VSNL (Videsh Sanchar Nigam Ltd) - India: the hardcore spamhaus, who absolutely
ignore complaints, shuffle spammers' IPs (to avoid blocklisting?), and then has
guts to come to the news.admin.net-abuse.email Usenet newsgroup and ask to be
removed from the blocklists, with all their spammers still being hosted on their
servers!

VSNL, rot in every possible blocklist, you, spamhaus, son of a spamhaus!

Update: 25-Nov-2003: VSNL says: "we've registered all our spammers' smaller IP
ranges with APNIC, so block only those ranges, not the whole VSNL". Are they
THAT dumb?!



vsnl.net.in, vsnl.com, vsnl.net: Access denied!
[59.160.0.0 - 59.165.255.255],
[202.54.0.0 - 202.54.255.255],
[203.197.0.0 - 203.197.255.255],
[203.199.0.0 - 203.200.255.255],
[219.64.0.0 - 219.65.255.255]: Null routed!



=== VSNL blocks reporters of their own misconfigured mailservers ===
From jseymour@LinxNet.com Tue Feb 25 18:08:59 2003
Path: uni-berlin.de!fu-berlin.de!newsfeed.news2me.com!sn-xit-02!sn-xit-06!sn-post-01!supernews.com!corp.supernews.com!not-for-mail
From: jseymour@LinxNet.com (Jim Seymour)
Newsgroups: news.admin.net-abuse.email
Subject: vsnl.net.in: Blindingly Clueless?
Date: Tue, 25 Feb 2003 15:28:20 -0000
Organization: tino
Message-ID: <v5n2skf8cvuhf4@corp.supernews.com>
Mime-Version: 1.0
X-Newsreader: knews 1.0b.1
Content-Type: text/plain; charset=us-ascii
X-Complaints-To: abuse@supernews.com
Lines: 99
Xref: uni-berlin.de news.admin.net-abuse.email:1928516

Back on Jan. 10th of this year, in response to a colleague's request,
I looked into why my Corporate MTAs were rejecting email from a
certain individual.  I discovered that the mail server that was
attempting to deliver to us was not identifying itself properly in
HELO/EHLO.  So I sent the following along:

------------------------- begin included text --------------------------

Dear <some_user>@del3.vsnl.net.in,

[My company's domains'] mail servers are refusing your email because
your mail server is not identifying itself properly, as per Internet
RFCs (standards).

As a network security and anti-spam measure, [our] mail servers are
configured to refuse delivery from mail servers that do not properly
identify themselves.

Specifically: your mail server is not supplying a Fully-Qualified
Domain Name (FQDN) in its HELO/EHLO greeting.  Your mail server is
identifying itself simply as

    "<manage>"

which is not a FQDN.

In looking into this, I also found that your mail server's IP address
has no reverse DNS lookup information.  Please be aware that an
increasing number of mail servers on the Internet are refusing to
accept email from servers that do not have rDNS.  ([Our]'s currently
isn't one of those, but may be some day.)  This is also an anti-spam
and security measure.  You may wish to look into this.

Since you will be unable to email me in return, please feel free to
call or FAX me if you wish.  My phone numbers are in my signature
block, below.

I've also copied this to what *should* be the appropriate technical
contact email addresses for your mail server.

Regards,
Jim
-------------------------- end included text ---------------------------

The above as also Cc:'d to vsnl.net.in's Postmaster.

Polite, factual and professional, no?

Fast-forward to today.  Another colleague asked me to look into this
again, as we're still rejecting the sender.  I look.  Same issue.  So
I send out something, much as the above, notifying them that the
problem remained unresolved.  Imagine my surprise when I get back:

------------------------- begin included text --------------------------
>From MAILER-DAEMON  Tue Feb 25 08:06:15 2003
Date: Tue, 25 Feb 2003 18:35:15 +0530 (IST)
From: MAILER-DAEMON@mailhost05.vsnl.net (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: me@example.com
Message-Id: <20030225130515.577171D212B@mailhost05.vsnl.net>

This is the Postfix program at host mailhost05.vsnl.net.

I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the message returned below.

                        The Postfix program

<system@bom5.vsnl.net.in>: host ns3.vsnl.com[203.197.12.42] said: 554
    <me@example.com>: Sender address rejected: Access denied (in
    reply to RCPT TO command)

-------------------------- end included text ---------------------------

Note that it says "Sender address rejected."  I use Postfix and I
know what that means.  That means that vsnl.net.in has explicitly
blackholed either my specific email address (I'm the Postmaster at
work, which is noted in my signature), or our entire company, in a
local check_sender_access list.

Now why in the Wide, Wide World of Sports would any mail admin with
half a clue do something like that in response to a heads-up about a
technical issue?  They wouldn't.  Which leads me to the inescapable
conclusion that whomever's running vsnl.net.in is, in fact, lacking
even so much as half a clue.  Doing a Google search on "vsnl.net.in"
in NANAE, I suppose I'm not overly surprised.

Regards,
Jim
--
Jim Seymour                          | "Some of the lies are so strange it
WARNING: The "From:" address is a    |  makes you wonder about the spammer's
spam trap.  DON'T USE IT!  Use:      |  sanity."
jseymour@LinxNet.com                 |   - Ed Foster, "The Gripe Line" 6/24/02



=== Long-time persistent spammer, Steve Sorenson, moved to VSNL ===
=== ( about the spammer: http://www.DolphinWave.org/spam/Sorenson.txt ) ===
=== My 1st spam complaint to VSNL about this spammer ===
From: Admin <abuse@2003.dolphinwave.org>
Reply-To: abuse@2003.dolphinwave.org
Organization: Private person
Subject: [email] Long-time spammer @VSNL: (WHOIS harvest: customerblast.com/Steve Sorenson)! [Fwd: Italian - crafted Rolex - only $65 - $140 Free Shipping!]
Date: Sun, 10 Aug 2003 19:48:20 +0300
User-Agent: KMail/1.5
X-KMail-Link-Message: 1708654
X-KMail-Link-Type: forward
To: <abuse@2003.dolphinwave.org>,
 uce@ftc.gov,
 nanas-sub@cybernothing.org,
 abuse@utelfla.com,
 abuse@sprint.net,
 abuse@aol.com,
 abuse@cs.com,
 postmaster@vsnl.net.in,
 abuse@vsnl.com,
 ip-admin@giasbm01.vsnl.net.in,
 abuse@intercosmos.com,
 hostmaster@intercosmos.com,
 abuse@directnic.com,
 hostmaster@directnic.com,
 abuse@uu.net
X-Complaints-To: abuse@dolphinwave.org (live person)
X-PGP-key: 0xAAE2A579
X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133  FA87 000B 0FB6 AAE2 A579
X-No-Confirm: Yes
MIME-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200308101948.20384@2003.dolphinwave.org>
Status: RO
X-Status: S
X-KMail-EncryptionState:  
X-KMail-SignatureState:  

This is the long-time persistent spammer, Steve Sorenson, who spams my e-mail
addresses since January! He was already kicked off by at least these ISPs:
AT&T, HOSTNOC.net, HopOne, ThePlanet.com, CUBEXS, C&W and Genuity/Verizon.
The spamming history of this abuser is archived:
http://www.DolphinWave.org/spam/Sorenson.txt

The abuser STILL uses the Sprint-HSD access in Florida, after his last spams
were complained on in July 2003!

Please, terminate the spammers' accounts as soon as possible!
Thanks!
=======

Refusing to deal with your abusers will lead your whole IP range to be
blocked from accessing of my mailservers ever again, and this info will
be shared with other admins and public blocklists!


Spammer: user44.net042.fl.sprint-hsd.net [207.30.21.44]

Mail from: zqw0nc0tvw51@cs.com

Remove box: mainremove@cs.com

Spamvertised web page: http://www.customerblast.com

Other spammer's spamvertised domains:
=====================================
get-toprankings.com, cjlinc.net, sorensonandassociates.com, praclicars.com,
jhthosting.com, advertinvent.net, webberhost.com, ad-specialties.us,
lunchmateforever.com, allanhost.com, gettoprankings.com.


www.customerblast.com [203.197.199.132]
=====================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: CUSTOMERBLAST.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 08-04-2003 09:04:59 PM
Record expires on 02-15-2005
Record created on 02-16-2002

Domain servers in listed order:
        NS1.CUSTOMERBLAST.COM   203.197.199.132
        NS2.CUSTOMERBLAST.COM   203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).
Nameservers: ns.customerblast.com  <== SPAMMERS.


ad-specialties.us [203.197.199.132]
=================
Domain Name:                                 AD-SPECIALTIES.US
Domain ID:                                   D4328615-US
Sponsoring Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Status:                               ok
Registrant ID:                               IMG-432633
Registrant Name:                             Sarah Johnson
Registrant Organization:                     Internet Ads inc
Registrant Address1:                         91 s. winter park dr.
Registrant City:                             casselberry
Registrant State/Province:                   FL
Registrant Postal Code:                      32707
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.4076503437
Registrant Email:                            htransfer@aol.com
Registrant Application Purpose:              P1
Registrant Nexus Category:                   C11
Administrative Contact ID:                   IMG-432633
Administrative Contact Name:                 Sarah Johnson
Administrative Contact Organization:         Internet Ads inc
Administrative Contact Address1:             91 s. winter park dr.
Administrative Contact City:                 casselberry
Administrative Contact State/Province:       FL
Administrative Contact Postal Code:          32707
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.4076503437
Administrative Contact Email:                htransfer@aol.com
Administrative Application Purpose:          P1
Administrative Nexus Category:               C11
Billing Contact ID:                          IMG-432633
Billing Contact Name:                        Sarah Johnson
Billing Contact Organization:                Internet Ads inc
Billing Contact Address1:                    91 s. winter park dr.
Billing Contact City:                        casselberry
Billing Contact State/Province:              FL
Billing Contact Postal Code:                 32707
Billing Contact Country:                     United States
Billing Contact Country Code:                US
Billing Contact Phone Number:                +1.4076503437
Billing Contact Email:                       htransfer@aol.com
Billing Application Purpose:                 P1
Billing Nexus Category:                      C11
Technical Contact ID:                        IMG-432633
Technical Contact Name:                      Sarah Johnson
Technical Contact Organization:              Internet Ads inc
Technical Contact Address1:                  91 s. winter park dr.
Technical Contact City:                      casselberry
Technical Contact State/Province:            FL
Technical Contact Postal Code:               32707
Technical Contact Country:                   United States
Technical Contact Country Code:              US
Technical Contact Phone Number:              +1.4076503437
Technical Contact Email:                     htransfer@aol.com
Technical Application Purpose:               P1
Technical Nexus Category:                    C11
Name Server:                                 NS1.AD-SPECIALTIES.US
Name Server:                                 NS2.AD-SPECIALTIES.US
Created by Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Last Updated by Registrar:                   INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Registration Date:                    Tue Jun 03 22:40:31 GMT 2003
Domain Expiration Date:                      Wed Jun 02 23:59:59 GMT 2004
Domain Last Updated Date:                    Wed Jul 23 18:03:52 GMT 2003

>>>> Whois database was last updated on: Sun Aug 10 16:30:10 GMT 2003 <<<<

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


Note the older registration data, from June 2003:

Domain Name:                                 AD-SPECIALTIES.US
Domain ID:                                   D4328615-US
Sponsoring Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Status:                               ok
Registrant ID:                               IMG-432633
Registrant Name:                             Sarah Johnson
Registrant Organization:                     Internet Ads inc
Registrant Address1:                         5840 Red Bug Lake Rd.
Registrant City:                             Winter Springs
Registrant State/Province:                   FL
Registrant Postal Code:                      32708
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.4076503437
Registrant Facsimile Number:                 +1.4076503437
Registrant Email:                            vacplanners@cs.com
Registrant Application Purpose:              P1
Registrant Nexus Category:                   C11
Administrative Contact ID:                   IMG-432633
Administrative Contact Name:                 Sarah Johnson
Administrative Contact Organization:         Internet Ads inc
Administrative Contact Address1:             5840 Red Bug Lake Rd.
Administrative Contact City:                 Winter Springs
Administrative Contact State/Province:       FL
Administrative Contact Postal Code:          32708
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.4076503437
Administrative Contact Facsimile Number:     +1.4076503437
Administrative Contact Email:                vacplanners@cs.com
Administrative Application Purpose:          P1
Administrative Nexus Category:               C11
Billing Contact ID:                          IMG-432633
Billing Contact Name:                        Sarah Johnson
Billing Contact Organization:                Internet Ads inc
Billing Contact Address1:                    5840 Red Bug Lake Rd.
Billing Contact City:                        Winter Springs
Billing Contact State/Province:              FL
Billing Contact Postal Code:                 32708
Billing Contact Country:                     United States
Billing Contact Country Code:                US
Billing Contact Phone Number:                +1.4076503437
Billing Contact Facsimile Number:            +1.4076503437
Billing Contact Email:                       vacplanners@cs.com
Billing Application Purpose:                 P1
Billing Nexus Category:                      C11
Technical Contact ID:                        IMG-432633
Technical Contact Name:                      Sarah Johnson
Technical Contact Organization:              Internet Ads inc
Technical Contact Address1:                  5840 Red Bug Lake Rd.
Technical Contact City:                      Winter Springs
Technical Contact State/Province:            FL
Technical Contact Postal Code:               32708
Technical Contact Country:                   United States
Technical Contact Country Code:              US
Technical Contact Phone Number:              +1.4076503437
Technical Contact Facsimile Number:          +1.4076503437
Technical Contact Email:                     vacplanners@cs.com
Technical Application Purpose:               P1
Technical Nexus Category:                    C11
Name Server:                                 NS1.ORDER2.COM
Name Server:                                 NS2.ORDER2.COM
Created by Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Last Updated by Registrar:                   INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Registration Date:                    Tue Jun 03 22:40:31 GMT 2003
Domain Expiration Date:                      Wed Jun 02 23:59:59 GMT 2004
Domain Last Updated Date:                    Tue Jun 03 22:46:58 GMT 2003

>>>> Whois database was last updated on: Mon Jun 30 23:15:09 GMT 2003 <<<<



www.gettoprankings.com [203.197.199.132]
======================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: GETTOPRANKINGS.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 05-14-2003 10:57:12 AM
Record expires on 04-17-2004
Record created on 04-17-2003

Domain servers in listed order:
        NS1.GETTOPRANKINGS.COM  203.197.199.132
        NS2.GETTOPRANKINGS.COM  203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


Note the older registration data, from June 2003:

Registrant:
 Internet Ads inc
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437
Fax:407-650-3437

Domain Name: GETTOPRANKINGS.COM

Administrative Contact:
 Johnson, Sarah vacplanners@cs.com
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437
Fax:407-650-3437

Technical Contact:
 Johnson, Sarah vacplanners@cs.com
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437
Fax:407-650-3437

Record last updated 05-14-2003 10:57:12 AM
Record expires on 04-17-2004
Record created on 04-17-2003

Domain servers in listed order:
        NS1.GETTOPRANKINGS.COM  204.188.77.127
        NS2.GETTOPRANKINGS.COM  204.188.77.127


www.get-toprankings.com [204.251.10.47]  (dn-desktop.directnic.com)
=======================
Registrant:
 Sales Pro ltd.
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: GET-TOPRANKINGS.COM

Administrative Contact:
 King, Laurence htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 King, Laurence htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 07-10-2003 06:41:54 AM
Record expires on 05-07-2004
Record created on 05-07-2003

Domain servers in listed order:
        NS0.DIRECTNIC.COM       204.251.10.100
        NS1.DIRECTNIC.COM       206.251.177.2

Intercosmos Media Group IP block [204.251.10.0 - 204.251.13.255].
Upstream: UUNET (i55-gw.customer.alter.net).
Nameservers: directnic.com.


Note the older registration data, from June 2003:

Registrant:
 Sales Pro ltd.
 3618 roland ave.
 hartford, CT 13121
 US
 303-846-8611

Domain Name: GET-TOPRANKINGS.COM

Administrative Contact:
 King, Laurence king248@aol.com
 3618 roland ave.
 hartford, CT 13121
 US
 303-846-8611

Technical Contact:
 King, Laurence king248@aol.com
 3618 roland ave.
 hartford, CT 13121
 US
 303-846-8611

Record last updated 05-14-2003 09:59:31 AM
Record expires on 05-07-2004
Record created on 05-07-2003

Domain servers in listed order:
        DNS1.ATFREEWEB.NET      4.22.121.2
        DNS2.ATFREEWEB.NET      4.22.121.3



www.advertinvent.net [no IP]
====================
Registrant:
 Advertiisng International
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Domain Name: ADVERTINVENT.NET

Administrative Contact:
 Hites, John johit2@aol.com
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Technical Contact:
 Hites, John johit2@aol.com
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Record last updated 08-09-2003 09:00:48 AM
Record expires on 04-24-2004
Record created on 04-24-2003

Domain servers in listed order:
        NS0.DIRECTNIC.COM       204.251.10.100
        NS1.DIRECTNIC.COM       206.251.177.2


Note the older registration data, from June 2003:

Registrant:
 Advertiisng International
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437

Domain Name: ADVERTINVENT.NET

Administrative Contact:
 Hites, John johit2@aol.com
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437

Technical Contact:
 Hites, John johit2@aol.com
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437

Record last updated 05-27-2003 08:59:53 PM
Record expires on 04-24-2004
Record created on 04-24-2003

Domain servers in listed order:
        DNS1.AUPHOST.COM        4.22.121.2
        DNS2.AUPHOST.COM        4.22.121.3


www.lunchmateforever.com [203.197.199.132]
========================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: LUNCHMATEFOREVER.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 08-07-2003 03:55:27 PM
Record expires on 04-16-2004
Record created on 04-16-2003

Domain servers in listed order:
        NS1.LUNCHMATEFOREVER.COM        203.197.199.132
        NS2.LUNCHMATEFOREVER.COM        203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


Note the older registration data, from June 2003:

Registrant:
 Internet Ads inc
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437
Fax:407-650-3437

Domain Name: LUNCHMATEFOREVER.COM

Administrative Contact:
 Johnson, Sarah vacplanners@cs.com
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437
Fax:407-650-3437

Technical Contact:
 Johnson, Sarah vacplanners@cs.com
 5840 Red Bug Lake Rd.
 Winter Springs, FL 32708
 US
 407-650-3437
Fax:407-650-3437

Record last updated 05-21-2003 12:25:11 PM
Record expires on 04-16-2004
Record created on 04-16-2003

Domain servers in listed order:
        DNS1.ATFREEWEB.NET      4.22.121.2
        DNS2.ATFREEWEB.NET      4.22.121.3



----------  Forwarded Message  ----------

Received: from 217.22.112.174 (user44.net042.fl.sprint-hsd.net [207.30.21.44])
	by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id h7AFS2kQ029723
	for <abuse@###>; Sun, 10 Aug 2003 18:28:05 +0300
Received: from  (HELO i2k) [66.227.82.115] by 217.22.112.174 id 
<5703241-56278> for <abuse@###>; Sun, 10 Aug 2003 18:19:07 +0200
Message-ID: <mdhg-2w6-c$-z8u2q8wzo2m0@jmvh61>
From: "Delmar Webber" <zqw0nc0tvw51@cs.com>
To: abuse@###
Subject: Italian - crafted Rolex - only $65 - $140 Free Shipping!
Date: Sun, 10 Aug 03 18:19:07 GMT
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
  boundary="0_.F6553__EDC5DC63"
X-Priority: 3
X-MSMail-Priority: Normal
X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.21.0.0; VDF 6.21.0.7
Status: R 
X-Status: N
X-KMail-EncryptionState:  
X-KMail-SignatureState:  

</p>
Hi,
<p>We offer a wide variety of effective advertising types. Please follow a
 link below for details. Guaranteed effective and best prices on the
 internet! Also come see the best customer service and Live Help solution on
 the internet.</p> <p><a href="http://www.customerblast.com">Email
 Lists</a></p>
<p><a href="http://www.customerblast.com">Email Advertising</a></p>
<p><a href="http://www.customerblast.com">Bullet Proof Hosting</a></p>
<p><a href="http://www.customerblast.com">Banner Clicks</a></p>
<p><a href="http://www.customerblast.com">Banner Displays</a></p>
<p><a href="http://www.customerblast.com">Traffic Slam</a></p>
<p><a href="http://www.customerblast.com">Unique Visitors</a></p>
<br>Thanks.</br>
<a href="http://www.customerblast.com">http://www.customerblast.com</a>
<p>-----------------------------------------------------------------------</p
> <p>We respect you privacy. Please click the link below to be removed.</p>
 <p>
<a href="mailto:mainremove@cs.com">I do not wish to receive
further promotions</a></p>
<p>&nbsp;</p>
</p>
</p>

-------------------------------------------------------



=== My 2nd complaint, the spammer is on the same IP ===
From: Admin <abuse@2003.dolphinwave.org>
Reply-To: abuse@2003.dolphinwave.org
Organization: Private person
Subject: [email] Long-time spammer (WHOIS harvest: customerblast.com/SwissQualityWatch.com/Steve Sorenson)! [Fwd: Italian - Crafted Rolex only $65 - $140 Free Shipping! ### #### #####]
Date: Mon, 11 Aug 2003 09:16:11 +0300
User-Agent: KMail/1.5
X-KMail-Link-Message: 1708690
X-KMail-Link-Type: forward
To: <abuse@2003.dolphinwave.org>,
 uce@ftc.gov,
 nanas-sub@cybernothing.org,
 abuse@utelfla.com,
 abuse@sprint.net,
 support@sprint-hsd.net,
 abuse@sprintnetops.net,
 abuse@aol.com,
 abuse@cs.com,
 postmaster@vsnl.net.in,
 abuse@vsnl.com,
 ip-admin@giasbm01.vsnl.net.in,
 abuse@intercosmos.com,
 hostmaster@intercosmos.com,
 abuse@directnic.com,
 hostmaster@directnic.com,
 abuse@uu.net,
 postmaster@hitmatic.com,
 dns@hitmatic.com,
 legal@rolex.com,
 postmaster@rolex.com
X-Complaints-To: abuse@dolphinwave.org (live person)
X-PGP-key: 0xAAE2A579
X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133  FA87 000B 0FB6 AAE2 A579
X-No-Confirm: Yes
MIME-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200308110916.11841@2003.dolphinwave.org>
Status: RO
X-Status: S
X-KMail-EncryptionState:  
X-KMail-SignatureState:  

This is the long-time persistent spammer, Steve Sorenson, who spams my e-mail
addresses since January! He was already kicked off by at least these ISPs:
AT&T, HOSTNOC.net, HopOne, ThePlanet.com, CUBEXS, C&W and Genuity/Verizon.
The spamming history of this abuser is archived:
http://www.DolphinWave.org/spam/Sorenson.txt

The abuser STILL uses the Sprint-HSD access in Florida, despite on multiple
previous complaints!

ATTN: Rolex!
Probably, counterfeit/unauthorized distribution of your products.
Please, investigate.

Please, terminate the spammers' accounts as soon as possible!
Thanks!
=======


Spammer: user253.net040.fl.sprint-hsd.net [207.30.118.253]
Sprint DSL Network FL IP block [207.30.118.0 - 207.30.118.255]
 which is in the Sprint-United Telephone of Florida IP range [207.30.0.0/16].

Mail from: 7u4jgnvx@cs.com

Collects replies to: Questions@SwissQualityWatch.com

Remove box: stellarremove@cs.com

Spamvertised web page: http://www.swissqualitywatch.com

Used service: http://tracker.hitmatic.com/24582/?page=MainPage&mp=1


Other spammer's spamvertised domains:
=====================================
get-toprankings.com, cjlinc.net, sorensonandassociates.com, praclicars.com,
jhthosting.com, advertinvent.net, webberhost.com, ad-specialties.us,
lunchmateforever.com, allanhost.com, gettoprankings.com, customerblast.com.


www.swissqualitywatch.com [203.197.199.132]
=========================
Registrant:
 Trade Secrets
 No. 48A  Zhihua West Road
 ZheJiang, ZheJiang 10001
 CN
 86-579-283-1925

Domain Name: SWISSQUALITYWATCH.COM

Administrative Contact:
 Li Yen, Wang wang_Liyenchina@Yahoo.com
 No. 48A  Zhihua West Road
 ZheJiang, ZheJiang 10001
 CN
 86-579-283-1925

Technical Contact:
 Li Yen, Wang wang_Liyenchina@Yahoo.com
 No. 48A  Zhihua West Road
 ZheJiang, ZheJiang 10001
 CN
 86-579-283-1925

Record last updated 08-04-2003 08:51:05 PM
Record expires on 04-28-2004
Record created on 04-28-2003

Domain servers in listed order:
        NS1.SWISSQUALITYWATCH.COM       203.197.199.132
        NS2.SWISSQUALITYWATCH.COM       203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).ns.swissqualitywatch.com 
<== SPAMMERS!


www.customerblast.com [203.197.199.132]
=====================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: CUSTOMERBLAST.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 08-04-2003 09:04:59 PM
Record expires on 02-15-2005
Record created on 02-16-2002

Domain servers in listed order:
        NS1.CUSTOMERBLAST.COM   203.197.199.132
        NS2.CUSTOMERBLAST.COM   203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).
Nameservers: ns.customerblast.com  <== SPAMMERS.


ad-specialties.us [203.197.199.132]
=================
Domain Name:                                 AD-SPECIALTIES.US
Domain ID:                                   D4328615-US
Sponsoring Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Status:                               ok
Registrant ID:                               IMG-432633
Registrant Name:                             Sarah Johnson
Registrant Organization:                     Internet Ads inc
Registrant Address1:                         91 s. winter park dr.
Registrant City:                             casselberry
Registrant State/Province:                   FL
Registrant Postal Code:                      32707
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.4076503437
Registrant Email:                            htransfer@aol.com
Registrant Application Purpose:              P1
Registrant Nexus Category:                   C11
Administrative Contact ID:                   IMG-432633
Administrative Contact Name:                 Sarah Johnson
Administrative Contact Organization:         Internet Ads inc
Administrative Contact Address1:             91 s. winter park dr.
Administrative Contact City:                 casselberry
Administrative Contact State/Province:       FL
Administrative Contact Postal Code:          32707
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.4076503437
Administrative Contact Email:                htransfer@aol.com
Administrative Application Purpose:          P1
Administrative Nexus Category:               C11
Billing Contact ID:                          IMG-432633
Billing Contact Name:                        Sarah Johnson
Billing Contact Organization:                Internet Ads inc
Billing Contact Address1:                    91 s. winter park dr.
Billing Contact City:                        casselberry
Billing Contact State/Province:              FL
Billing Contact Postal Code:                 32707
Billing Contact Country:                     United States
Billing Contact Country Code:                US
Billing Contact Phone Number:                +1.4076503437
Billing Contact Email:                       htransfer@aol.com
Billing Application Purpose:                 P1
Billing Nexus Category:                      C11
Technical Contact ID:                        IMG-432633
Technical Contact Name:                      Sarah Johnson
Technical Contact Organization:              Internet Ads inc
Technical Contact Address1:                  91 s. winter park dr.
Technical Contact City:                      casselberry
Technical Contact State/Province:            FL
Technical Contact Postal Code:               32707
Technical Contact Country:                   United States
Technical Contact Country Code:              US
Technical Contact Phone Number:              +1.4076503437
Technical Contact Email:                     htransfer@aol.com
Technical Application Purpose:               P1
Technical Nexus Category:                    C11
Name Server:                                 NS1.AD-SPECIALTIES.US
Name Server:                                 NS2.AD-SPECIALTIES.US
Created by Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Last Updated by Registrar:                   INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Registration Date:                    Tue Jun 03 22:40:31 GMT 2003
Domain Expiration Date:                      Wed Jun 02 23:59:59 GMT 2004
Domain Last Updated Date:                    Wed Jul 23 18:03:52 GMT 2003

>>>> Whois database was last updated on: Sun Aug 10 16:30:10 GMT 2003 <<<<

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


www.gettoprankings.com [203.197.199.132]
======================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: GETTOPRANKINGS.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 05-14-2003 10:57:12 AM
Record expires on 04-17-2004
Record created on 04-17-2003

Domain servers in listed order:
        NS1.GETTOPRANKINGS.COM  203.197.199.132
        NS2.GETTOPRANKINGS.COM  203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


www.get-toprankings.com [204.251.10.47]  (dn-desktop.directnic.com)
=======================
Registrant:
 Sales Pro ltd.
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: GET-TOPRANKINGS.COM

Administrative Contact:
 King, Laurence htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 King, Laurence htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 07-10-2003 06:41:54 AM
Record expires on 05-07-2004
Record created on 05-07-2003

Domain servers in listed order:
        NS0.DIRECTNIC.COM       204.251.10.100
        NS1.DIRECTNIC.COM       206.251.177.2

Intercosmos Media Group IP block [204.251.10.0 - 204.251.13.255].
Upstream: UUNET (i55-gw.customer.alter.net).
Nameservers: directnic.com.


www.advertinvent.net [no IP]
====================
Registrant:
 Advertiisng International
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Domain Name: ADVERTINVENT.NET

Administrative Contact:
 Hites, John johit2@aol.com
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Technical Contact:
 Hites, John johit2@aol.com
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Record last updated 08-09-2003 09:00:48 AM
Record expires on 04-24-2004
Record created on 04-24-2003

Domain servers in listed order:
        NS0.DIRECTNIC.COM       204.251.10.100
        NS1.DIRECTNIC.COM       206.251.177.2


www.lunchmateforever.com [203.197.199.132]
========================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: LUNCHMATEFOREVER.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 08-07-2003 03:55:27 PM
Record expires on 04-16-2004
Record created on 04-16-2003

Domain servers in listed order:
        NS1.LUNCHMATEFOREVER.COM        203.197.199.132
        NS2.LUNCHMATEFOREVER.COM        203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


----------  Forwarded Message  ----------

Received: from 217.22.112.143 (user253.net040.fl.sprint-hsd.net 
[207.30.118.253])
	by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id h7B10BNm020950
	for <abuse@###>; Mon, 11 Aug 2003 04:00:16 +0300
Received: from shb.k0jajs.org [234.85.6.29] by 217.22.112.143 id 
<4916971-80597>; Sat, 21 Dec 2002 23:56:25 -0200
Message-ID: <7wk82bye-d37e--7x9w5-$094$$8@04c.r4ta.w4>
From: "Roberta Chang" <7u4jgnvx@cs.com>
To: abuse@###
Subject: Italian - Crafted Rolex only $65 - $140 Free Shipping! ### #### #####
Date: Sat, 21 Dec 02 23:56:25 GMT
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
MIME-Version: 1.0
Content-Type: multipart/alternative;
  boundary="_C_BDD79C_D3D.1BFA1"
X-Priority: 3
X-MSMail-Priority: Normal
X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.21.0.0; VDF 6.21.0.7
Status: R 
X-Status: N
X-KMail-EncryptionState:  
X-KMail-SignatureState:  

<p class="MsoNormal"><i><span style="font-size: 10.0pt; font-family: Arial">
Please note to send ALL REPLY e-mail direct to our sales representative at:
<a href="mailto:Questions@SwissQualityWatch.com" style="color: blue;
 text-decoration: underline; text-underline: single">
 Questions@SwissQualityWatch.com</a> &nbsp;</span></i></p>
<p class="MsoNormal">Hi,</p>
<p class="MsoNormal">Thank you for expressing interest in ATGWS watches.</p>
<p class="MsoNormal">We would like to take this opportunity to offer you our
fine selection of Italian crafted Rolex Timepieces.</p>
<p class="MsoNormal">You can view our large selection of Rolexes (including
Breitling, Tag Heuer, Cartier etc) at:</p>
<p class="MsoNormal">
<a href="http://www.swissqualitywatch.com/" style="color: blue;
 text-decoration: underline; text-underline: single">
 www.SwissQualityWatch.com</a></p>
<p class="MsoNormal">For all orders placed in the month of August, <b>all
 shipping and handling charges will be free</b>.</p>
<p class="MsoNormal">As we are the direct manufacturers, you are guaranteed
 of lowest prices and highest quality each and every time you purchase from
 us</p> <p class="MsoNormal">You may also be interested to know that we have
 the following brands available in our wide selection as well: </p>
<p class="MsoNormal">1. Leather band Rolex Daytona (Ladies and Men's) </p>
<p class="MsoNormal">2. Blancpain</p>
<p class="MsoNormal">3. Fortis</p>
<p class="MsoNormal">4. Jaeger LeCoutre</p>
<p class="MsoNormal">5. Longines</p>
<p class="MsoNormal">6. Mont Blanc</p>
<p class="MsoNormal">7. Movado</p>
<p class="MsoNormal">8. Oris</p>
<p class="MsoNormal">9. Roger Dubuis</p>
<p class="MsoNormal">10. Ulysse</p>
<p class="MsoNormal">11. Zenith</p>
<p class="MsoNormal">12. Audemar Piguet</p>
<p class="MsoNormal">13. Breitling</p>
<p class="MsoNormal">14. Bvglari</p>
<p class="MsoNormal">15. Cartier</p>
<p class="MsoNormal">16. Corum</p>
<p class="MsoNormal">17. Dunhill</p>
<p class="MsoNormal">18. Franck Muller</p>
<p class="MsoNormal">19. Gerard Perregaux</p>
<p class="MsoNormal">20. IWC</p>
<p class="MsoNormal">21. IWC</p>
<p class="MsoNormal">22. Panerai</p>
<p class="MsoNormal">23. Patek Philippe</p>
<p class="MsoNormal">24. Tag Heuer</p>
<p class="MsoNormal">25. Vacheron Constantin</p>
<p class="MsoNormal">If you see anything that might interest you, or if you
 have any questions, please don't hesitate to visit our website at:<br>
<![if !supportLineBreakNewLine]><br>
<![endif]>
<a href="http://www.swissqualitywatch.com/" style="color: blue;
 text-decoration: underline; text-underline: single">
 www.SwissQualityWatch.com</a></p>
<p class="MsoNormal">I certainly look forward to hearing from you.<br>
<br>
Best regards,<br>
<br>
Cal</p>
<p class="MsoNormal">Division Sales Manager<br>
ATGWS&nbsp;</p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:Arial">You
received this email because your have previous purchased from, or inquired
 about our product line under ATGWS. If you do not want to receive further
 mailings from ATGWS, unsubscribe by sending an email with the title heading:
 DELETE in the subject line to
<a href="mailto:stellarremove@cs.com" style="color: blue; text-decoration:
 underline; text-underline: single"> stellarremove@cs.com</a>&nbsp;&nbsp;
 </span>&nbsp;</p>
<p class="MsoNormal"><i><span style="font-size: 10.0pt; font-family: Arial">
Please note to send ALL REPLY e-mail direct to our sales representative at:
<a href="mailto:Questions@SwissQualityWatch.com" style="color: blue;
 text-decoration: underline; text-underline: single">
 Questions@SwissQualityWatch.com</a></span></i></p>jyoemmz

-------------------------------------------------------



=== And the same spammer again, still on VSNL. My 3rd complaint ===
From: Admin <abuse@2003.dolphinwave.org>
Reply-To: abuse@2003.dolphinwave.org
Organization: Private person
Subject: [email] Long-time spammer (WHOIS harvest: theseephone.com/dogwoodonline.com/Steve Sorenson)[Fwd: Clients See You By Typing YourPhoneNumber.com]
Date: Thu, 14 Aug 2003 21:29:09 +0300
User-Agent: KMail/1.5
X-KMail-Link-Message: 1708970
X-KMail-Link-Type: forward
To: <abuse@2003.dolphinwave.org>,
 uce@ftc.gov,
 nanas-sub@cybernothing.org,
 abuse@utelfla.com,
 abuse@sprint.net,
 support@sprint-hsd.net,
 abuse@sprintnetops.net,
 abuse@aol.com,
 abuse@cs.com,
 postmaster@vsnl.net.in,
 abuse@vsnl.com,
 ip-admin@giasbm01.vsnl.net.in,
 gpsingh@GIASBM01.VSNL.NET.IN,
 abuse@intercosmos.com,
 hostmaster@intercosmos.com,
 abuse@directnic.com,
 hostmaster@directnic.com,
 abuse@uu.net,
 postmaster@hitmatic.com,
 dns@hitmatic.com,
 dogwoodfinancial@telus.net
X-Complaints-To: abuse@dolphinwave.org (live person)
X-PGP-key: 0xAAE2A579
X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133  FA87 000B 0FB6 AAE2 A579
X-No-Confirm: Yes
MIME-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200308142129.10269@2003.dolphinwave.org>
Status: RO
X-Status: S
X-KMail-EncryptionState:  
X-KMail-SignatureState:  

This is the long-time persistent spammer, Steve Sorenson, who spams my e-mail
addresses since January! He was already kicked off by at least these ISPs:
AT&T, HOSTNOC.net, HopOne, ThePlanet.com, CUBEXS, C&W and Genuity/Verizon.
The spamming history of this abuser is archived:
http://www.DolphinWave.org/spam/Sorenson.txt

Please, terminate the spammers' accounts as soon as possible!
Thanks!
=======

Refusing to deal with your abusers will lead your whole IP range to be
blocked from accessing of my mailservers ever again, and this info will
be shared with other admins and public blocklists!

ATTN: Sprint!  The abuser STILL uses the Sprint-HSD access in Florida, despite
on my multiple previous complaints! I will firewall your whole 207.30.0.0/16
IP range cause it is obvious that you do not wish to deal with your abusers on
your end.


Spammer: user48.net042.fl.sprint-hsd.net [207.30.21.48]
Sprint DSL Network FL IP block [207.30.21.0 - 207.30.21.255]
 which is in the Sprint-United Telephone of Florida IP range [207.30.0.0/16].

Mail from: zc1huqty5@cs.com

Collects replies to: info@theseephone.com

Remove box: takeoffline@cs.com

Spamvertised web page: http://www.theseephone.com

Other spammer's spamvertised domains:
=====================================
get-toprankings.com, cjlinc.net, sorensonandassociates.com, praclicars.com,
jhthosting.com, advertinvent.net, webberhost.com, ad-specialties.us,
lunchmateforever.com, allanhost.com, gettoprankings.com, customerblast.com,
swissqualitywatch.com.

Pulls the images from: http://www.dogwoodonline.com

Used services of:
http://tracker.hitmatic.com/24630/?page=MainPage&mp=1


www.theseephone.com [203.197.199.132]
===================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: THESEEPHONE.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 08-04-2003 11:21:03 AM
Record expires on 06-16-2004
Record created on 06-16-2003

Domain servers in listed order:
        NS1.THESEEPHONE.COM     203.197.199.132
        NS2.THESEEPHONE.COM     203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).
Nameservers: ns.theseephone.com <== SPAMMERS.


www.swissqualitywatch.com [no IP]
=========================
Registrant:
 Trade Secrets
 No. 48A  Zhihua West Road
 ZheJiang, ZheJiang 10001
 CN
 86-579-283-1925

Domain Name: SWISSQUALITYWATCH.COM

Administrative Contact:
 Li Yen, Wang wang_Liyenchina@Yahoo.com
 No. 48A  Zhihua West Road
 ZheJiang, ZheJiang 10001
 CN
 86-579-283-1925

Technical Contact:
 Li Yen, Wang wang_Liyenchina@Yahoo.com
 No. 48A  Zhihua West Road
 ZheJiang, ZheJiang 10001
 CN
 86-579-283-1925

Record last updated 08-04-2003 08:51:05 PM
Record expires on 04-28-2004
Record created on 04-28-2003

Domain servers in listed order:
        NS1.SWISSQUALITYWATCH.COM       203.197.199.132
        NS2.SWISSQUALITYWATCH.COM       203.197.199.132


www.customerblast.com [203.197.199.132]
=====================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: CUSTOMERBLAST.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 08-04-2003 09:04:59 PM
Record expires on 02-15-2005
Record created on 02-16-2002

Domain servers in listed order:
        NS1.CUSTOMERBLAST.COM   203.197.199.132
        NS2.CUSTOMERBLAST.COM   203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).
Nameservers: ns.customerblast.com  <== SPAMMERS.


ad-specialties.us [203.197.199.132]
=================
Domain Name:                                 AD-SPECIALTIES.US
Domain ID:                                   D4328615-US
Sponsoring Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Status:                               ok
Registrant ID:                               IMG-432633
Registrant Name:                             Sarah Johnson
Registrant Organization:                     Internet Ads inc
Registrant Address1:                         91 s. winter park dr.
Registrant City:                             casselberry
Registrant State/Province:                   FL
Registrant Postal Code:                      32707
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.4076503437
Registrant Email:                            htransfer@aol.com
Registrant Application Purpose:              P1
Registrant Nexus Category:                   C11
Administrative Contact ID:                   IMG-432633
Administrative Contact Name:                 Sarah Johnson
Administrative Contact Organization:         Internet Ads inc
Administrative Contact Address1:             91 s. winter park dr.
Administrative Contact City:                 casselberry
Administrative Contact State/Province:       FL
Administrative Contact Postal Code:          32707
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.4076503437
Administrative Contact Email:                htransfer@aol.com
Administrative Application Purpose:          P1
Administrative Nexus Category:               C11
Billing Contact ID:                          IMG-432633
Billing Contact Name:                        Sarah Johnson
Billing Contact Organization:                Internet Ads inc
Billing Contact Address1:                    91 s. winter park dr.
Billing Contact City:                        casselberry
Billing Contact State/Province:              FL
Billing Contact Postal Code:                 32707
Billing Contact Country:                     United States
Billing Contact Country Code:                US
Billing Contact Phone Number:                +1.4076503437
Billing Contact Email:                       htransfer@aol.com
Billing Application Purpose:                 P1
Billing Nexus Category:                      C11
Technical Contact ID:                        IMG-432633
Technical Contact Name:                      Sarah Johnson
Technical Contact Organization:              Internet Ads inc
Technical Contact Address1:                  91 s. winter park dr.
Technical Contact City:                      casselberry
Technical Contact State/Province:            FL
Technical Contact Postal Code:               32707
Technical Contact Country:                   United States
Technical Contact Country Code:              US
Technical Contact Phone Number:              +1.4076503437
Technical Contact Email:                     htransfer@aol.com
Technical Application Purpose:               P1
Technical Nexus Category:                    C11
Name Server:                                 NS1.AD-SPECIALTIES.US
Name Server:                                 NS2.AD-SPECIALTIES.US
Created by Registrar:                        INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Last Updated by Registrar:                   INTERCOSMOS MEDIA GROUP, INC. 
D.B.A. DIRECTNIC.COM
Domain Registration Date:                    Tue Jun 03 22:40:31 GMT 2003
Domain Expiration Date:                      Wed Jun 02 23:59:59 GMT 2004
Domain Last Updated Date:                    Wed Jul 23 18:03:52 GMT 2003

>>>> Whois database was last updated on: Sun Aug 10 16:30:10 GMT 2003 <<<<

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


www.gettoprankings.com [203.197.199.132]
======================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: GETTOPRANKINGS.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 05-14-2003 10:57:12 AM
Record expires on 04-17-2004
Record created on 04-17-2003

Domain servers in listed order:
        NS1.GETTOPRANKINGS.COM  203.197.199.132
        NS2.GETTOPRANKINGS.COM  203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


www.get-toprankings.com [204.251.10.199] (dn-parked.directnic.com)
=======================
Registrant:
 Sales Pro ltd.
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: GET-TOPRANKINGS.COM

Administrative Contact:
 King, Laurence htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 King, Laurence htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 07-10-2003 06:41:54 AM
Record expires on 05-07-2004
Record created on 05-07-2003

Domain servers in listed order:
        NS0.DIRECTNIC.COM       204.251.10.100
        NS1.DIRECTNIC.COM       206.251.177.2

Intercosmos Media Group IP block [204.251.10.0 - 204.251.13.255].
Upstream: UUNET (i55-gw.customer.alter.net).
Nameservers: directnic.com.


www.advertinvent.net [no IP]
====================
Registrant:
 Advertiisng International
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Domain Name: ADVERTINVENT.NET

Administrative Contact:
 Hites, John johit2@aol.com
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Technical Contact:
 Hites, John johit2@aol.com
 91 S. Winter Park Dr.
 Casselberry, FL 32707
 US
 407-461-0350

Record last updated 08-09-2003 09:00:48 AM
Record expires on 04-24-2004
Record created on 04-24-2003

Domain servers in listed order:
        NS0.DIRECTNIC.COM       204.251.10.100
        NS1.DIRECTNIC.COM       206.251.177.2


www.lunchmateforever.com [203.197.199.132]
========================
Registrant:
 Internet Ads inc
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Domain Name: LUNCHMATEFOREVER.COM

Administrative Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Technical Contact:
 Johnson, Sarah htransfer@aol.com
 91 s. winter park dr.
 casselberry, FL 32707
 US
 407-650-3437

Record last updated 08-07-2003 03:55:27 PM
Record expires on 04-16-2004
Record created on 04-16-2003

Domain servers in listed order:
        NS1.LUNCHMATEFOREVER.COM        203.197.199.132
        NS2.LUNCHMATEFOREVER.COM        203.197.199.132

VSNL-IN IP block [203.197.0.0 - 203.197.255.255].
Upstream: VSNL-IN (vsb-lvsb-stm1.Bbone.vsnl.net.in).


----------  Forwarded Message  ----------

Received: from 217.22.112.133 (user48.net042.fl.sprint-hsd.net [207.30.21.48])
	by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id h7EHpCns032376
	for <abuse@###>; Thu, 14 Aug 2003 20:51:14 +0300
Received: from 4as.v3wt.net ([164.120.180.202])
	by 217.22.112.133 id 7x9f823xVCem
	for <abuse@###>; Wed, 25 Dec 2002 11:48:45 -0700
Message-ID: <kljn8t0h9i$f$993r6g4-dg8$-$u6$2@msmgbd>
From: "Bobby Oleary" <zc1huqty5@cs.com>
To: abuse@###
Subject: Clients See You By Typing YourPhoneNumber.com
Date: Wed, 25 Dec 02 11:48:45 GMT
X-Mailer: eGroups Message Poster
MIME-Version: 1.0
Content-Type: multipart/alternative;
  boundary="..55BADEC2.0.D1_"
X-Priority: 3
X-MSMail-Priority: Normal
X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.21.0.0; VDF 6.21.0.13
Status: R 
X-Status: N
X-KMail-EncryptionState:  
X-KMail-SignatureState:  

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<HTML><HEAD><TITLE>Consumer Drive</TITLE>
<META content="Consumer Drive" name=Description>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
	<style>
super {
	 MARGIN: 1px; FONT-family: Verdana, Arial, Helvetica; FONT-SIZE: 10px;
 COLOR: #ffffff; BACKGROUND-COLOR: #214973 }
super1 {
	BORDER-RIGHT: #5c5c5c 1px solid;  MARGIN: 1px; FONT-family: Verdana, Arial,
 Helvetica; FONT: bold; FONT-SIZE: 10px;  COLOR: #444444; BACKGROUND-COLOR:
 #ffffff }
		</style>


<SCRIPT src="http://www.theseephone.com/js/sitescripts.js"
type=text/javascript></SCRIPT>

<SCRIPT type=text/javascript>
<!--
<!--


if (isMac) {
            if (NS4) {
                document.write("<link
 href=http://www.theseephone.com/css/ns4mac_style.css rel=stylesheet>"); }
            else {
                document.write("<link
 href=http://www.theseephone.com/css/mac_style.css rel=stylesheet>"); }
        }
        if (isWin) {
            if (NS4) {
                document.write("<link
 href=http://www.theseephone.com/css/ns4win_style.css rel=stylesheet>"); }
            else {
                document.write("<link
 href=http://www.theseephone.com/css/win_style.css rel=stylesheet>"); }
        }

function MM_openBrWindow(theURL,winName,features) { //v2.0
  window.open(theURL,winName,features);
}
//-->
</SCRIPT>
<META content="MSHTML 6.00.2800.1141" name=GENERATOR></HEAD>
<BODY background="http://www.theseephone.com/images/bg.gif"
LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0 >

<TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>

  <TR>

    <td width=100% height=90align=left
 background=http://www.theseephone.com/images/background.gif> <a
 href="http://www.theseephone.com"><img
 src="http://www.theseephone.com/images/title1.jpg" width="219" height="61"
 border="0" align="top"></a><br> <br>
    </TD>
  </TR></TABLE>





<a href="http://www.theseephone.com"><img
 src="http://www.theseephone.com/images_4/index.jpg" width="760" height="172"
 border="0"></a> <TABLE WIDTH=760 BORDER=0 CELLPADDING=0 CELLSPACING=0>
  <TR>
    <TD COLSPAN=11>&nbsp; </TD>
  </TR>
  <TR>
    <TD>&nbsp; </TD>
    <TD height="41" COLSPAN=9 class=standard1><p align="center">
 <strong><font color="#990033" size="4">Present your products one-on-one to
 clients when they type in your YourPhoneNumber.com</font></strong></p>
 <p><br>
        <strong>This is like having your clients call you on your regular
 phone</strong>, only now they can see you present and demonstrate your
 products live online. All your clients and prospects have to do is input
 <strong>&quot;YourPhoneNumber.com&quot;</strong> to speak with you or your
 customer representative.<br>
        <br>
        <font color="#990033" size="3"><strong>What if your not available to
 answer the call?</strong></font><strong><br>
        </strong><br>
        We have built the Automated Online Receptionist to do the job of a
 real receptionist, it will answer calls and introduce you. You can record an
 audio/video message informing people when you are away for lunch or away for
 the day, and this receptionist will take text or voice messages in your
 absence.<br>
        <br>
        <font color="#990033"><font size="3"><strong>A solution powerful
 enough for the big corporations but priced for
 you.</strong></font></font><br> <br>
        Whether your clients are across the street or across the continent,
 they can call you online as easily as making a regular phone call (except
 there are no long distance charges), while you present and illustrate
 difficult concepts, or your products to them, just as if they&#8217;re in
 your office, sitting across your desk -- no matter where you are.<br>
        <font color="#990033"><br>
        </font><br>
        <br>
        <font color="#990033" size="4"><br>
        </font><font size="4">For a free demonstration of the
 See-Phone</font> <a href="http://www.theseephone.com"><font
 color="#990000"><strong>Click Here</strong></font></a><br>
      </p>
      <p><br>
      </p>
      <p align="right"><a href="http://www.theseephone.com"><img
src="http://www.theseephone.com/email/learn.gif" width="119" height="25"
 border="0"></a></p></TD> <TD>&nbsp; </TD>
  </TR>
  <TR>
    <TD COLSPAN=9 class=standard1> <br> </TD>
    <TD>&nbsp; </TD>
    <TD>&nbsp; </TD>
  </TR>
  <TR>
    <TD> <IMG SRC="http://www.theseephone.com/images_5/spacer.gif" WIDTH=30
 HEIGHT=1 ALT=""></TD> <TD> <IMG
 SRC="http://www.theseephone.com/images_5/spacer.gif" WIDTH=8 HEIGHT=1
 ALT=""></TD> <TD> <IMG SRC="http://www.theseephone.com/images_5/spacer.gif"
 WIDTH=59 HEIGHT=1 ALT=""></TD> <TD> <IMG
 SRC="http://www.theseephone.com/images_5/spacer.gif" WIDTH=113 HEIGHT=1
 ALT=""></TD> <TD> <IMG SRC="http://www.theseephone.com/images_5/spacer.gif"
 WIDTH=60 HEIGHT=1 ALT=""></TD> <TD> <IMG
 SRC="http://www.theseephone.com/images_5/spacer.gif" WIDTH=52 HEIGHT=1
 ALT=""></TD> <TD> <IMG SRC="http://www.theseephone.com/images_5/spacer.gif"
 WIDTH=121 HEIGHT=1 ALT=""></TD> <TD> <IMG
 SRC="http://www.theseephone.com/images_5/spacer.gif" WIDTH=54 HEIGHT=1
 ALT=""></TD> <TD> <IMG SRC="http://www.theseephone.com/images_5/spacer.gif"
 WIDTH=60 HEIGHT=1 ALT=""></TD> <TD> <IMG
 SRC="http://www.theseephone.com/images_5/spacer.gif" WIDTH=122 HEIGHT=1
 ALT=""></TD> <TD> <IMG SRC="http://www.theseephone.com/images_5/spacer.gif"
 WIDTH=81 HEIGHT=1 ALT=""></TD> </TR>
</TABLE>
<IMG SRC="http://www.theseephone.com/images_5/text_31.gif" WIDTH=30 HEIGHT=41
 ALT=""> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>

  <TR>
    <TD width=760 align=left bgcolor="#FFFFFF">
      <TABLE cellSpacing=0 cellPadding=0 width=760 border=0>

        <TR>

          <TD class=standard1 vAlign=center align=middle width=760
            height=20><FONT color=#666666>&nbsp;<br>
            </FONT><font size="1">If you no longer wish to receive these then
            send an email to:&nbsp;</font> <font size="1"><a
 href="mailto:takeoffline@cs.com"><font
 color="#990000"><strong>takeoffline@cs.com</strong></font></a></font></TD>
 </TR></TABLE></TD></TR></TABLE>

</BODY></HTML>

-------------------------------------------------------



=== VSNL gave this spammer a new IP (to avoid blocklisting?) ===
Path: uni-berlin.de!217.22.112.154!not-for-mail
From: Dolphin <usenet-Aug+nanae@2003.dolphinwave.org>
Newsgroups: news.admin.net-abuse.email
Subject: Re: Remove our VSNL networks from SPEWS
Date: 25 Aug 2003 20:59:27 GMT
Organization: Private person
Lines: 60
Sender: Alexander Sheremet <usenet-Aug+nanae@2003.dolphinwave.org>
Message-ID: <slrnbkku55.2j5.usenet-Aug+nanae@orca.dolphinwave.org>
References: <520d10ff.0307070703.1f2b5215@posting.google.com>
  <bib6dg$ito$1@joe.rice.edu> <3F49657F.8060300@concentric.net.invalid>
NNTP-Posting-Host: 217.22.112.154
X-Trace: news.uni-berlin.de 1061845167 8500025 217.22.112.154 (16 [104765])
X-SPEWS: I am not
X-newsgroup: news.admin.net-abuse.email
X-PGP-key: 0xAAE2A579
X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133  FA87 000B 0FB6 AAE2 A579
User-Agent: slrn/0.9.7.4 (Linux)
Xref: uni-berlin.de news.admin.net-abuse.email:2054658

#begin  tesseracadime@concentric.net.invalid.exe (or was it
  tesseracadime@concentric.net.invalid.com)
 message <3F49657F.8060300@concentric.net.invalid> reply:
> Eugene wrote:
>> Please make sure that VSNL (India) and CubeXS (Pakistan) stay listed!
>> (Currently they are featured in SBL8342, SBL8921, SBL9285, SPEWS S1861
>> and S2682.)
>> For almost a year I have been receiving spam from
>> http://search.ph-search.ph and http://click.net-click.net.ph which
>> redirect to other sites hosted by CubeXS and VSNL.
>>
><SNIP>
>>
>> Eugene
>>
>> "antos" <antos@vsnl.net> wrote in message
>> news:520d10ff.0307070703.1f2b5215@posting.google.com...
>>
>> Dear Sir(s),
>>             Plz remove our IPs range 202.54.64.0 - 202.54.127.255 .
>> We have already taken action on SPAM Control.
>>  I am the Anti-SPAM Admin of VSNL India.
>>
>>  regards,
>>  Antos
>>  Manager IT, VSNL
>>
>
> VSNL has taken absolutely *NO* action on their spam problem!  I get
> their trash spams every other day, and have gotten ZERO responses to
> over ten complaints.
>
> I second Eugene's recommendation - plz keep ALL of VSNL listed until
> forever or whatever comes last.

Thirded! VSNL hosts Steve Sorenson, and despite on numerous complaints
did not terminate s/h/it, but gave s/h/it a different IP (avoiding
blocklisting?).

On August 10-15 theseephone.com (and other spammer's domains, like
customerblast.com, gettoprankings.com, lunchmateforever.com) were on
203.197.199.132:
<http://groups.google.com/groups?selm=slrnbjnmjs.ucg.usenet-Aug%2Bnanae%40orca.d
 olphinwave.org>

Today:
$ host theseephone.com
theseephone.com has address 202.54.192.196

inetnum:      202.54.128.0 - 202.54.255.255
netname:      VSNL-IN


VSNL, rot in every possible blocklist, you, spamhaus, son of a spamhaus!

Dolphin.

--
 URL: http://www.DolphinWave.org
Mail: on the web page (no spam)
 ICQ: 6615461



=== More data on spammer's domains, also on the new VSNL IP (26-Aug-2003) ===
$ host www.customerblast.com
www.customerblast.com is an alias for customerblast.com.
customerblast.com has address 202.54.192.196

$ host www.lunchmateforever.com
www.lunchmateforever.com is an alias for lunchmateforever.com.
lunchmateforever.com has address 202.54.192.196


$ jwhois 202.54.192.196
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      202.54.128.0 - 202.54.255.255
netname:      VSNL-IN
descr:        Videsh Sanchar Nigam Ltd - India.
descr:        Videsh Sanchar Bhawan, M.G. Road
descr:        Fort, Bombay 400001
country:      IN
admin-c:      IA15-AP
tech-c:       VT43-AP
remarks:      Internet Service Provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-VSNL-AP
changed:      hostmaster@apnic.net 20020204
status:       ALLOCATED PORTABLE
source:       APNIC

person:       IP Administrator
address:      10th Floor, 2 MG Road
address:      Fort Mumbai - 400001
address:      India
country:      IN
phone:        +91-22-2623620
fax-no:       +91-22-2653887
e-mail:       ip-admin@giasbm01.vsnl.net.in
nic-hdl:      IA15-AP
mnt-by:       MAINT-VSNL-AP
changed:      gpsingh@giasbm01.vsnl.net.in 20010605
source:       APNIC

person:       VSNL Tech
address:      10th Floor, 2 MG Road
address:      Fort Mumbai - 400001
address:      India
country:      IN
phone:        +91-22-2623620
fax-no:       +91-22-2653887
e-mail:       ip-tech@giasbm01.vsnl.net.in
nic-hdl:      VT43-AP
mnt-by:       MAINT-VSNL-AP
changed:      gpsingh@giasbm01.vsnl.net.in 20010605
source:       APNIC



=== VSNL has guts to ask for removal from blocklists ===
From: antos@vsnl.net (antos)
Newsgroups: news.admin.net-abuse.email
Subject: Remove our VSNL networks from SPEWS
Date: 7 Jul 2003 08:03:23 -0700
Organization: http://groups.google.com/
Lines: 8
Message-ID: <520d10ff.0307070703.1f2b5215@posting.google.com>
NNTP-Posting-Host: 203.197.12.29
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1057590203 26100 127.0.0.1 (7 Jul 2003 15:03:23 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: 7 Jul 2003 15:03:23 GMT


Dear Sir(s),
            Plz remove our IPs range 202.54.64.0 - 202.54.127.255 .
We have already taken action on SPAM Control.
 I am the Anti-SPAM Admin of VSNL India.

 regards,
 Antos
 Manager IT, VSNL



=== Others' opinions on VSNL and how VSNL "handles" spam complaints ===
Path: uni-berlin.de!fu-berlin.de!news.maxwell.syr.edu!news-out1.nntp.be
 !propagator2-sterling!In.nntp.be!gumby.it.wmich.edu!newsreader.wustl.edu
 !news.rice.edu!newsfeed.rice.edu!rice!not-for-mail
From: "Eugene" <eugenep@cmt.rice.rem0ve-this.edu>
Newsgroups: news.admin.net-abuse.email
Subject: Re: Remove our VSNL networks from SPEWS
Date: Sun, 24 Aug 2003 15:15:43 -0500
Organization: Rice University, Houston, TX
Lines: 50
Message-ID: <bib6dg$ito$1@joe.rice.edu>
References: <520d10ff.0307070703.1f2b5215@posting.google.com>
NNTP-Posting-Host: swba-176-234.rice.edu
X-Trace: joe.rice.edu 1061756145 19384 128.42.176.234 (24 Aug 2003 20:15:45 GMT)
X-Complaints-To: abuse@rice.edu
NNTP-Posting-Date: Sun, 24 Aug 2003 20:15:45 +0000 (UTC)
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Xref: uni-berlin.de news.admin.net-abuse.email:2054075

Please make sure that VSNL (India) and CubeXS (Pakistan) stay listed!
(Currently they are featured in SBL8342, SBL8921, SBL9285, SPEWS S1861
and S2682.)
For almost a year I have been receiving spam from
http://search.ph-search.ph and http://click.net-click.net.ph which
redirect to other sites hosted by CubeXS and VSNL.

For example,
http://click.net-click.net.ph/click.php?id=sicosyl
or
http://search.ph-search.ph/search.php?id=sicosyl
redirects to
http://silverstate.com-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-ph.ph
 /index4.htm?

http://search.ph-search.ph/search.php?id=facobti
or
http://click.net-click.net.ph/click.php?id=facobti
redirects to
http://fantasticstuff.com-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-ph
 .ph/a01/index.htm?ID=1

http://search.ph-search.ph/search.php?id=adcophi
or
http://click.net-click.net.ph/click.php?id=adcophi
redirects to
http://202.63.201.207/indexbhp.htm?

I have sent dozens of complaints to addresses listed in abuse.net for
cubexs.net.pk and vsnl.net.in and additionally to the customer service
of VSNL - all ignored.

See samples of spam in .sightings:
http://groups.google.com/groups?selm=32700-70852%40sneakemail.com
http://groups.google.com/groups?selm=20030805074930.83B04BCD5%40glypnod.example.
 com
http://groups.google.com/groups?selm=10785-48565%40sneakemail.com

Eugene

"antos" <antos@vsnl.net> wrote in message
news:520d10ff.0307070703.1f2b5215@posting.google.com...

Dear Sir(s),
            Plz remove our IPs range 202.54.64.0 - 202.54.127.255 .
We have already taken action on SPAM Control.
 I am the Anti-SPAM Admin of VSNL India.

 regards,
 Antos
 Manager IT, VSNL



=== And another one ===
Path: uni-berlin.de!fu-berlin.de!news-out.newsfeeds.com!propagator2-maxim
 !news-in.superfeed.net!tethys.csu.net!newshub.sdsu.edu!elnk-nf2-pas
 !elnk-pas-nf1!newsfeed.earthlink.net!nntp-out.svc.us.xo.net
 !nntp1-feeder.SJ.svc.us.xo.net!newsfeed.concentric.net!sjc1.nntp.concentric.net
 !nntp-master.svc.us.xo.net
From: tesseracadime@concentric.net.invalid
Newsgroups: news.admin.net-abuse.email
Subject: Re: Remove our VSNL networks from SPEWS
Date: 25 Aug 2003 02:37:44 GMT
Organization: Concentric Internet Services
Lines: 37
Message-ID: <3F49657F.8060300@concentric.net.invalid>
References: <520d10ff.0307070703.1f2b5215@posting.google.com>
  <bib6dg$ito$1@joe.rice.edu>
Reply-To: tesseracadime@concentric.net.invalid
NNTP-Posting-Host: 66.238.122.134
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.2) Gecko/20030208
  Netscape/7.02
X-Accept-Language: en, de, fr, ru, zh-cn, ja, ko
Xref: uni-berlin.de news.admin.net-abuse.email:2054238

Eugene wrote:
> Please make sure that VSNL (India) and CubeXS (Pakistan) stay listed!
> (Currently they are featured in SBL8342, SBL8921, SBL9285, SPEWS S1861
> and S2682.)
> For almost a year I have been receiving spam from
> http://search.ph-search.ph and http://click.net-click.net.ph which
> redirect to other sites hosted by CubeXS and VSNL.
>
<SNIP>
>
> Eugene
>
> "antos" <antos@vsnl.net> wrote in message
> news:520d10ff.0307070703.1f2b5215@posting.google.com...
>
> Dear Sir(s),
>             Plz remove our IPs range 202.54.64.0 - 202.54.127.255 .
> We have already taken action on SPAM Control.
>  I am the Anti-SPAM Admin of VSNL India.
>
>  regards,
>  Antos
>  Manager IT, VSNL
>

VSNL has taken absolutely *NO* action on their spam problem!  I get
their trash spams every other day, and have gotten ZERO responses to
over ten complaints.

I second Eugene's recommendation - plz keep ALL of VSNL listed until
forever or whatever comes last.

--
| Drop a dime and remove <DOT>invalid to reply.   |
|                                                 |
-=0=-



=== And more VSNL spams ===
Path: uni-berlin.de!fu-berlin.de!newsfeed.news2me.com
 !newsfeed.media.kyoto-u.ac.jp!jpix!newsfeed1.dti.ad.jp!giga-nspixp2
 !spinnewsgate!attnet-tokyo!not-for-mail
From: "Norman Diamond" <ndiamond@nospam.wta.att.ne.jp>
Newsgroups: news.admin.net-abuse.email
Subject: Re: Remove our VSNL networks from SPEWS
Date: Mon, 25 Aug 2003 23:04:20 +0900
Organization: JENS Internet Service
Lines: 4
Message-ID: <bid5g7$395$1@newsflood.tokyo.att.ne.jp>
References: <520d10ff.0307070703.1f2b5215@posting.google.com>
  <bib6dg$ito$1@joe.rice.edu> <3F49657F.8060300@concentric.net.invalid>
NNTP-Posting-Host: 165.76.238.153
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Trace: newsflood.tokyo.att.ne.jp 1061820744 3365 165.76.238.153 (25 Aug 2003
  14:12:24 GMT)
X-Complaints-To: newsadm@newsflood.tokyo.att.ne.jp
NNTP-Posting-Date: Mon, 25 Aug 2003 14:12:24 +0000 (UTC)
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Xref: uni-berlin.de news.admin.net-abuse.email:2054408

I got four more spams today for VSNL sites.  I send LARTs to VSNL (which
usually bounce) and India's NIC.  Of course no one does anything.  VSNL
needs as big a blackhole listing as NTT needs.



=== VSNL abuse@ and postmaster@ keep bouncing, too ===
Path: uni-berlin.de!206.207.111.252!not-for-mail
From: Kevin S. Wilson <rescyou@spro.net>
Newsgroups: news.admin.net-abuse.email
Subject: Mail to postmaster@vsnl.net and abuse@vsnl.net bounces
Date: Mon, 01 Sep 2003 10:44:34 -0600
Lines: 26
Message-ID: <hpt6lvoto2g0pgr8sfot3iv8ueva5f3tnt@4ax.com>
Reply-To: rescyou@spro.net
NNTP-Posting-Host: 206.207.111.252
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Trace: news.uni-berlin.de 1062434777 14368132 206.207.111.252 (16 [127799])
X-Newsreader: Forte Agent 1.93/32.576 English (American)
Xref: uni-berlin.de news.admin.net-abuse.email:2059819

Three different times this week:

This Message was undeliverable due to the following reason:

Your message was not delivered because the destination computer was
not reachable within the allowed queue period.  The amount of time
a message is queued before it is returned depends on local configura-
tion parameters.

Most likely there is a network problem that prevented delivery, but
it is also possible that the computer is turned off, or does not
have a mail system running right now.

The queue containing messages destined for vsnl.net.in
was expired by the Postmaster of best.spro.net.
The following recipients did not receive your message:
     <abuse@vsnl.net.in>
     <postmaster@vsnl.net.in>

Please reply to <postmaster AT spro.net>
if you feel this message to be in error.

--
Kevin S. Wilson
Tech Writer at a University Somewhere in Idaho
"Who put these fingerprints on my imagination?"



=== VSNL: "We've registered all our spammers' IP ranges with APNIC, block ===
=== those ranges, not the whole VSNL" ===
Newsgroups: news.admin.net-abuse.blocklisting
Path: uni-berlin.de!fu-berlin.de!logbridge.uoregon.edu!newsfeed.stanford.edu
 !zorac!blocklisting.com!robomod!not-for-mail
From: spam@noc.vsnl.com (Milind)
Subject:  IP's listed in SPEWS : S2802.html
Approved: NANAB Moderators <moderators@blocklisting.com>
Content-Type:  text/plain; charset=ISO-8859-1
X-Complaints-To: groups-abuse@google.com
Sender: nanab@zorch.sf-bay.org (Scott Hazen Mueller)
Nntp-Posting-Date: Tue, 25 Nov 2003 04:11:46 +0000 (UTC)
Content-Transfer-Encoding:  8bit
NNTP-Posting-Host:  202.54.29.58
Organization: http://groups.google.com
Message-ID:  <25997f91.0311242011.2de0b91d@posting.google.com>
X-Trace: posting.google.com 1069733506 13688 127.0.0.1 (25 Nov 2003 04:11:46
  GMT)
Date: Tue, 25 Nov 2003 02:21:41 GMT
X-Robomod: STUMP, ichudov@algebra.com (Igor Chudov), C++/Perl/Unix Consulting
Lines: 81
Xref: uni-berlin.de news.admin.net-abuse.blocklisting:2751

Dear all,

We are observing our VSNL Claass B and Class C IP's are being listed in
spews.org. Please note that we have taken necessary action to stop the SPAM
and most of the IP's have been withdrwan from the Spammers. We would like to
UNLIST all our IP's from SPEWS and other databases.

We have taken corrective action to register all our small IP Subnets with
our APNIC Registry..

Example of one of the IP listed in SPWES and registered with APNIC is as
follows;

 www.bargainsite.biz [203.197.166.222]
 www.bargainsite.biz [203.197.166.222]
 www.bulkmails.org [203.197.166.222]
 www.dateseeker.biz [203.197.166.222]
 www.easymedication.biz [203.197.166.222]
 www.easyoffers.biz [203.197.166.222]



APNIC registry as follows;

SMART# whois -h whois.apnic.net 203.197.166.222
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      203.197.166.192 - 203.197.166.223
netname:      SIT-BGL
descr:        VSNL BANGALORE - SIT USED AT VSB
country:      IN
admin-c:      IA15-AP
tech-c:       VT43-AP
remarks:      --------------------------------------------------------------
----
remarks:      for abuse and spam related complaints and queries please
contact:
remarks:      abuse@vsnl.com
remarks:      --------------------------------------------------------------
----
mnt-by:       MAINT-VSNL-AP
changed:      ip-admin@giasbm01.vsnl.net.in 20031113
status:       ASSIGNED NON-PORTABLE
source:       APNIC

person:       IP Administrator
address:      10th Floor, 2 MG Road
address:      Fort Mumbai - 400001
address:      India
country:      IN
phone:        +91-22-2623620
fax-no:       +91-22-2653887
e-mail:       ip-admin@giasbm01.vsnl.net.in
nic-hdl:      IA15-AP
mnt-by:       MAINT-VSNL-AP
changed:      gpsingh@giasbm01.vsnl.net.in 20010605
source:       APNIC

person:       VSNL Tech
address:      10th Floor, 2 MG Road
address:      Fort Mumbai - 400001
address:      India
country:      IN
phone:        +91-22-2623620
fax-no:       +91-22-2653887
e-mail:       ip-tech@giasbm01.vsnl.net.in
nic-hdl:      VT43-AP
mnt-by:       MAINT-VSNL-AP
changed:      gpsingh@giasbm01.vsnl.net.in 20010605
source:       APNIC



If you find still VSNL IP's are spamming please block only SUBNETS instead
of full CLASS B or C


Best regards,
Milind



=== To sum it all for VSNL spam services ===
Path: uni-berlin.de!fu-berlin.de!news.maxwell.syr.edu!news.airnews.net
 !cabal12.airnews.net!usenet
From: Jeff Higgins <JHiggins@Polarbay.com>
Newsgroups: news.admin.net-abuse.email
Subject: Re: SPEWS: S2802
Date: Tue, 25 Nov 2003 19:00:39 -0500
Organization: Airnews.net! at Internet America
Lines: 24
Message-ID: <n3r7sv82mag6560roge5pp4klv20028684@4ax.com>
References: <a51dfc5d.0311251021.654b0a3e@posting.google.com>
Abuse-Reports-To: abuse at airmail.net to report improper postings
NNTP-Proxy-Relay: library1-aux.airnews.net
NNTP-Posting-Time: Tue, 25 Nov 2003 18:01:06 -0600 (CST)
NNTP-Posting-Host: !_.,S1k-Wl0r-HgEFNr&AUSbC (Encoded at Airnews!)
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Newsreader: Forte Free Agent 1.93/32.576 English (American)
Xref: uni-berlin.de news.admin.net-abuse.email:2118422


<Snip>
> ...and action had been taken against the
>spammers,kindly release the said IP from the list as we are having our
>genuine customer affected with the blocking,below mail is attached for
>your ref of the affected customer.
>Best Rgds
>SYSTEM ADMIN.

<Snip>

>|--------------------
>1, 203.197.166.0 - 203.197.166.255, vsnl.net.in
>1, 203.197.194.0 - 203.197.194.255, vsnl.net.in
>1, 203.197.199.0 - 203.197.199.255, vsnl.net.in
>1, 203.197.204.0 - 203.197.204.255, vsnl.net.in
<snip>

http://www.bulletproofservice.com:8050/ 203.197.204.80

I think that sums it up.

Jeff