ZAQ INTERNET - they claim that they have no responsibility over their servers, and can only warn their abusers. Guess what? Irresponsible networks are not welcome here! zaq.ne.jp, kmsc.co.jp, [61.46.0.0 - 61.46.255.255], [61.115.128.0 - 61.115.191.255], [61.125.64.0 - 61.125.127.255], [61.192.0.0 - 61.192.127.255], [61.205.128.0 - 61.205.191.255], [211.120.128.0 - 211.120.191.255], [211.124.0.0 - 211.124.255.255], [211.135.0.0 - 211.135.127.255], [218.220.0.0 - 218.220.255.255], [219.114.192.0 - 219.114.255.255], [219.115.0.0 - 219.115.255.255]: Access denied! === The evidence === Path: uni-berlin.de!fu-berlin.de!news.maxwell.syr.edu!sn-xit-03!sn-xit-01!sn-post-01!supernews.com!corp.supernews.com!not-for-mail From: George Crissman Newsgroups: news.admin.net-abuse.email Subject: Pleasant Japanese Response: We Are Neutral Date: Mon, 01 Sep 2003 03:15:32 -0700 Organization: Please remove BIKINI to send email. Thank you. Message-ID: X-Newsreader: Forte Agent 1.8/32.548 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Complaints-To: abuse@supernews.com Lines: 73 Xref: uni-berlin.de news.admin.net-abuse.email:2059667 Sigh. Is it just my week, or something? First, it's Benelux explaining they have no control over their customer. Now it's Japan. Is this a trend of some sort and I'm only just now figuring it out? ------------------ Long Quote Begins ---------------- Dear stradsBIKINI@excite.com Thank you very much for your E-mail. >Subject: Spam Report: Your Check > >This is a report of unsolicited advertising email, also >known as spam. It is a violation of RFC 1855, as well >as the terms and conditions of Internet access, Federal >case law, and a variety of State laws. Please investigate >and take the necessary action to prevent future spamming >by your customer. Thank you. > >Best regards, > >George Crissman > >--------------- Original message text ----------------- >Return-Path: >Received: from zaqdb735e7c.zaq.ne.jp (zaqdb735e7c.zaq.ne.jp [219.115.94.124]) > by excite.com (8.12.3/8.11.3) with SMTP id h7TIiWeI060903; > Fri, 29 Aug 2003 11:44:34 -0700 (PDT) > (envelope-from ramzi1@gmx.at) >Received: from [181.36.174.205] > by zaqdb735e7c.zaq.ne.jp with ESMTP id 45023387B0A > for ; Sat, 30 Aug 2003 01:41:18 +0600 >Message-ID: >From: "Felecia Allen" >Reply-To: "Felecia Allen" >To: stew@excite.com >Subject: RE: Your Check >Date: Sat, 30 Aug 03 01:41:18 GMT >X-Mailer: Internet Mail Service (5.5.2650.21) >MIME-Version: 1.0 >Content-Type: multipart/alternative; > boundary="ED455DA15B." >X-Priority: 3 >X-MSMail-Priority: Normal >X-UIDL: MaD!!]d,"!(:,"! We have investigated it from the information that you sent. The result is that a corresponding person became clear with the member of ZAQ. We warned to the corresponding person with a strict attention. However, the provider could not get involve in the action that the user did on the Internet. Also, the provider has no acutual authority to investigate on personal basis especialy customer relations. Please understand that the provider is in the a neutral position. We will try to send a warning by written correspondence or e-mail if it is possible. However, our company is not able to take treatment furthermore. We sincerely request for your understanding of our position. *ZAQ customer center ----------------------------------------------------------------- "Things got so bad that administrators and *even their bosses* realized that action had to be taken to make them better. They've finally realized that the alternative to a little collateral damage is loss of all email. The spammers didn't win. They just demonstrated why SPEWS was necessary in the first place." Jason Steiner regarding Ddos attacks on block lists. === A request for IP ranges of theirs === Path: uni-berlin.de!fu-berlin.de!newsfeed.mathworks.com!panix!not-for-mail From: Tom Betz Newsgroups: news.admin.net-abuse.email Subject: Re: Pleasant Japanese Response: We Are Neutral Date: Mon, 1 Sep 2003 14:02:09 +0000 (UTC) Organization: XOme Lines: 31 Message-ID: References: NNTP-Posting-Host: 249-208.customer.cloud9.net X-Trace: reader2.panix.com 1062424929 8563 168.100.249.208 (1 Sep 2003 14:02:09 GMT) X-Complaints-To: abuse@panix.com NNTP-Posting-Date: Mon, 1 Sep 2003 14:02:09 +0000 (UTC) User-Agent: Xnews/06.02.16 X-Face: #^=oh~^r5AV^#I3^*+(VAGoCzyvK%%w\/HM"[t&a)rHXo#NR3Z\,"/?_htmx~~gG.>v~+.I|P%it\yFS~TxS($@5b8?Rn]z3N]~!6XL9A&2T}I,]-T/8wH~Ye Xref: uni-berlin.de news.admin.net-abuse.email:2059744 Quoth "Turan Fettahoglu" in news:MgH4b.94838$506.94965@typhoon.bart.nl: >> Please understand that the provider is in the a neutral position. >> We will try to send a warning by written correspondence or e-mail >> if it is possible. >> However, our company is not able to take treatment furthermore. > >> *ZAQ customer center > > Could you publish the ZAQ internet address and/or IP number? I'd love to > put them on my personal blacklist BEFORE their first spam e-mails come > in! Well, judging from the posetd e-mail, here's a start: whois -h whois.nic.ad.jp 219.115.94.124 ... Network Information: a. [Network Number] 219.115.0.0-219.115.187.0 b. [Network Name] JCOM-NET g. [Organization] J-COM Kansai Co., Ltd. m. [Administrative Contact] MN1522JP n. [Technical Contact] MN1522JP p. [Nameserver] dns01.zaq.ne.jp p. [Nameserver] dns02.zaq.ne.jp y. [Reply Mail] unyou@kmsc.co.jp [Assigned Date] 2002/09/06 [Return Date] [Last Update] 2003/05/15 16:50:06 (JST) chdb@kmsc.co.jp === My reply (the IPs that I've found === Path: uni-berlin.de!217.22.112.130!not-for-mail From: Dolphin Newsgroups: news.admin.net-abuse.email Subject: Re: Pleasant Japanese Response: We Are Neutral Date: 1 Sep 2003 15:22:14 GMT Organization: Private person Lines: 54 Sender: Alexander Sheremet Message-ID: References: NNTP-Posting-Host: 217.22.112.130 X-Trace: news.uni-berlin.de 1062429734 14104029 217.22.112.130 (16 [104765]) X-SPEWS: I am not X-newsgroup: news.admin.net-abuse.email X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 User-Agent: slrn/0.9.7.4 (Linux) Xref: uni-berlin.de news.admin.net-abuse.email:2059769 #begin tbetz@pobox.com.exe (or was it Tom Betz.com) message reply: > Quoth "Turan Fettahoglu" in > news:MgH4b.94838$506.94965@typhoon.bart.nl: > >>> Please understand that the provider is in the a neutral position. >>> We will try to send a warning by written correspondence or e-mail >>> if it is possible. >>> However, our company is not able to take treatment furthermore. >> >>> *ZAQ customer center >> >> Could you publish the ZAQ internet address and/or IP number? I'd love to >> put them on my personal blacklist BEFORE their first spam e-mails come >> in! > > Well, judging from the posetd e-mail, here's a start: > > whois -h whois.nic.ad.jp 219.115.94.124 ... $ jwhois 211.124.134.0 [Querying whois.apnic.net] [whois.apnic.net] <...> inetnum: 211.124.0.0 - 211.124.255.255 netname: ZAQ-CIDR-BLK-JP descr: KANSAI MULTIMEDIA SERVICE COMPANY country: JP admin-c: KM3674JP tech-c: KM3674JP jwhois 219.115.188.1 [Querying whois.apnic.net] [whois.apnic.net] <...> inetnum: 219.115.0.0 - 219.115.255.255 netname: ZAQ-CIDR-BLK-JP descr: KANSAI MULTIMEDIA SERVICE COMPANY country: JP admin-c: KM3674JP tech-c: KM3674JP Anybody with more blocks?.. Dolphin. -- URL: http://www.DolphinWave.org Mail: on the web page (no spam) ICQ: 6615461 === Some more data === $ jwhois zaq.ne.jp [Querying whois.nic.ad.jp] [whois.nic.ad.jp] <...> Domain Information: a. [Domain Name] ZAQ.NE.JP d. [Network Service Name] ZAQ INTERNET l. [Organization Type] Network Service m. [Administrative Contact] KM3674JP n. [Technical Contact] KM3674JP p. [Name Server] dns01.zaq.ne.jp p. [Name Server] dns02.zaq.ne.jp y. [Reply Mail] jpnic@kmsc.co.jp [State] Connected (2004/08/31) [Registered Date] 1998/08/21 [Connected Date] 1998/09/24 [Last Update] 2003/09/01 02:19:00 (JST) form@dom.jprs.jp $ jwhois kmsc.co.jp [Querying whois.nic.ad.jp] [whois.nic.ad.jp] <...> Domain Information: a. [Domain Name] KMSC.CO.JP g. [Organization] KANSAI MULTIMEDIA SERVICE COMPANY l. [Organization Type] Company m. [Administrative Contact] KM3674JP n. [Technical Contact] KM3674JP p. [Name Server] ns.kmsc.co.jp p. [Name Server] ns1.kmsc.co.jp y. [Reply Mail] jpnic@kmsc.co.jp [State] Connected (2004/04/30) [Registered Date] 1998/04/30 [Connected Date] 1998/07/13 [Last Update] 2003/05/01 02:10:01 (JST) form@dom.jprs.jp === More of IP ranges === Path: uni-berlin.de!fu-berlin.de!in.100proofnews.com!in.100proofnews.com !prodigy.com!newsmst01.news.prodigy.com!prodigy.com!postmaster.news.prodigy.com !newssvr27.news.prodigy.com.POSTED!d83e6e58!not-for-mail Message-ID: <3F53BE04.1000604@Griffin-Technologies.net> From: E-Mail Sent to this address will be added to the BlackLists Organization: Griffin Technologies (G-Tech) User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.1) Gecko/20020823 Netscape/7.0 X-Accept-Language: en-us, en MIME-Version: 1.0 Newsgroups: news.admin.net-abuse.email Subject: Re: Pleasant Japanese Response: We Are Neutral References: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Lines: 42 NNTP-Posting-Host: 66.248.34.19 X-Complaints-To: abuse@prodigy.net X-Trace: newssvr27.news.prodigy.com 1062452742 ST000 66.248.34.19 (Mon, 01 Sep 2003 17:45:42 EDT) NNTP-Posting-Date: Mon, 01 Sep 2003 17:45:42 EDT X-UserInfo1: O@YORZWGPZVCBFH[OZK@_TDAYZOZ@GXOXZ^L\UQHWIWDUWYADNVOPCKZBL\NX_KHV^GY[KVMG^ZPNH SCZNS[^UXFJVWYXVXKBH[XRWWBBDTN@AX\JSBVH]_@T\EKJHBMZ\_WZJFNRY]YWKSPED_U^NC\HSZ\W S[KEAYI@DO@\K@BP\LD[\GTMPLDFVU]ASJM Date: Mon, 01 Sep 2003 21:45:42 GMT Xref: uni-berlin.de news.admin.net-abuse.email:2059990 Dolphin wrote: > #begin tbetz@pobox.com.exe (or was it Tom Betz.com) > message reply: >>Quoth "Turan Fettahoglu" in >>news:MgH4b.94838$506.94965@typhoon.bart.nl: >> >>>>Please understand that the provider is in the a neutral position. >>>>We will try to send a warning by written correspondence or e-mail >>>>if it is possible. >>>>However, our company is not able to take treatment furthermore. >>> >>>>*ZAQ customer center >>> >>>Could you publish the ZAQ internet address and/or IP number? I'd love to >>>put them on my personal blacklist BEFORE their first spam e-mails come >>>in! >> >>Well, judging from the posetd e-mail, here's a start: > Anybody with more blocks?.. 124.94.115.219.AS9617.rbl.cluecentral.net -> 127.0.0.2 RBL by rbl.cluecentral.net aut-num: AS9617 as-name: ZAQ descr: KANSAI MULTIMEDIA SERVICE COMPANY 61.115.128.0/18 61.115.128.0 - 61.115.191.255 61.125.64.0/18 61.125.64.0 - 61.125.127.255 61.192.0.0/17 61.192.0.0 - 61.192.127.255 61.205.128.0/18 61.205.128.0 - 61.205.191.255 211.120.128.0/18 211.120.128.0 - 211.120.191.255 211.124.0.0/16 211.124.0.0 - 211.124.255.255 211.135.0.0/17 211.135.0.0 - 211.135.127.255 218.220.0.0/16 218.220.0.0 - 218.220.255.255 219.114.192.0/18 219.114.192.0 - 219.114.255.255 219.115.0.0/16 219.115.0.0 - 219.115.255.255 -- E-Mail Sent to this address will be added to the BlackLists