Valuenet - rogue network: their admin has sent legal threats againt a blocklist and the same abuse@valuenet guy has FORGE-SUBSCRIBED a complainer to the mailing lists! Not to mention harboring for very long the persistent spammers, dailyripple/yourbigvote/smilepop. Also - taking money from spammers to spam from their networks. Null routed! valuenet.net: Access denied! [69.27.32.0 - 69.27.47.255], [216.15.153.24 - 216.15.153.31], [216.162.96.0 - 216.162.127.255]: Null routed! === Cart00neys against a blocklist === From: abuse@abuse.valuenet.net (Valuenet Abuse Team) Newsgroups: news.admin.net-abuse.email Subject: Re: Valuenet still listed? Date: 14 Jul 2003 11:21:20 -0700 Organization: http://groups.google.com/ Lines: 41 Message-ID: References: <81f10582.0307071907.891bbb6@posting.google.com> <3F0A3D25.53CE9D68@news.spamblocked.com> NNTP-Posting-Host: 216.162.106.30 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1058206881 12007 127.0.0.1 (14 Jul 2003 18:21:21 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: 14 Jul 2003 18:21:21 GMT Jim Kennedy wrote in message news:... > On 10 Jul 2003 14:00:22 -0700, abuse@abuse.valuenet.net (Valuenet > Abuse Team) wrote: > > >winston Smith wrote in message news:<3F0A3D25.53CE9D68@news.spamblocked.com>... > >> Roy Osborn wrote: > >> > > >> > It appears as if Valuenet has done some work at removing spammers - > >> > any chance of getting my IP (216.162.122.4) off the block list? > >> > Thanks! > >> > >> Try doing a lot of work and removing all the spammers.... > > > >please let us know, which IP or domain host with valuenet still > >is spam? > > > >Abuse@abuse.valuenet.net > > My opinion? For a LONG time your management telling everyone here to > bad, we are going to host yourbigvote we don't care what you say or > do. Perhaps SPEWS has decided to let you sit there blocked for awhile. > > I think you misunderestimate just how much your companies comments and > actions during all of this REALLY pissed people off. > > Yourbigvote hammered my servers for months and months, addresses that > never existed, users that in no way signed up for their crap. Constant > retries after 55X errors for days on end...it was total bullshit. And > your management thought it was funny. > > I for one will never unblock you. > > JK we are not host any web with mailing list. We are ask SPEWS.org to remove our IP from their list, if you are a a company or just a person, It is you right to keek it in your list, if you are spews.org can you let us have your name and address, we can see you in court. abuse@abuse.valuenet.net === Valuenet abuse guy forge-subscribes a complainer to e-mailing lists === NNTP-Posting-Date: Mon, 21 Jul 2003 18:29:23 -0500 From: Verbila Newsgroups: news.admin.net-abuse.email Subject: Valuenet.net's Abuse Desk (JoeYu) mass-subscribes me to Topica's spam-fest! Organization: Verbila Industries, Inc. User-Agent: MT-NewsWatcher/3.1 (PPC) Date: Mon, 21 Jul 2003 16:23:50 -0700 Message-ID: Lines: 210 NNTP-Posting-Host: 66.117.141.55 X-Trace: sv3-gnVK7JCoZ3DXcF8dzxw8LojYIeogOpheppLxb1GmmBfnuAMfUHvaVNi9ygDe8kDvLgcmsBRncwEKKX4!twyXSftIXJiucQcrRvQfQzhGgy7ThZ/hDz6OVEUAH5XHYYsL/w2GU+eHtWq82O404vpP4hepKNQb!s+875kQj/sWHZQ== X-Complaints-To: abuse@lmi.net X-DMCA-Complaints-To: abuse@lmi.net X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1 This message is to notify anti-spammers that my address has been abused and mass-subscribed to various mailing lists without my permission by Joe Yu who works at the *Abuse Desk* at Valuenet.net. Yes, that's right, the guy working the Abuse Desk at Valuenet.net has done an abusive mass-subscribe on me. The saga: I was following a thread on news.admin.net-abuse.email concerning Valuenet, which was begun on July 7th, 2003. On the thread, someone posting as "Abuse@abuse.valuenet.net" posted a gibberish cartooney threat at SPEWS (Message-ID: ). A number of NANAE regulars replied to this post telling the poster how stupid s/he was to make such statements. I've seen a lot of stupid posts by people apparantly representing ISPs as official staffmembers before, but this one seemed especially bad. I suspected that the person posting was not really a staffmember at the ISP. I decided to find out for myself, so I wrote to them: My letter 7-15-03: =========================================================== I am writing to you to call attention to the fact that your Abuse Desk staffmember has been posting some really stupid things on a public anti-spam newsgroup (news.admin.net-abuse.email). This is the newsgroup where a lot of anti-spam sysadmins hang out. First of all, either this person does not speak English very well, or s/he is dumb as a rock. The latest damaging thing posted was yesterday: ____________________________________________________________________ Date: 14 Jul 2003 11:21:20 -0700 Message-ID: "we are not host any web with mailing list. We are ask SPEWS.org to remove our IP from their list, if you are a a company or just a person, It is you right to keek it in your list, if you are spews.org can you let us have your name and address, we can see you in court. abuse@abuse.valuenet.net" _____________________________________________________________________ Some points: --This person has NO IDEA how SPEWS works and is making totally baseless demands. --If your company does indeed have IP addresses in SPEWS that means you have a spam problem. --Threatening legal action against SPEWS in this public forum has resulted in many sysadmins dropping ALL of Valuenet's IP addresses into their private blocklists, never to come out again. --Does this person really have the authority to speak in this manner on behalf on Valuenet? He is damaging your company's reputation with his silly gibberish and total lack of clue about the issue at hand. Just thought you might want to know what is going in in case you were unaware of this person's postings on news.admin.net-abuse.email. Also, your company will continue to have a spam-supporting reputation until you terminate your spammers "yourbigvote.com": http://www.spamhaus.org/sbl/sbl.lasso?query=SBL4156 http://www.spews.org/html/S1677.html Regards, [me] Concerned Anti-spam Internet Citizen =========================================================== I received the following reply (note the IP address 216.162.106.30): =========================================================== X-Envelope-To: [me] Received: from server6927343.valuenet.net (server6927343.valuenet.net [69.27.34.3]) by [My mail server] (8.12.7/8.12.7) with ESMTP id h6FLoseS016368 for [me]; Tue, 15 Jul 2003 14:50:55 -0700 (PDT) Received: from mail344.valuenet.net (localhost.localdomain [127.0.0.1]) (authenticated (0 bits)) by server6927343.valuenet.net (8.11.6/8.11.6) with ESMTP id h6FLrlF03750 for [me]; Tue, 15 Jul 2003 16:53:47 -0500 Received: from 216.162.106.30 (SquirrelMail authenticated user company@mail344.valuenet.net) by mail344.valuenet.net with HTTP; Tue, 15 Jul 2003 16:53:47 -0500 (CDT) Message-ID: <3771.216.162.106.30.1058306027.squirrel@mail344.valuenet.net> Date: Tue, 15 Jul 2003 16:53:47 -0500 (CDT) Subject: Re: Your Abuse Desk staffmember needs a whack upside the head From: "Valuenet Abuse Team" To: [me] In-Reply-To: References: X-Priority: 1 Importance: High X-MSMail-Priority: High X-Mailer: SquirrelMail (version 1.2.5) MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 8bit X-UIDL: gMD"!<5c"!gWB"!hNg!! Hi, Thank you for your reply, We are not the spamer, We should not be treat like one, We did have a customer (EUNI) who have a mailing-list and we were told that is good list and also the company is public trade company. We have 3 year term with them, since so many people start compaint it, we have decide not to renew with them, But Spews.org do not have the right to block all our IP address to force us stop hosting this customer, anyway this list is still online (not with Valuenet). we are seeking help for this matter. Joe Yu =========================================================== This was followed by an auto-ack, which sounded like a total moron had written it (see Message-ID: for my comments on the auto-ack verbiage). So then I reply to Joe Yu: =========================================================== You sound like the same guy who has been posting to Usenet. Are you the CEO of the Valuenet? if not, who is? =========================================================== Joe's reply (note again the IP address 216.162.106.30): =========================================================== X-Envelope-To: [me] Received: from server6927343.valuenet.net (server6927343.valuenet.net [69.27.34.3]) by [My mail server] (8.12.7/8.12.7) with ESMTP id h6GDvJxa011940 for [me]; Wed, 16 Jul 2003 06:57:20 -0700 (PDT) Received: from abuse.valuenet.net (localhost.localdomain [127.0.0.1]) (authenticated (0 bits)) by server6927343.valuenet.net (8.11.6/8.11.6) with ESMTP id h6GE0LF07290 for [me]; Wed, 16 Jul 2003 09:00:21 -0500 Received: from 216.162.106.30 (SquirrelMail authenticated user abuse@abuse.valuenet.net) by abuse.valuenet.net with HTTP; Wed, 16 Jul 2003 09:00:21 -0500 (CDT) Message-ID: <4299.216.162.106.30.1058364021.squirrel@abuse.valuenet.net> Date: Wed, 16 Jul 2003 09:00:21 -0500 (CDT) Subject: Re: Your Abuse Desk staffmember needs a whack upside the head From: "Valuenet Abuse Team" To: [me] In-Reply-To: References: X-Priority: 1 Importance: High X-MSMail-Priority: High Reply-To: Abuse@abuse.valuenet.net X-Mailer: SquirrelMail (version 1.2.5) MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 8bit X-UIDL: SmC"!8E1"!okO"!8;*#! Status: U We will no longer work with: spews.org we will seeking legel help to put this site off line. Joe Yu =========================================================== To which I reply: =========================================================== At 9:00 AM -0500 7/16/03, Valuenet Abuse Team wrote: >We will no longer work with: spews.org >we will seeking legel help to put this site off line. You are COMPLETELY INSANE. Thanks for making this clear so I can block your entire network for being a spam-supporting, clueluss, moronic, cart00ney ignoramus from hell. Buh-bye! I will no longer be conversing with you and I will be dropping all of your netblocks into my own private blocklist. BLOCK: 216.15.153.24 - 216.15.153.31 BLOCK: 216.162.96.0 - 216.162.127.255 BLOCK: 69.27.32.0 - 69.27.47.255 You are digging yourself into a very dark hole... =========================================================== ...and then I proceeded to drop all of Valuenet's IP into my local blocklist. The punchline: After complaining to Topica about getting spam from them I receive an e-mail from Topica containing the following: "Our records show that your [munged] address was subscribed to multiple mailing lists on Jul 16, 2003 15:36 PDT. The IP number for the subscription requests was 216.162.106.30. If this is not your address, we hope this information will help you identify who misused our system to forge subscriptions to your address." Gee, now whose IP address is 216.162.106.30?!? So promptly after I told this jerk to FOAD, he mass-subscribed me to Topica's spam-fest. I call for an IDP on Valuenet.net! THE FREAKING ABUSE PERSON at Valuenet.net mass-subscribed my address!! -verbila === Some data === $ whois valuenet.net [Querying whois.internic.net] [Redirected to whois.networksolutions.com] [Querying whois.networksolutions.com] [whois.networksolutions.com] <...> Registrant: Valuenet Corp (VALUENET2-DOM) PO BOX 665 Bridgeton, MO 63044 US Domain Name: VALUENET.NET Administrative Contact, Technical Contact: (WKRXOEFGMO) Abuse@abuse.valuenet.net Valuenet Corp PO BOX 665 Bridgeton, MO 63044 US 314-731-2860 Record expires on 08-Oct-2003. Record created on 03-Oct-2002. Database last updated on 27-Jul-2003 20:52:27 EDT. Domain servers in listed order: NS1.VALUENET.NET 216.162.106.3 NS3.VALUENET.NET 216.162.106.5 NS2.VALUENET.NET 216.162.106.4 $ jwhois 216.162.106.3 [Querying whois.arin.net] [whois.arin.net] OrgName: Valuenet Corp. OrgID: VALN Address: 4534 N Lindbergh Blvd Suite 429 City: Bridgeton StateProv: MO PostalCode: 63044 Country: US NetRange: 216.162.96.0 - 216.162.127.255 CIDR: 216.162.96.0/19 NetName: VALUENET-1BLK NetHandle: NET-216-162-96-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: NS1.VALUENET.NET NameServer: NS2.VALUENET.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 1999-08-05 Updated: 2001-06-28 TechHandle: JY62-ARIN TechName: Yu, Joe TechPhone: +1-314-731-2860 TechEmail: abuse@abuse.valuenet.net OrgTechHandle: JY62-ARIN OrgTechName: Yu, Joe OrgTechPhone: +1-314-731-2860 OrgTechEmail: abuse@abuse.valuenet.net # ARIN WHOIS database, last updated 2003-07-26 19:15 $ jwhois 69.27.32.0 [Querying whois.arin.net] [whois.arin.net] OrgName: Valuenet Corp. OrgID: VALN Address: 4534 N Lindbergh Blvd Suite 429 City: Bridgeton StateProv: MO PostalCode: 63044 Country: US NetRange: 69.27.32.0 - 69.27.47.255 CIDR: 69.27.32.0/20 NetName: BESTDSL NetHandle: NET-69-27-32-0-1 Parent: NET-69-0-0-0-0 NetType: Direct Allocation NameServer: NS1.VALUENET.NET NameServer: NS2.VALUENET.NET Comment: RegDate: 2003-02-26 Updated: 2003-02-26 TechHandle: JY62-ARIN TechName: Yu, Joe TechPhone: +1-314-731-2860 TechEmail: abuse@abuse.valuenet.net OrgTechHandle: JY62-ARIN OrgTechName: Yu, Joe OrgTechPhone: +1-314-731-2860 OrgTechEmail: abuse@abuse.valuenet.net # ARIN WHOIS database, last updated 2003-07-26 19:15 $ jwhois 216.15.153.24 [Querying whois.arin.net] [whois.arin.net] CYBERCON, INC. CYBERCON-BLK1 (NET-216-15-128-0-1) 216.15.128.0 - 216.15.255.255 Valuenet CBCN-216-15-153-24 (NET-216-15-153-24-1) 216.15.153.24 - 216.15.153.31 # ARIN WHOIS database, last updated 2003-07-26 19:15 === Joe Yu takes money from spammers === Path: uni-berlin.de!fu-berlin.de!news.maxwell.syr.edu!news.cis.ohio-state.edu !nntp.service.ohio-state.edu!not-for-mail From: "Jay of the Hill People" Newsgroups: news.admin.net-abuse.email Subject: [block] Robert Solloway Date: Mon, 28 Jul 2003 01:01:49 -0400 Organization: Ohio State University Lines: 49 Sender: stuler.1@dhcp065-024-140-061.columbus.rr.com Message-ID: NNTP-Posting-Host: dhcp065-024-140-061.columbus.rr.com X-Trace: charm.magnus.acs.ohio-state.edu 1059368455 19842 65.24.140.61 (28 Jul 2003 05:00:55 GMT) X-Complaints-To: abuse@osu.edu NNTP-Posting-Date: 28 Jul 2003 05:00:55 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Xref: uni-berlin.de news.admin.net-abuse.email:2035126 Robert Solloway is now taking money to send many-spams-in-one. It seems he actually got some stupid people to pay him to do it too. He is currently paying Joe Yu to spam directly from Valuenet space. The following craphole sites are now being spamvertised: emailbroadcasting.org <-- listed on SPEWS fabulousroberts.us <-- formerly mitchmyersent, ronaldsroad, etc. mortgage-health-planning.com free-vacations.us ------------------ UUNET Technologies, Inc. UUNET65 (NET-65-192-0-0-1) 65.192.0.0 - 65.223.255.255 promero UU-65-212-72 (NET-65-212-72-0-1) 65.212.72.0 - 65.212.73.255 websitelifeline.com <-- Aesop.com scammers still spamming away ------------------ Cable & Wireless 64.14.0.0 - 64.14.255.255 emsanet.com ------------------ Genuity GNTY-198-76 (NET-198-76-0-0-1) 198.76.0.0 - 198.79.255.255 EmsaNet Internet Services, Inc. EMSANETINT-169-19 (NET-198-76-169-0-1) 198.76.169.0 - 198.76.169.255 AmericanBars.com <-- Hosted on ValueWeb - wonder how much Joe Yu got for this one? ------------------ CyberGate, Inc. CYBERGATE-1 (NET-64-70-128-0-1) 64.70.128.0 - 64.70.255.255 Affinity Dedicated AFFIN-DED-64-70-191 (NET-64-70-191-0-1) 64.70.191.0 - 64.70.191.255 The spam source IS on valueweb - why bother raping proxies? - not sure how SPEWS missed this: ------------------ CyberGate, Inc. CYBERGATE-1 (NET-64-70-128-0-1) 64.70.128.0 - 64.70.255.255 Affinity Dedicated AFFIN-DED-64-70-191 (NET-64-70-191-0-1) 64.70.191.0 - 64.70.191.255 -- "What we need are a couple of good hangings" - FTC Chairman Orson Swindle, regarding email spam === Link to the open proxy hijackers spammers === Path: uni-berlin.de!fu-berlin.de!news.maxwell.syr.edu!news.cis.ohio-state.edu !nntp.service.ohio-state.edu!not-for-mail From: "Jay of the Hill People" Newsgroups: news.admin.net-abuse.email Subject: Re: [block] Robert Solloway Date: Mon, 28 Jul 2003 05:08:21 -0400 Organization: Ohio State University Lines: 26 Sender: stuler.1@dhcp065-024-140-061.columbus.rr.com Message-ID: References: NNTP-Posting-Host: dhcp065-024-140-061.columbus.rr.com X-Trace: charm.magnus.acs.ohio-state.edu 1059383273 23623 65.24.140.61 (28 Jul 2003 09:07:53 GMT) X-Complaints-To: abuse@osu.edu NNTP-Posting-Date: 28 Jul 2003 09:07:53 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Xref: uni-berlin.de news.admin.net-abuse.email:2035201 "Desmond Lewellyn" wrote in message news:Ch5Va.19278$OM3.6240@news-server.bigpond.net.au... > > "Jay of the Hill People" wrote in message > news:bg2am7$jc2$1@charm.magnus.acs.ohio-state.edu... > > Robert Solloway is now taking money to send many-spams-in-one. > > It seems he actually got some stupid people to pay him to do it too. > > He is currently paying Joe Yu to spam directly from Valuenet space. > > The following craphole sites are now being spamvertised: > > Jay, have you seen the Solloway threads, "People who would be spammers"? > Can you link any of the spammed "spams-in-one" to any of them? > This one: http://www.google.com/groups?as_umsgid=l__Ta.13359%24OM3.4545@news-server.bigpond.net.au Spam excerpt: UNLIMITED NATIONWIDE INTERNET ACCESS $12 /Month or $99/ Year NO BANNER AD'S, 24/7 SUPPORT, 30-Day Introductory Rate $9.95 Sign-up today at: http://www.emsanet.com ENTER OFFER CODE: UH It is the same spammer, of course - the same $129 deal. === And another spammer === Path: uni-berlin.de!fu-berlin.de!peer01.cox.net!cox.net !small1.nntp.aus1.giganews.com!border1.nntp.aus1.giganews.com !intern1.nntp.aus1.giganews.com!nntp.giganews.com!nntp.comcast.com !news.comcast.com.POSTED!not-for-mail NNTP-Posting-Date: Mon, 28 Jul 2003 00:22:22 -0500 From: "McWebber" Newsgroups: news.admin.net-abuse.email References: Subject: Re: [block] Robert Solloway Date: Mon, 28 Jul 2003 01:22:23 -0400 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Message-ID: Lines: 19 NNTP-Posting-Host: 68.56.248.3 X-Trace: sv3-aPBYf1igrR3Xu2qjRYHBWOu9hzc1pLitgRbkYKC8PZZvVKKlPx7bcsCI16sljNI2snwesyM8l4 K5gHs!loYu7fUVyDKwAd5yVolFn7tRcqWAIiBtP2TCSTzss8QloxQ1JMoa59bFTx8= X-Complaints-To: abuse@comcast.net X-DMCA-Complaints-To: dmca@comcast.net X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1 Xref: uni-berlin.de news.admin.net-abuse.email:2035135 "Jay of the Hill People" wrote in message news:bg2am7$jc2$1@charm.magnus.acs.ohio-state.edu... > Robert Solloway is now taking money to send many-spams-in-one. > It seems he actually got some stupid people to pay him to do it too. > He is currently paying Joe Yu to spam directly from Valuenet space. > The following craphole sites are now being spamvertised: > Don't forget http://www.themaplewoodgroup.com/images/scriptcard.pdf being spamvertised. See [email] FREE PRESCRIPTION DRUG CARD valueweb.net in nanas. -- McWebber No email replies read If someone tells you to forward an email to all your friends please forget that I'm your friend.