Lightship Telecom - spam-support operations, ignoring all complaints! lightship.com, lightship.net, lightship.us, net-resource.com, net-resource.net, [216.204.0.0 - 216.204.255.255]: Access denied! === SPEWS evidence file (28-Apr-2004) === === http://www.spews.org/html/S2955.html === ----------- From a newsgroup posting: -------------------------- Subject: Spammers Atriks.com: How they operate Newsgroup: news.admin.net-abuse.email Atriks.com/Green Horse Corporation: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL12495 http://spews.org/ask.cgi?S2955 How they operate: Their spam tracking and redirection site is 216.204.150.247. They have registered sites to point at this address within their spam including the following: t.proofmailer.com t.sendmails.com t.proudmailer.net t.wwwoffer.com server-247.atriks.com t.wwwreports.com t.sendmial.com <-- Spelling correct emailserver14.com endmails.com fanmailserver.com This is to avoid URL name based filters. A different alias is used in almost every spam run. Their reply-to and bounce servers are 216.204.150.250 and 216.204.150.230, which alias to the following: mailer.sendmails.com mailer.wwwanswers.com mailer.sonicmailerpro.com return.4mails.com bounce.wwwoffer.com return.send-mails.com bounce.sendmail.org mailin.indiamailserver.com bounce.mailserverbiz.com return.sendmial.com bounce.mailserverwatch.com mailhost.freedomformailservers.com mailin.youremailserver.com mailer.mailservercentral.com sender.emailinglistserver.com And of course, they use cable/DSL accounts from all round the world to send their spam; a different account per spam run. These have been used recently: d216-232-214-106.bchsia.telus.net (Telus, USA) 12-224-68-75.client.attbi.com (Attbi, USA) 218.247.40.221 (China) p508C99E4.dip.t-dialin.net (Germany) cm218-254-197-152.hkcable.com.hk (Hong Kong) pool-151-196-50-248.balt.east.verizon.net (Verizon, USA) h24-108-248-57.gv.shawcable.net (Canada) adsl-68-90-244-214.dsl.hstntx.swbell.net (SWBell, USA) 81.193.171.171 (Portugal) h24-81-135-74.vf.shawcable.net (Canada) 207.245.14.134 (Canada) 203.210.212.78 (Vietnam) t178148.ap.plala.or.jp (Japan) They use embedded "images" to verify e-mail addresses for victims using HTML enabled mail readers e.g. img src= (munged of course) Now why would a legitimate mailing company do all of this? They spam for various low lives including credit cards, health insurance, cookie makers, Omaha Steaks (never ones to miss spam for hire), dating web sites, cell phones and DVD copiers. Their IP block (216.204.128.0/19) is owned by Lightship Telecom. So far 17 complaints my me to Lightship have been totally ignored. Do I smell a pink contract? Has anyone ever received a response from Lightship Telecom? My bitch list for them is: abuse @ lightship.net, info @ lightship.net, repair @ lightship.net, customerservice @ lightship.net Anyone got any more? ------------------------------------------------------------------- OrgName: Lightship Telecom, LLC OrgID: LTL-26 Address: One Exectutive Park Drive City: Bedford StateProv: NH PostalCode: 03110 Country: US NetRange: 192.216.101.0 - 192.216.101.255 CIDR: 192.216.101.0/24 NetName: LIGHTSHIP-101-17 NetHandle: NET-192-216-101-0-1 Parent: NET-192-216-0-0-1 NetType: Reassigned Comment: RegDate: 2003-03-17 Updated: 2003-03-17 OrgTechHandle: RGI8-ARIN OrgTechName: Girardin, Rick OrgTechPhone: +1-603-314-2540 OrgTechEmail: rgirardin@lightship.net ------------------------------------------------------------------- CARDS.LKY7.COM COW1.DOMAINCOW.COM COW2.DOMAINCOW.COM DICE.LKY7.COM DNS1.MYMAILERS.NET DNS1.TULIAO-ONLINE.COM DNS1.YME2.NET DNS2.MYMAILERS.NET DNS2.TULIAO-ONLINE.COM DNS2.YME2.NET ITS.BZZRD.COM ITS.RSKYLV.NET KWENGINEERINGS.COM LOOK.PIXZS.COM LOTSA.FREKLZ.COM NS1.024.NET NS1.4PLY.COM NS1.4SND.COM NS1.MEGAMAILER.NET NS1.MYMAILERS.NET NS1.S9P.NET NS1.UXD7.COM NS2.024.NET NS2.4PLY.COM NS2.4SND.COM NS2.MEGAMAILER.NET NS2.MYMAILERS.NET NS2.S9P.NET NS2.UXD7.COM OH.8SEZ.COM ONE.6XT.NET ONE.HOPN.NET RESHMAEVENTS.COM SAHIBATRAVELS.COM SEE.PIXZS.COM TAB2.HISUZ.COM TWO.6XT.NET TWO.HOPN.NET WHO.BZZRD.COM YA.8SEZ.COM ------------------------------------------------------------------- === Lightship Telecom terminates the spammers only after being blocked === Path: uni-berlin.de!fu-berlin.de!postnews1.google.com!not-for-mail From: raltman@lightship.net (Rob Altman) Newsgroups: news.admin.net-abuse.email Subject: SPEWS: S2955 Date: 28 Apr 2004 09:42:52 -0700 Organization: http://groups.google.com Lines: 29 Message-ID: <17da9684.0404280842.22699751@posting.google.com> NNTP-Posting-Host: 216.204.78.249 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1083170573 31796 127.0.0.1 (28 Apr 2004 16:42:53 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Wed, 28 Apr 2004 16:42:53 +0000 (UTC) Xref: uni-berlin.de news.admin.net-abuse.email:2192754 As a result of the listing in SPEWS, Lightship Telecom has terminated its services for Atriks and there are no longer any active services within their formerly allocated IP range: 216.204.150.0/23 We, at Lightship Telecom, apologize for inaction in recent months and the senior management of this company now recognizes the problems with ignoring this type of activity and the effects it has on the Internet community. We are putting an internal process in place for swiftly reacting to spam complaints to ensure that this type of net abuse does not occur again. Our goal is to keep our entire network free from spammers. We do not wish to endorse nor harbor any spam operations. I am requesting that Lightship Telecom's IP range (216.204.0.0/16) be removed from Atriks' SPEWS entry (http://www.spews.org/html/S2955.html). We are no longer providing service to Atriks and request that any association between Atriks and Lightship Telecom's IP space be removed. Please contact me if you have any questions or need any further information. Thank you. Rob Altman Lightship Telecom One Executive Park Drive Bedford, NH 03110 raltman@lightship.net 603-314-2000 === A reply === Path: uni-berlin.de!fu-berlin.de!newsfeed.stueberl.de!newsr1.ipcore.viaginterkom.de!news-peer1!btnet-feed5!btnet!news.btopenworld.com!not-for-mail From: "Not me" Newsgroups: news.admin.net-abuse.email Subject: Re: SPEWS: S2955 Date: Wed, 28 Apr 2004 19:17:58 +0000 (UTC) Organization: BT Openworld Lines: 27 Message-ID: References: <17da9684.0404280842.22699751@posting.google.com> NNTP-Posting-Host: host81-152-26-103.range81-152.btcentralplus.com X-Trace: titan.btinternet.com 1083179878 9858 81.152.26.103 (28 Apr 2004 19:17:58 GMT) X-Complaints-To: news-complaints@lists.btinternet.com NNTP-Posting-Date: Wed, 28 Apr 2004 19:17:58 +0000 (UTC) X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MSMail-Priority: Normal X-Priority: 3 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Xref: uni-berlin.de news.admin.net-abuse.email:2192820 "Rob Altman" wrote in message news:17da9684.0404280842.22699751@posting.google.com... > I am requesting that Lightship Telecom's IP range (216.204.0.0/16) be > removed from Atriks' SPEWS entry > (http://www.spews.org/html/S2955.html). We are no longer providing > service to Atriks and request that any association between Atriks and > Lightship Telecom's IP space be removed. Hi. You don't remember me. I was one of the victims who complained to you no less than 27 times about your spammers. I for one hope SPEWS keeps you listed for as long as you ignored abuse complaints. Of course, whether you do get off SPEWS or not is the least of your worries. By now your netspace is blocked by uncountable numbers of personal blocklists that will be impossible to get off. I hope the spammers money was worth it. Not me * Do not reply to this e-mail address - it is a spam trap * === Some data on Lightship Telecom === $ jwhois lightship.net [Querying whois.internic.net] [Redirected to whois.networksolutions.com] [Querying whois.networksolutions.com] [whois.networksolutions.com] <...> Registrant: Lightship Telecom (LIGHTSHIP7-DOM) 1301 Virginia Drive, Suite 120 Fort Washington, PA 19034 US Domain Name: LIGHTSHIP.NET Administrative Contact: Altman, R (26902551I) whois@lightship.com Lightship Telecom 1 Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Technical Contact: Hostmaster, DNS (35639890P) dns@lightship.net Lightship Telecom One Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Record expires on 04-Jan-2006. Record created on 11-Apr-1997. Database last updated on 28-Apr-2004 16:27:13 EDT. Domain servers in listed order: NS0.LIGHTSHIP.NET 216.204.102.10 NS2.NET-RESOURCE.COM 216.204.0.35 NS3.LIGHTSHIP.NET 216.204.80.171 NS1.NET-RESOURCE.COM 216.204.0.33 $ jwhois lightship.com [Querying whois.internic.net] [Redirected to whois.networksolutions.com] [Querying whois.networksolutions.com] [whois.networksolutions.com] <...> Registrant: Lightship Telecom (LIGHTSHIP-DOM) 1301 Virginia Drive, Suite 120 Fort Washington, PA 19034 US Domain Name: LIGHTSHIP.COM Administrative Contact: Altman, R (26902551I) whois@lightship.com Lightship Telecom 1 Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Technical Contact: Hostmaster, DNS (35639890P) dns@lightship.net Lightship Telecom One Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Record expires on 18-Aug-2006. Record created on 19-Aug-1995. Database last updated on 28-Apr-2004 16:29:58 EDT. Domain servers in listed order: NS.LIGHTSHIP.COM 216.204.117.53 NS0.LIGHTSHIP.NET 216.204.102.10 NS1.NET-RESOURCE.COM 216.204.0.33 NS2.NET-RESOURCE.COM 216.204.0.35 NS3.LIGHTSHIP.NET 216.204.80.171 $ jwhois lightship.us [Querying whois.nic.us] [whois.nic.us] Domain Name: LIGHTSHIP.US Domain ID: D2197007-US Sponsoring Registrar: VERISIGN .US REGISTRARS, INC. Domain Status: ok Registrant ID: 26902550 Registrant Name: Lightship Telecom Registrant Organization: Lightship Telecom Registrant Address1: 1301 Virginia Drive, Suite 120 Registrant City: Fort Washington Registrant State/Province: PA Registrant Postal Code: 19034 Registrant Country: United States Registrant Country Code: US Registrant Phone Number: +1.6033142000 Registrant Facsimile Number: +1.6033146420 Registrant Email: raltman@lightship.net Registrant Application Purpose: P1 Registrant Nexus Category: C21 Administrative Contact ID: 26902551 Administrative Contact Name: R Altman Administrative Contact Organization: Lightship Telecom Administrative Contact Address1: 1 Executive Park Drive Administrative Contact City: Bedford Administrative Contact State/Province: NH Administrative Contact Postal Code: 03110 Administrative Contact Country: United States Administrative Contact Country Code: US Administrative Contact Phone Number: +1.6033142000 Administrative Contact Facsimile Number: +1.6033146420 Administrative Contact Email: whois@lightship.com Billing Contact ID: 26902550 Billing Contact Name: Lightship Telecom Billing Contact Organization: Lightship Telecom Billing Contact Address1: 1301 Virginia Drive, Suite 120 Billing Contact City: Fort Washington Billing Contact State/Province: PA Billing Contact Postal Code: 19034 Billing Contact Country: United States Billing Contact Country Code: US Billing Contact Phone Number: +1.6033142000 Billing Contact Facsimile Number: +1.6033146420 Billing Contact Email: raltman@lightship.net Billing Application Purpose: P1 Billing Nexus Category: C21 Technical Contact ID: 35639890 Technical Contact Name: DNS Hostmaster Technical Contact Organization: Lightship Telecom Technical Contact Address1: One Executive Park Drive Technical Contact City: Bedford Technical Contact State/Province: NH Technical Contact Postal Code: 03110 Technical Contact Country: United States Technical Contact Country Code: US Technical Contact Email: dns@lightship.net Name Server: NS0.LIGHTSHIP.NET Name Server: NS1.NET-RESOURCE.COM Name Server: NS3.LIGHTSHIP.NET Name Server: NS.LIGHTSHIP.COM Created by Registrar: VERISIGN .US REGISTRARS, INC. Last Updated by Registrar: VERISIGN .US REGISTRARS, INC. Domain Registration Date: Mon Apr 29 19:38:24 GMT 2002 Domain Expiration Date: Fri Apr 28 23:59:59 GMT 2006 Domain Last Updated Date: Fri Apr 16 17:13:22 GMT 2004 >>>> Whois database was last updated on: Wed Apr 28 20:34:20 GMT 2004 <<<< $ jwhois net-resource.com [Querying whois.internic.net] [Redirected to whois.networksolutions.com] [Querying whois.networksolutions.com] [whois.networksolutions.com] Registrant: Lightship Telecom (NET-RESOURCE4-DOM) 1301 Virginia Drive, Suite 120 Fort Washington, PA 19034 US Domain Name: NET-RESOURCE.COM Administrative Contact: Altman, R (26902551I) whois@lightship.com Lightship Telecom 1 Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Technical Contact: Hostmaster, DNS (35639890P) dns@lightship.net Lightship Telecom One Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Record expires on 28-Jun-2004. Record created on 29-Jun-1995. Database last updated on 28-Apr-2004 16:32:54 EDT. Domain servers in listed order: NS0.LIGHTSHIP.NET 216.204.102.10 NS2.NET-RESOURCE.COM 216.204.0.35 NS3.LIGHTSHIP.NET 216.204.80.171 NS1.NET-RESOURCE.COM 216.204.0.33 $ jwhois net-resource.net [Querying whois.internic.net] [Redirected to whois.networksolutions.com] [Querying whois.networksolutions.com] [whois.networksolutions.com] <...> Registrant: Lightship Telecom (NET-RESOURCE3-DOM) 1301 Virginia Drive, Suite 120 Fort Washington, PA 19034 US Domain Name: NET-RESOURCE.NET Administrative Contact: Altman, R (26902551I) whois@lightship.com Lightship Telecom 1 Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Technical Contact: Hostmaster, DNS (35639890P) dns@lightship.net Lightship Telecom One Executive Park Drive Bedford, NH 03110 US 603-314-2000 fax: 603-314-6420 Record expires on 11-Dec-2005. Record created on 12-Dec-1997. Database last updated on 28-Apr-2004 16:33:31 EDT. Domain servers in listed order: NS0.LIGHTSHIP.NET 216.204.102.10 NS2.NET-RESOURCE.COM 216.204.0.35 NS3.LIGHTSHIP.NET 216.204.80.171 NS1.NET-RESOURCE.COM 216.204.0.33