mailto:anti-abuse-wg-bounces at ripe.net] On Behalf Of Reza Farzan
>Sent: Wednesday, January 08, 2014 12:59 AM
>To: anti-abuse-wg at ripe.net
>Cc: hostmaster at bezeqint.net; Israel CERT; abuse at web.com; abuse at bezeqint.net
>Subject: [anti-abuse-wg] Bezeq International - bezeqint.net
>
>Hello!
>
>Does anyone in this group knows “BEZEQINT.NET”, or has information about this secretive ISP in Israel?
>
>In recent weeks, I received countless Spam messages [mostly sent by African/Nigerian criminals] that were originated from “BEZEQINT.NET” servers.
>
>I report each and every one of them, but to date I have not heard anything from this ISP, and Spam messages continue to arrive on a daily basis.
>
>I have copied their contacts, as well as Israel CERT just see if any of them would respond about this on-going violations coming via their servers.
>
>Thank you!
>
>Reza Farzan