Thursday, 30 May 2013

Andrew Jacob Stephens. The deja vous sequence

From :-  <http://al.howardknight.net/msgid.cgi?ID=136991821300>
Posted on March 29, 2011.

From the hapless Andrew Brunner of 1999, to the insane Harry
Widdefield, to the clueless Bubba Catts, the narcissistic Tim Bolen,
and the many other buffoons I've forgotten, countless grunting
spammers have stumbled along down the same path as currently occupied
by the latest in the procession of IQ neanderthals, Andrew Stephens.


The path is well travelled and always has more or less this same
sequence of events. I'll label them below so that future spammers who
land in here thinking they're the first to take on 'the antis' can be
pointed to where they are in the "pass through NANAE and out through
the swinging doors, minus all your domains" sequence:


[A] Freshly terminated spammer finds NANAE and assumes NANAE is
Spamhaus. Spammer posts a declaration of his awesome greatness,
proclaims that the economy depends on his spam, announces that
anti-spam organizations are doomed and he's the revolutionary warrior
that will finish them.


[B] Spammer upset by all the laughter following his post, claims to
have a department of lawyers at his beck and call and that he's
working on a landmark lawsuit. Upset at the even louder laughter this
produces, Spammer claims he's reporting everyone to the FBI, FTC,
FCC, CIA and the Federation of Planets. Upset at the even louder
laughter this produces, Spammer claims to have an in with bigwigs on
Capitol Hill who will pass laws for him outlawing the use of
anti-spam filters.


[C] Spammer trying to figure out why everyone is falling about
laughing, begins to google for "Spamhaus" and finds demented
disinformation by other grunting spammers who've been down the exact
same path before him. Spammer triumphantly quotes the unhinged
mad-hatter propaganda, proclaiming "There's my proof!".


[D] Spammer upset at the ensuing howls of laughter, and pride hurt by
discovering his new-found friend is a certified fruit cake, sets up
yet-another "I-hate-Spamhaus" website and proudly announces the end
of Spamhaus will be brought about imminently by his "Anti-Spamhaus"
website which has now achieved 17 hits.


[E] Spammer googles a bit and discovers Linford lives on a houseboat
in the UK. Spammer discovers Linford owns an ISP, and the revelation
prompts a new effort to conjure up a conflict of interest. When the
logic escapes him, Spammer googles some more and discovers said ISP
is not in the UK... and neither is Linford... which prompts a new
effort to conjure up an image of tax evasion since people who don't
live in the UK should, spammer thinks, pay taxes where they don't
live, just to confound the taxman, instead of in the country where
they actually do reside. When that logic also fails, Spammer claims
it's not fair that Spamhaus can be wherever it wants and organize its
structure as it likes.

[F] When the spammer's efforts to tie felonious sins to Spamhaus fail,
spammer proclaims he is now working on a soopa-sekrit invention that
will bypass all spam filters, and/or claims to be about to release a
'blocklist of anti-spammers', and/or claims he's building his own
Intertube backbone so nobody can terminate him again.


[G] Having run the course of a few weeks which prompted only
hysterical laughter from the NANAE group, Spammer decides that NANAE
was not Spamhaus after-all and announces that although he is leaving
minus all the domains and IP space he came in with, he is leaving
with a moral victory anyway and that everyone will be very, very
sorry one day when he is elected President or he manages to file his
earth-shattering RICO lawsuit.

--
  Steve Linford
  The Spamhaus Project
  http://www.spamhaus.org

Andrew Stephhens has a hosting problem.

Andrew has a hosting problem. (Loooooooong)
He is posting as ragmarthemighty, and using the nym of John Smith
 
 
 
 
X-Received: by 10.66.144.98 with SMTP id sl2mr3480148pab.12.1369730430027;
        Tue, 28 May 2013 01:40:30 -0700 (PDT)
X-Received: by 10.49.12.7 with SMTP id u7mr2311258qeb.31.1369730429611; Tue,
 28 May 2013 01:40:29 -0700 (PDT)
Path: d5ni12094pbl.0!nntp.google.com!lp19no29958138pbb.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
Newsgroups: news.admin.net-abuse.email
Date: Tue, 28 May 2013 01:40:29 -0700 (PDT)
Complaints-To: groups-abuse@google.com
Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=174.120.156.50;
 posting-account=I0p7OgoAAADMuXYPewDrNhkzgiGxznze
NNTP-Posting-Host: 174.120.156.50
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <0f99b2de-12ff-4c8a-a0d4-4fdace331a72@googlegroups.com>
Subject: Let's see how this plays out...
From: ragnarthemig...@gmail.com
Injection-Date: Tue, 28 May 2013 08:40:30 +0000
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Chat ID: 8215688. Question: I am reluctant to pay for your service if you a=
re simply going to shut it down over Spamhaus' false reports. I have US Off=
icials watching this hosting account to see if Spamhaus is truly influencin=
g censorship through their SBL listings and I need to know how Hostgator is=
 going to react so I can notify my "watchdog" on things. If you are simply =
going to continue my hosting despite Spamhaus lies, then I'll pay the invoi=
ce right away and expand my hosting with you.

(3:34:03am)System:Customer has entered chat and is waiting for an agent.=20
(3:34:46am)System:Thank you for verifying your billing account [PRIVATE]!=
=20
(3:42:35am)Karen M.:Hello there! I will be happy to help you today.=20
(3:42:42am)Karen M.:Welcome to HostGator Live Chat Support. My name is Kare=
n and I am here to assist you with all of your billing and technical suppor=
t needs.=20
(3:43:02am)Karen M.:John can you tell me please if you have an open ticket =
on this issue?=20
(3:44:09am)John Smith:I have not. I am working closely with US Authorities =
to expose Spamhaus extortion tactics. The account I have with HG is an acco=
unt being monitored and I was notified that Spamhaus has listed the server =
on their SBL in the past hour.=20
(3:44:58am)John Smith:They are making the claim that a ROKSO listed "spamme=
r" is somehow related to The Church of Common Good, which is a false statem=
ent and is easy to prove by looking at the company filings http://search.su=
nbiz.org/Inquiry/CorporationSearch/SearchResultDetail/EntityName/domnp-n130=
00001189-2d709c8e-ca68-4e89-a087-465f5c1cd0df/church%20of%20common%20good/P=
age1=20
(3:46:47am)John Smith:What is going on is that The Church of Common Good ha=
s been attacked by Spamhaus previously and the host terminated our hosting =
account based on Spamhaus libel. We expect that HG will do so as well and a=
re preparing for civil filings for violation of Constitutional Rights that =
protect The Church of Common Good as a "religious institution"=20
(3:47:15am)Karen M.:I understand.=20
(3:47:24am)John Smith:We will pay the invoice with HG and expand our servic=
es if HG will respect the Constitution of the United States=20
(3:47:55am)Karen M.:As long as the invoices are paid up to date and our ter=
ms of service are being met we will continue to host the site for you.=20
(3:48:02am)John Smith:but we do not want to pay it and then you turn around=
 and terminate the service under some vague "violation of TOS" based on the=
 fact that Spamhaus is attempting to censor a church=20
(3:48:24am)John Smith:Being listed on Spamhaus lists is often viewed as a T=
OS violation in itself=20
(3:48:37am)John Smith:can you please transfer me to your abuse staff?=20
(3:49:41am)John Smith:This chat log is being monitored as well to see how H=
G handles the issue=20
(3:50:02am)John Smith:I think it is important that all parties understand t=
hat=20
(3:51:31am)Karen M.:One moment please.=20
(3:51:37am)John Smith:yes=20
(3:53:48am)Karen M.:I apologize for the delay.=20
(3:54:04am)John Smith:not a problem, the outcome is the only thing of impor=
tance=20
(3:57:02am)Karen M.:I am explaining the situation to my supervisor. Please =
give me a few more minutes.=20
(3:57:53am)John Smith:yes absolutely. My contact will not be awake right no=
w or I would have her contact you as well, but I am sure they will be avail=
able during business hours today.=20
(3:58:26am)John Smith:My "contact" is a US Gov Official to be clear.=20
(3:59:50am)Karen M.:John can you show me where Spamhaus has your domain lis=
ted?=20
(4:00:01am)John Smith:http://www.spamhaus.org/sbl/query/SBL186133=20
(4:00:42am)John Smith:The claim is that Andrew Stephens is in control over =
the domains and his girlfriend is a Director for our Church=20
(4:01:12am)John Smith:Spamhaus has been attacking us because of their littl=
e squabble with Andrew and STOPhaus=20
(4:01:40am)John Smith:but that has nothing to do with us and we are tired o=
f it=20
(4:03:10am)Karen M.:Thank you. One moment please.=20
(4:03:13am)John Smith:yes=20
(4:03:58am)Karen M.:Due to the nature of the concern on your account, it is=
 essential that I set up a ticket on your behalf right away regarding the i=
ssue at hand. This will open up a line of communication between you and our=
 Security Administrators who can review your account directly to determine =
how it was compromised and assist you in preventing further exploitation an=
d recovering your site if possible. Once the ticket is created, I will esca=
late it as well for prompt review.=20
(4:04:16am)John Smith:there was no exploitation=20
(4:04:41am)John Smith:Spamhaus simply listed it because of the association =
between my family and Stephens.=20
(4:05:18am)Karen M.:With the site being listed on the spamhaus list this is=
 a security issue and will need to be addressed by our security team. This =
is just a precaution to assist you in resolving this issue.=20
(4:05:21am)John Smith:You can submit a ticket, but I have someone monitorin=
g this particular chat with me and would like to get this resolved while my=
 advocacy is with me.=20
(4:06:16am)John Smith:I understand completely, but if you are intending to =
terminate the site tonight, before any of this can take place, then I want =
to know so we can proceed in our next action.=20
(4:07:09am)John Smith:If you are intending to wait until after the Security=
 Team has reviewed it, it will likely be tomorrow morning and at that time =
I can have someone contact you that has a bit more authority than Spamhaus.=
=20
(4:07:33am)Karen M.:At this time sir I am not seeing any reason to terminat=
e the hosting account. As you are complying with our tos there is no issue.=
=20
(4:08:08am)John Smith:In all honesty, this is a contract between Host Gator=
 and The Church of Common Good, INC, which is a recognized religious instit=
ution in The State of Florida, so we should not even be concerned about our=
 ability to progress.=20
(4:08:34am)John Smith:thank you for pointing out that there are no TOS viol=
ations.=20
(4:08:46am)John Smith:I will make the payment and get the invoice handled.=
=20
(4:09:09am)John Smith:If there is a future issue, I will expect a refund of=
 any undue funds however.=20
(4:09:48am)John Smith:I know you have reached the end of your abilities in =
this situation and thank you for your patience in reviewing the issue=20
(4:10:14am)John Smith:Looking forward to speaking with your Security Staff =
in the morning and I'll look for the ticket email.=20
(4:10:36am)John Smith:Do you need anything further from me?=20
(4:11:07am)Karen M.:One moment please.=20
(4:11:11am)John Smith:yes=20
(4:14:15am)Karen M.:Your ticket number is=20
GIV-22165371 . You will also receive a copy of this in your email.=20
(4:14:56am)John Smith:I didn't get the number here=20
(4:15:12am)Karen M.:This is [PRIVATE].=20
(4:15:27am)John Smith:thank you very much. You have a wonderful morning=20
(4:15:31am)Karen M.:I apologize this sent in the chat on the second line.=
=20
(4:15:38am)Karen M.:You are very welcome. Do you have any other questions o=
r concerns I can assist you with?
 
++++++++++++End of transcript++++++++++++
 
 
Then a short while later, Andrew has some bad news :-
 
X-Received: by 10.224.53.198 with SMTP id n6mr14715914qag.2.1369760538581;
        Tue, 28 May 2013 10:02:18 -0700 (PDT)
X-Received: by 10.49.26.168 with SMTP id m8mr413487qeg.23.1369760538540; Tue,
 28 May 2013 10:02:18 -0700 (PDT)
Path: y6ni51517qax.0!nntp.google.com!ch1no2618829qab.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
Newsgroups: news.admin.net-abuse.email
Date: Tue, 28 May 2013 10:02:18 -0700 (PDT)
In-Reply-To: <null-BA1C03.17103028052013@news.supernews.com>
Complaints-To: groups-abuse@google.com
Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=174.120.156.50;
 posting-account=I0p7OgoAAADMuXYPewDrNhkzgiGxznze
NNTP-Posting-Host: 174.120.156.50
References: <0f99b2de-12ff-4c8a-a0d4-4fdace331a72@googlegroups.com>
 <whohee-C917FA.11394528052013@news.supernews.com> <null-BA1C03.17103028052013@news.supernews.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <1128d5ca-a217-46dc-b82d-36808441ebb9@googlegroups.com>
Subject: Re: Let's see how this plays out...
From: ragnarthemig...@gmail.com
Injection-Date: Tue, 28 May 2013 17:02:18 +0000
Content-Type: text/plain; charset=ISO-8859-1

On Tuesday, May 28, 2013 11:10:30 AM UTC-4, Luc Rossini [Spamhaus-CH] wrote:
> In article <whohee-C917FA.11394528052...@news.supernews.com>,
> 
>  Suspicious Sockus <who...@sockfactory.inv> wrote: 
> 
> > Let's see how this plays out... Spamdrew Stephens v. HostGator's TOS 
> >  
> > http://www.hostgator.com/tos 
> >  
> > "No organization or entity listed in ROKSO may be hosted on our  
> > servers." 
> >  
> > Oh dear! Countdown to termination begins... 10... 9... 8... 7... 6...
> 
> 
> 
> ...4, 3, 2, 1, Gone.
>  
> -- 
> 
>   Luciano Rossini 
>   The Spamhaus Project 
>   http://www.spamhaus.org

And now let's see how long before the black vans pick you up you arrogant fucktard.
On the phone with the fuzz right now. 


++++++++++++++++End+++++++++++++++++++++