Re: Has spam factory dakotacom.net moved from ACSI to Alternet ?

[Ehud Gavron <GAVRON () ACES COM>]

        Dakota says they have a "super fast DS3 backbone" and on the
        phone their sales people have said they "are the backbone."

        Reality includes a T-1 to Alternet, and an Ethernet drop from
        ACSI.  GTWINC uses Dakotacom to spam the net, and I've heard
        that there are others (access) who are now joining their group.

        Dakota does not use or understand BGP, are shunned by local
        providers and interconnects, and uses two non-redundant net
        blocks -- one from Alter over that link, and one from ACSI
        over that link.

        You'll note they switched their dns to use the Alter net
        blocks.  A quick traceroute to gtwinc shows they're still
        there too:
 11 tucson-az-1-a12-0.acsi.net (206.222.97.8) [AS 6467] 112 msec 116 msec 128 ms
ec
 12 dakotacom.net.tucson-az-1.acsi.net (206.222.101.238) [AS 6467] 116 msec 116
msec 156 msec
...
        They do not respond to email, do not read this list, do not
        peer with anyone, and provide service to spammers.

        All information correct to the best of my knowledge, ads in the
        yellow pages, stuff said on the phone, and public information.

        Ehud


> I've been receiving buckets of spam from dakotacom.net, as many as 90 per
> day.  They've been connected to ACSI for many months.

> ACSI has a new anti-spam AUP that went into effect today.  Today I see that
> traceroutes to Dakotacom go through Alternet and
> medic-net-gw.customer.ALTER.NET.  But the route looks odd, maybe a leak
> rather than a new real route.

> I don't speak BGP (my multi-homed ISP does that for me), so can anyone see
> who's announcing 207.201.204.0/255.255.252.0 ?  ACSI?  Alternet?  Both?

> Regards,
> John Levine, postmaster () abuse net, http://www.abuse.net, Trumansburg NY
> abuse.net postmaster