Opt-In Network/Gamma Entertainment: notorious and unstoppable spammers and web harvesters! They also spam/flame guestbooks. Update: 16-Jun-2003: Bellsouth has FINALLY (after what, 1.25 years!) pulled the plug on these abusers. Will I remove the block from [66.21.5.0 - 66.21.5.255]? In a year, maybe... vertcoms.com, oin-1.com, oin2.com, oin3.com, oin20.com, oin60.com, oin71.com, nethydro.com, star-2002.com, brain2002.com, optininc.com, optmails.com, oihost.net, opthost.com, opthome.com, optdns.com, cpm01.com, [65.118.64.0 - 65.118.67.255], [65.123.232.0 - 65.123.233.255], [65.212.106.196], [66.21.5.0 - 66.21.5.255], [66.236.248.0 - 66.236.248.255], [157.238.187.112 - 157.238.187.115], [205.244.70.7], [205.244.78.0 - 205.244.78.255], [205.244.94.0 - 205.244.94.255], [208.26.68.198], [208.176.252.165], [216.25.240.224 - 216.25.240.239], [216.242.35.192 - 216.242.35.223], [216.242.142.32 - 216.242.142.63]: Access denied! === My 1st complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Message-Id: <200203142156.51813@2002.dolphinwave.org> To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, abuse@xo.com, abuse@webunited.net, abuse@sprint.net, abuse@exodus.net, abuse@bellsouth.net, abuse@aibusiness.net, abuse@qwest.net, abuse-noverbose@uu.net Subject: [email] Spam (web harvest: Opt-In Network/Gamma Entertainment)! [Fwd: Friend, IMPORTANT NOTICE!] Date: Fri, 15 Mar 2002 01:29:04 +0200 X-Mailer: KMail [version 1.3.2] X-Sender: dolphin@localhost X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Status: R X-Status: N Spam on my e-mail address, used on the web site only (webmaster@... - role account)! It was NEVER used for ANY kind of subscriptions or anything else (for those I always create tagged e-mail addresses). The spammers' claim that it was opted in to receive such a garbage is a blatant lie! And no, I will NOT unsubscribe from anything that I didn't subscribe to, myself, at the first place! Neither will I help to listwash spammers' lists. Please, terminate spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your spammers will lead your whole IP range to be blocked from accessing my mailservers ever again, and info about it will be shared with other admins and shared blocklists to do likewise. Spammer: mail.star-2002.com [208.176.252.165] Mail from: cpa@STAR-2002.COM Remove box: remove@star-2002.com Spammer's domains: ================== www.optininc.com optweb2.optmails.com optweb2.oihost.net www.usa-benefits.com BRAIN2002.COM OPTHOST.COM OPTHOME.COM mail.star-2002.com [208.176.252.165] ================== Registrant: star-2002.com PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: STAR-2002.COM Administrative Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 13-Mar-2002. Record expires on 14-Jan-2003. Record Created on 14-Jan-2002. Domain servers in listed order: NS1.BRAIN2002.COM 205.244.70.7 XO Communications IP block [208.176.0.0 - 208.177.255.255]. Upstream: XO Communications (ge13-0.CLR1.Miami-FL.us.xo.net). NS1.BRAIN2002.COM [205.244.70.7] ================= Registrant: brain2002.com PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: BRAIN2002.COM Administrative Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 12-Mar-2002. Record expires on 14-Jan-2003. Record Created on 14-Jan-2002. Domain servers in listed order: NS1.BRAIN2002.COM 205.244.70.7 Ciberlynx IP block [205.244.70.0 - 205.244.70.255] which is in the US Sprint IP range [205.240.0.0 - 205.247.255.255]. Upstream: Ciberlynx (rtdfb4.ciberlynx.net). www.optininc.com [216.25.240.231] ================ Registrant: OPTIN INC. (OPTININC-DOM) 2101 NW Corporate Blvd. Suite 102 Boca Raton, FL 33431 US Domain Name: OPTININC.COM Administrative Contact, Technical Contact, Billing Contact: Network Administrator (NA4443-ORG) optsubscribe@AOL.COM Optin, Inc. 2101 N.W. Corporate Blvd., Suite 102 Boca Raton FL 33431 US 561.498.2422 Fax- 561.498.9422 Record last updated on 18-Dec-2001. Record expires on 04-Feb-2003. Record created on 04-Feb-1999. Database last updated on 14-Mar-2002 03:21:00 EST. Domain servers in listed order: NS1.OPTHOST.COM 66.21.5.90 NS2.OPTHOST.COM 208.26.68.198 Brian Carpenter IP block [216.25.240.224 - 216.25.240.239] which is in the Exodus IP range [216.25.224.0 - 216.25.255.255]. Upstream: Exodus (csr01-ve243.atln01.exodus.net). NS1.OPTHOST.COM [66.21.5.90] =============== Registrant: Optin Inc (OPTHOST3-DOM) 2101 NW Corporate Blvd. Suite 102 Boca Raton, FL 33431 US Domain Name: OPTHOST.COM Administrative Contact, Technical Contact, Billing Contact: Hardigreg, Steve (MROVEQEMLI) networkadmin@OPTININC.COM Electronic Sweepstakes Corp. 2101 NW Corporate Blvd. Suite 102 Boca Raton, FL 33431 US 561 498 2422 Record last updated on 27-Dec-2001. Record expires on 02-Nov-2003. Record created on 02-Nov-2001. Database last updated on 14-Mar-2002 03:21:00 EST. Domain servers in listed order: NS1.OPTHOST.COM 66.21.5.90 NS2.OPTHOST.COM 208.26.68.198 Bellsouth.net IP block [66.20.0.0 - 66.21.255.255]. NS2.OPTHOST.COM [208.26.68.198] =============== Eminet IP block [208.26.64.0 - 208.26.79.255]. Upstream: Eminet (208.235.101.122). optweb2.optmails.com [65.118.67.238] ==================== Registrant: Optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: OPTMAILS.COM Administrative Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 14-Mar-2002. Record expires on 12-Dec-2002. Record Created on 12-Dec-2001. Domain servers in listed order: NS1.OPTHOME.COM 216.242.35.218 NS2.OPTHOME.COM 65.212.106.196 OPTIN INC IP block [65.118.64.0 - 65.118.67.255] which is in the Qwest IP range [65.112.0.0 - 65.125.255.255]. Upstream: Qwest (tpa-edge-09.inet.qwest.net). optweb2.oihost.net [65.118.67.238] ================== Registrant: OPTIN INC (OIHOST2-DOM) 2101 NW Corporate Blvd., Suite 102 BOCA RATON, FL 33431 US Domain Name: OIHOST.NET Administrative Contact, Technical Contact: Network Administrator (NA4443-ORG) optsubscribe@AOL.COM Optin, Inc. 2101 N.W. Corporate Blvd., Suite 102 Boca Raton FL 33431 US 561.498.2422 Fax- 561.498.9422 Billing Contact: OPTIN INC (X9298-OR) optserve@aol.com OPTIN INC 2101 NW Corporate Blvd., Suite 102 BOCA RATON, FL 33431 US 5614982422 fax: 5614989422 Record last updated on 18-Dec-2001. Record expires on 30-Mar-2002. Record created on 30-Mar-2001. Database last updated on 14-Mar-2002 03:21:00 EST. Domain servers in listed order: NS1.OPTHOST.COM 66.21.5.90 NS2.OPTHOST.COM 208.26.68.198 OPTIN INC IP block [65.118.64.0 - 65.118.67.255] which is in the Qwest IP range [65.112.0.0 - 65.125.255.255]. Upstream: Qwest (tpa-edge-09.inet.qwest.net). NS1.OPTHOME.COM [216.242.35.218] =============== Registrant: Opthome PO Box 810052 Boca Raton, Florida 33481-0052 US Domain Name: OPTHOME.COM Administrative Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Technical Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Billing Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Record last updated on 14-Mar-2002. Record expires on 26-Nov-2002. Record Created on 26-Nov-2001. Domain servers in listed order: NS1.OPTHOME.COM 216.242.35.218 NS2.OPTHOME.COM 65.212.106.196 Heintzelman Truck Center IP block [216.242.35.192 - 216.242.35.223] which is in the Ciberlynx IP range [216.242.0.0 - 216.242.255.255]. Upstream: Ciberlynx (216.242.4.197). NS2.OPTHOME.COM [65.212.106.196] =============== UUNET IP block [65.192.0.0 - 65.223.255.255]. Upstream: UUNET (0.so-4-2-0.XL1.MIA4.ALTER.NET). www.usa-benefits.com [216.242.227.17] ==================== Registrant: Mark Theodore 555 SW 12th Avenue Suite 108 Pompano Beach FL 33069 United States -- US Administrative: Mark Theodore - markt@thelistcompany.com 555 SW 12th Avenue Suite 108 Pompano Beach FL 33069 United States -- US 954.943.2580 954.943.3320 Technical: Mark Theodore - markt@thelistcompany.com 555 SW 12th Avenue Suite 108 Pompano Beach FL 33069 United States -- US 954.943.2580 954.943.3320 Billing: Mark Theodore - markt@thelistcompany.com 555 SW 12th Avenue Suite 108 Pompano Beach FL 33069 United States -- US 954.943.2580 954.943.3320 Name Servers: NS2.GCIGLOBAL.COM NSDOI.GCIGLOBAL.COM Created: 01/24/2001 Expiration: 01/24/2003 Ciberlynx IP block [216.242.0.0 - 216.242.255.255]. Upstream: Ciberlynx (rtdfb4.ciberlynx.net). ---------- Forwarded Message ---------- Return-Path: Received: from =MY=SECONDARY=MX= (=MY=SECONDARY=MX=) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g2E2ldH16916 for ; Thu, 14 Mar 2002 04:47:46 +0200 Received: from lsmail10.vertcoms.com (mail.star-2002com [208.176.252.165] (may be forged)) by =MY=SECONDARY=MX= (8.12.2/8.12.2) with ESMTP id g2E2kxho000939 for ; Thu, 14 Mar 2002 03:47:03 +0100 (CET) (envelope-from cpa@STAR-2002.COM) Message-Id: <200203140247.g2E2kxho000939@=MY=SECONDARY=MX=> X-MDaemon-Deliver-To: X-Spam-Header: Spam.site.208.176.252.165;-.see:http://www.spamcop.net/w3m?action=checkblock&ip=.208.176.252.165 X-Authentication-Warning: =MY=SECONDARY=MX=: Host mail.star-2002com [208.176.252.165] (may be forged) claimed to be lsmail10.vertcoms.com Received: from tyco (tyco.star-2002.com) by lsmail10.vertcoms.com (LSMTP for Windows NT v1.1b) with SMTP id <32.00000467@lsmail10.vertcoms.com>; Wed, 13 Mar 2002 18:47:28 -0500 Date: Wed, 13 Mar 2002 18:24:27 -0500 From: Gamma Entertainment Subject: Friend, IMPORTANT NOTICE! To: webmaster@##### Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="#######-####-####-####-##########OPTIN" Status: R X-Status: N Dear Friend, You'll recall that, per our TOS (Terms of Service), you wisely agreed to receive third party promotions from our network's preferred affiliates. So we now have the pleasure of introducing you to a few of the benefits you can expect from The Opt in Network(TM). The Opt in Network(TM) is a FREE service devoted to bringing its members the most exclusive promotions on the Web. (You'll quickly see that The Opt in Network(TM) will respect your "mind share" by limiting opportunities sent to you only to the "best of the best.") Let us extend a warm welcome by offering you a 3 day/2 night vacation to either Las Vegas, NV, Orlando, FL, or Ft. Lauderdale, FL, at one of the Ramada Plaza Resorts or its affiliated properties. Click here to cash in your certificate and start planning your mini-vacation now. http://optweb2.optmails.com/redir.jsp?oin=#####&t=# Your Membership not only has its privileges, it's just a click away! We encourage you to find out why tens of millions of members can't be wrong. Warmest regards, Your friends at Gamma Entertainment ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ This email is not sent unsolicited. This is an Opt-In Network mailing! This message is sent to subscribers ONLY. The e-mail subscription address is: webmaster@##### To unsubscribe please click the link below http://optweb1.optmails.com/cpa/remove.jsp?email=webmaster@##### or Send an email with the word 'remove' in the subject line to remove@star-2002.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ #######-####-####-####-######## ------------------------------------------------------- OPT IN INC
Friend,

You'll recall that, per our TOS (Terms of Service), you wisely agreed to receive third party promotions from our network's preferred affiliates. So we now have the pleasure of introducing you to a few of the benefits you can expect from The Opt in NetworkTM.

The Opt in NetworkTM is a FREE service devoted to bringing its members the most exclusive promotions on the Web. (You'll quickly see that The Opt in NetworkTMwill respect your "mind share" by limiting opportunities sent to you only to the "best of the best.")

Let us extend a warm welcome by offering you a 3 day/2 night vacation to either Las Vegas, NV, Orlando, FL, or Ft. Lauderdale, FL, at one of the Ramada Plaza Resorts or its affiliated properties. Click here to cash in your certificate and start planning your mini-vacation now.


Click Here For Your Complimentary Vacation


Your Membership not only has its privileges, it's just a click away! We encourage you to find out why tens of millions of members can't be wrong.

Warmest regards,

Your Friends at Gamma Entertainment

 
 
 
 
 
 
 
 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

This email is not sent unsolicited. This is an Opt-In Network mailing!
This message is sent to subscribers ONLY.

The e-mail subscription address is: webmaster@#####

To unsubscribe please click here.
or
Send an email with the word 'remove' in the subject line to remove@star-2002.com

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
######-####-####-####-#######
=== Another spamming attempt, Sendmail logs (GMT+0300) === May 4 02:54:36 orca sendmail[25271]: g43Nsas25271: ruleset=check_relay, arg1=lsmail4.vertcoms.com, arg2=65.118.67.252, relay=lsmail4.vertcoms.com [65.118.67.252], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 4 02:54:42 orca sendmail[25271]: NOQUEUE: lsmail4.vertcoms.com [65.118.67.252] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 === My 2nd complaint === Content-Type: text/plain; charset="iso-8859-15" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Message-Id: <200205041504.22636@2002.dolphinwave.org> To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, abuse@sprint.net, abuse@webunited.net, abuse@exodus.net, abuse@bellsouth.net, abuse@aibusiness.net, qwest.net@bitch-list.net, abuse-noverbose@uu.net Subject: [email] Long-time spammers, Opt-In Network: Qwest/UUNET/Bellsouth/Eminet/Ciberlynx! Date: Sat, 4 May 2002 15:43:54 +0300 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Status: RO X-Status: S Today my mailserver has logged another spamming attempt from the known spammers and web harvesters, Opt-In Network (bounced against my deny list)! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Spammer: lsmail4.vertcoms.com [65.118.67.252] Date: May 4 2002, 02:54:36 +0300 === Sendmail logs (GMT+0300) === May 4 02:54:36 orca sendmail[25271]: g43Nsas25271: ruleset=check_relay, arg1=lsmail4.vertcoms.com, arg2=65.118.67.252, relay=lsmail4.vertcoms.com [65.118.67.252], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 4 02:54:42 orca sendmail[25271]: NOQUEUE: lsmail4.vertcoms.com [65.118.67.252] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Spammer's domains: ================== vertcoms.com star-2002.com <== DEAD BRAIN2002.COM optininc.com optmails.com oihost.net <== DEAD OPTHOST.COM OPTHOME.COM lsmail4.vertcoms.com [65.118.67.252] ==================== Registrant: vertcoms PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: VERTCOMS.COM Administrative Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 20-Mar-2002. Record expires on 17-Feb-2003. Record Created on 17-Feb-2002. Domain servers in listed order: NS1.VERTCOMS.COM 65.118.67.250 OPTIN INC IP block [65.118.64.0 - 65.118.67.255] which is in the Qwest IP range [65.112.0.0 - 65.125.255.255]. Upstream: Qwest (tpa-edge-09.inet.qwest.net). NS1.BRAIN2002.COM [205.244.70.7] ================= Registrant: brain2002.com PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: BRAIN2002.COM Administrative Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 20-Mar-2002. Record expires on 14-Jan-2003. Record Created on 14-Jan-2002. Domain servers in listed order: NS1.BRAIN2002.COM 205.244.70.7 Ciberlynx IP block [205.244.70.0 - 205.244.70.255] which is in the US Sprint IP range [205.240.0.0 - 205.247.255.255]. Upstream: Ciberlynx (rtdfb4.ciberlynx.net). www.optininc.com [216.25.240.231] ================ Registrant: OptIn, Inc. 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US Domain Name: OPTININC.COM Administrative Contact: Admin, Domain postmaster@optdns.com 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US 561-498-2422 Technical Contact: Admin, Domain postmaster@optdns.com 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US 561-498-2422 Billing Contact: Admin, Domain postmaster@optdns.com 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US 561-498-2422 Record last updated on 24-Apr-2002. Record expires on 04-Feb-2004. Record Created on 04-Feb-1999. Domain servers in listed order: NS1.VERIOPT.COM 66.21.5.90 NS2.VERIOPT.COM 216.242.35.218 Brian Carpenter IP block [216.25.240.224 - 216.25.240.239] which is in the Exodus IP range [216.25.224.0 - 216.25.255.255]. Upstream: Exodus (csr01-ve243.atln01.exodus.net). optweb2.optmails.com [65.118.67.238] ==================== Registrant: Optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: OPTMAILS.COM Administrative Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 20-Mar-2002. Record expires on 12-Dec-2002. Record Created on 12-Dec-2001. Domain servers in listed order: NS1.OPTHOME.COM 216.242.35.218 NS2.OPTHOME.COM 65.212.106.196 OPTIN INC IP block [65.118.64.0 - 65.118.67.255] which is in the Qwest IP range [65.112.0.0 - 65.125.255.255]. Upstream: Qwest (tpa-edge-09.inet.qwest.net). NS1.OPTHOST.COM [66.21.5.90] =============== Registrant: Optin Inc (OPTHOST3-DOM) 2101 NW Corporate Blvd. Suite 102 Boca Raton, FL 33431 US Domain Name: OPTHOST.COM Administrative Contact, Technical Contact: Hardigreg, Steve (MROVEQEMLI) networkadmin@OPTININC.COM Electronic Sweepstakes Corp. 2101 NW Corporate Blvd. Suite 102 Boca Raton, FL 33431 US 561 498 2422 Record expires on 02-Nov-2003. Record created on 02-Nov-2001. Database last updated on 4-May-2002 08:27:35 EDT. Domain servers in listed order: NS1.OPTHOST.COM 66.21.5.90 NS2.OPTHOST.COM 208.26.68.198 Bellsouth.net IP block [66.20.0.0 - 66.21.255.255]. Upstream: Bellsouth (205.152.144.133) NS2.OPTHOST.COM [208.26.68.198] =============== Eminet IP block [208.26.64.0 - 208.26.79.255] which is in the Sprint IP range [208.0.0.0 - 208.35.255.255]. Upstream: Eminet (208.235.101.122). NS1.OPTHOME.COM [216.242.35.218] =============== Registrant: Opthome PO Box 810052 Boca Raton, Florida 33481-0052 US Domain Name: OPTHOME.COM Administrative Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Technical Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Billing Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Record last updated on 20-Mar-2002. Record expires on 26-Nov-2002. Record Created on 26-Nov-2001. Domain servers in listed order: NS1.OPTHOME.COM 216.242.35.218 NS2.OPTHOME.COM 65.212.106.196 Optin Inc IP block [216.242.35.192 - 216.242.35.223] which is in the Ciberlynx IP range [216.242.0.0 - 216.242.255.255]. Upstream: Ciberlynx (216.242.4.197). NS2.OPTHOME.COM [65.212.106.196] =============== UUNET IP block [65.192.0.0 - 65.223.255.255]. Upstream: UUNET (0.so-4-2-0.XL1.MIA4.ALTER.NET). === Previous spam was === [previous spam snipped] === Yet another spam from Opt-In Network === Received: from lsmail8.nethydro.com (lsmail8.oin-1.com [216.242.142.57] (may be forged)) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g46NCgs02644 for ; Tue, 7 May 2002 02:12:43 +0300 Message-Id: <200205062312.g46NCgs02644@mail.dolphinwave.org> Received: from cpaserv (216.242.142.54) by lsmail8.nethydro.com (LSMTP for Windows NT v1.1b) with SMTP id <29.0000045E@lsmail8.nethydro.com>; Mon, 6 May 2002 18:07:40 -0400 Date: Mon, 6 May 2002 18:07:09 -0400 From: Special Offer Subject: Get PAID To SHOP and EAT!! To: webmaster@### Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="########-####-####-####-#######0OPTIN" Status: R X-Status: N ************************************************ Get PAID to SHOP & Get PAID to EAT!! Click Here NOW: http://optweb2.optmails.com/redir.jsp?oin=###.########&t=1 AOL Members: Click Here! ************************************************ You Can Get Paid $10 to $40 an hour to: - Shop Online! - Eat at Your Favorite Restaurants! - Go To The Greatest Amusement Parks! - Play The Newest Golf Courses! - See The Latest Movie Releases! That's right, you not only get all your purchases for FREE, you get paid for making them, and you can even get reimbursed for related travel expenses!! Start Getting A Paycheck For Shopping And Eating Out Today! Click Here NOW: http://optweb2.optmails.com/redir.jsp?oin=###.########&t=1 AOL Members: Click Here! ************************************************ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ This email is not sent unsolicited. This is an Opt-In Network mailing! This message is sent to subscribers ONLY. The e-mail subscription address is: webmaster@### To unsubscribe please click the link below http://optweb1.optmails.com/cpa/remove.jsp?email=webmaster@### or Send an email with the word 'remove' in the subject line to remove@nethydro.com Or you may mail us at: PO BOX 810052 Boca Raton, Fl 33481-0052 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ########-####-####-####-############ === My complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Message-Id: <200205070533.28269@2002.dolphinwave.org> To: To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, abuse@sprint.net, abuse@webunited.net, abuse@exodus.net, abuse@bellsouth.net, abuse@aibusiness.net, qwest.net@bitch-list.net, abuse-noverbose@uu.net, broadwing.net@bitch-list.net, abuse@clickbank.com, postmaster@clickbank.net Subject: [email] And even more spam from Opt-In Networks spammers! [Fwd: Get PAID To SHOP and EAT!!] Date: Tue, 7 May 2002 05:59:16 +0300 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Status: RO X-Status: S And even more spam from these persistent spammers, Opt-In Networks, who spam my webmaster@ role account, used on the web page ONLY, and never used anywhere else, especially NOT for subscribing to anything (I create special tagged mailboxes when I subscribe to something)! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Spammer: cpaserv.oin-1.com [216.242.142.54] SMTP: lsmail8.oin-1.com [216.242.142.57] Mail from: cpa@NETHYDRO.COM Remove box: remove@nethydro.com Spamvertised web pages: http://optweb2.optmails.com/ http://216.242.142.34/ Redirect to: http://hop.clickbank.net/?optincss/sshopgh Which redirects to: http://www.secret-shoppers.com/index_gh.html?hop=optincss.sshopgh Other spammer's domains: ======================== vertcoms.com star-2002.com <== DEAD BRAIN2002.COM optininc.com optmails.com oihost.net <== DEAD OPTHOST.COM OPTHOME.COM www.secret-shoppers.com [65.88.73.37] (65.88.73.37.svwh.net) ======================= Organization: Frontline Direct Marketing Steven Pearman 45-934 Kam Hwy, Suite C PMB 280 Kaneohe, HI 96744 US Phone: 310-779-5264 Email: info@frontlinedm.com Registrar Name....: Register.com Registrar Whois...: whois.register.com Registrar Homepage: http://www.register.com Domain Name: SECRET-SHOPPERS.COM Created on..............: Thu, Feb 21, 2002 Expires on..............: Fri, Feb 21, 2003 Record last updated on..: Thu, Feb 21, 2002 Administrative Contact: Frontline Direct Marketing Steven Pearman 45-934 Kam Hwy, Suite C PMB 280 Kaneohe, HI 96744 US Phone: 310-779-5264 Email: info@frontlinedm.com Technical Contact, Zone Contact: Register.Com Domain Registrar 575 8th Avenue - 11th Floor New York, NY 10018 US Phone: 902-749-2701 Fax..: 902-749-5429 Email: domain-registrar@register.com Domain servers in listed order: ARRAKIS.SVWH.NET 209.133.1.96 TUPILE.SVWH.NET 63.209.26.6 GIEDI-PRIME.SVWH.NET 209.133.1.97 Silicon Valley Web Host IP block [65.88.72.0 - 65.88.75.255]. Upstream: Broadwing (v2.r0.dc.sntc.broadwing.net). frontlinedm.com [65.88.73.37] (65.88.73.37.svwh.net) =============== Organization: Frontline Direct Marketing Steven Pearman 45-934 Kam Hwy, Suite C PMB 280 Kaneohe, HI 96744 US Phone: 310-779-5264 Email: info@frontlinedm.com Registrar Name....: Register.com Registrar Whois...: whois.register.com Registrar Homepage: http://www.register.com Domain Name: FRONTLINEDM.COM Created on..............: Fri, Jan 11, 2002 Expires on..............: Sat, Jan 11, 2003 Record last updated on..: Thu, Feb 14, 2002 Administrative Contact: Frontline Direct Marketing Steven Pearman 45-934 Kam Hwy, Suite C PMB 280 Kaneohe, HI 96744 US Phone: 310-779-5264 Email: info@frontlinedm.com Technical Contact: Frontline Direct Marketing Steven Pearman 45-934 Kam Hwy, Suite C PMB 280 Kaneohe, HI 96744 US Phone: 310-779-5264 Email: info@frontlinedm.com Zone Contact: Frontline Direct Marketing Steven Pearman 45-934 Kam Hwy, Suite C PMB 280 Kaneohe, HI 96744 US Phone: 310-779-5264 Email: info@frontlinedm.com Domain servers in listed order: ARRAKIS.SVWH.NET 209.133.1.96 TUPILE.SVWH.NET 63.209.26.6 GIEDI-PRIME.SVWH.NET 209.133.1.97 Silicon Valley Web Host IP block [65.88.72.0 - 65.88.75.255]. Upstream: Broadwing (v2.r0.dc.sntc.broadwing.net). cpaserv.oin-1.com [216.242.142.54] ================= Registrant: OIN PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: OIN-1.COM Administrative Contact: Admin, Domain postmaster@oin-1.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@nethydro.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@oin-1.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 06-May-2002. Record expires on 06-May-2003. Record Created on 06-May-2002. Domain servers in listed order: NS1.OIN-1.COM 216.242.142.53 NS2.OIN-1.COM 216.242.35.218 Hot Tixx IP block [216.242.142.32 - 216.242.142.63] which is in the Ciberlynx P range [216.242.0.0 - 216.242.255.255]. Upstream: Ciberlynx (rtdfb3.ciberlynx.net) Their upstream: Sprint (sl-ciberlynxinc-48-0-0.sprintlink.net). NS1.nethydro.com [216.242.142.53] ================ Registrant: nethydro PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: NETHYDRO.COM Administrative Contact: Admin, Domain postmaster@nethydro.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@nethydro.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@nethydro.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 10-Apr-2002. Record expires on 04-Apr-2003. Record Created on 04-Apr-2002. Domain servers in listed order: NS1.NETHYDRO.COM 216.242.142.53 Hot Tixx IP block [216.242.142.32 - 216.242.142.63] which is in the Ciberlynx P range [216.242.0.0 - 216.242.255.255]. Upstream: Ciberlynx (rtdfb3.ciberlynx.net) Their upstream: Sprint (sl-ciberlynxinc-48-0-0.sprintlink.net). raider.nethydro.com [65.118.67.227] (raider.vertcoms.com) =================== OPTIN INC IP block [65.118.64.0 - 65.118.67.255] which is in the Qwest IP range [65.112.0.0 - 65.125.255.255]. Upstream: Qwest (tpa-edge-09.inet.qwest.net). lsmail4.vertcoms.com [65.118.67.252] ==================== Registrant: vertcoms PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: VERTCOMS.COM Administrative Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 20-Mar-2002. Record expires on 17-Feb-2003. Record Created on 17-Feb-2002. Domain servers in listed order: NS1.VERTCOMS.COM 65.118.67.250 OPTIN INC IP block [65.118.64.0 - 65.118.67.255] which is in the Qwest IP range [65.112.0.0 - 65.125.255.255]. Upstream: Qwest (tpa-edge-09.inet.qwest.net). NS1.BRAIN2002.COM [205.244.70.7] ================= Registrant: brain2002.com PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: BRAIN2002.COM Administrative Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 20-Mar-2002. Record expires on 14-Jan-2003. Record Created on 14-Jan-2002. Domain servers in listed order: NS1.BRAIN2002.COM 205.244.70.7 Ciberlynx IP block [205.244.70.0 - 205.244.70.255] which is in the US Sprint IP range [205.240.0.0 - 205.247.255.255]. Upstream: Ciberlynx (rtdfb4.ciberlynx.net). www.optininc.com [216.25.240.231] ================ Registrant: OptIn, Inc. 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US Domain Name: OPTININC.COM Administrative Contact: Admin, Domain postmaster@optdns.com 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US 561-498-2422 Technical Contact: Admin, Domain postmaster@optdns.com 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US 561-498-2422 Billing Contact: Admin, Domain postmaster@optdns.com 2101 NW Corporate Blvd #102 Boca Raton, FL 33431 US 561-498-2422 Record last updated on 24-Apr-2002. Record expires on 04-Feb-2004. Record Created on 04-Feb-1999. Domain servers in listed order: NS1.VERIOPT.COM 66.21.5.90 NS2.VERIOPT.COM 216.242.35.218 Brian Carpenter IP block [216.25.240.224 - 216.25.240.239] which is in the Exodus IP range [216.25.224.0 - 216.25.255.255]. Upstream: Exodus (csr01-ve243.atln01.exodus.net). optweb2.optmails.com [65.118.67.238] ==================== Registrant: Optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US Domain Name: OPTMAILS.COM Administrative Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Technical Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Billing Contact: Admin, Domain postmaster@optmails.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-555-1212 Record last updated on 20-Mar-2002. Record expires on 12-Dec-2002. Record Created on 12-Dec-2001. Domain servers in listed order: NS1.OPTHOME.COM 216.242.35.218 NS2.OPTHOME.COM 65.212.106.196 OPTIN INC IP block [65.118.64.0 - 65.118.67.255] which is in the Qwest IP range [65.112.0.0 - 65.125.255.255]. Upstream: Qwest (tpa-edge-09.inet.qwest.net). NS1.OPTHOST.COM [66.21.5.90] =============== Registrant: Optin Inc (OPTHOST3-DOM) 2101 NW Corporate Blvd. Suite 102 Boca Raton, FL 33431 US Domain Name: OPTHOST.COM Administrative Contact, Technical Contact: Hardigreg, Steve (MROVEQEMLI) networkadmin@OPTININC.COM Electronic Sweepstakes Corp. 2101 NW Corporate Blvd. Suite 102 Boca Raton, FL 33431 US 561 498 2422 Record expires on 02-Nov-2003. Record created on 02-Nov-2001. Database last updated on 4-May-2002 08:27:35 EDT. Domain servers in listed order: NS1.OPTHOST.COM 66.21.5.90 NS2.OPTHOST.COM 208.26.68.198 Bellsouth.net IP block [66.20.0.0 - 66.21.255.255]. Upstream: Bellsouth (205.152.144.133) NS2.OPTHOST.COM [208.26.68.198] =============== Eminet IP block [208.26.64.0 - 208.26.79.255] which is in the Sprint IP range [208.0.0.0 - 208.35.255.255]. Upstream: Eminet (208.235.101.122). NS1.OPTHOME.COM [216.242.35.218] =============== Registrant: Opthome PO Box 810052 Boca Raton, Florida 33481-0052 US Domain Name: OPTHOME.COM Administrative Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Technical Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Billing Contact: Home, Opt postmaster@opthome.com PO Box 810052 Boca Raton, Florida 33481-0052 US 888-880-6556 Record last updated on 20-Mar-2002. Record expires on 26-Nov-2002. Record Created on 26-Nov-2001. Domain servers in listed order: NS1.OPTHOME.COM 216.242.35.218 NS2.OPTHOME.COM 65.212.106.196 Optin Inc IP block [216.242.35.192 - 216.242.35.223] which is in the Ciberlynx IP range [216.242.0.0 - 216.242.255.255]. Upstream: Ciberlynx (216.242.4.197). NS2.OPTHOME.COM [65.212.106.196] =============== UUNET IP block [65.192.0.0 - 65.223.255.255]. Upstream: UUNET (0.so-4-2-0.XL1.MIA4.ALTER.NET). ======= PREVIOUS SPAMS WERE ======= [Previous spam snipped] === And the spamming continues daily, sometimes - several times a day === === My another complaint === Content-Type: text/plain; charset="iso-8859-15" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Message-Id: <200205271133.2519@2002.dolphinwave.org> To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, qwest.net@bitch-list.net, abuse-noverbose@uu.net, abuse@bellsouth.net, noelc@ciberlynx.net, netadm@CIBERLYNX.NET, abuse@webunited.net, abuse@sprint.net, noc@aibusiness.net, abuse@aibusiness.net, postmaster@aibusiness.net, abuse@exodus.net, hostmaster@EXODUS.NET Subject: [email] Persistent unstoppable spammers: Opt-In Network! Date: Mon, 27 May 2002 12:36:31 +0300 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Status: RO X-Status: S These spammers were spamming my e-mail addresses, harvested from the web and they keep trying to spam me many times a day, despite on my rejects! Their previous spamming activity and my complaints are archived there: http://www.DolphinWave.org/spam/opt-in_network.txt Please, terminate these abuser's accounts as soon as possible! Thanks! ======= ======= Sendmail logs (GMT+0300) ======= May 4 02:54:36 orca sendmail[25271]: g43Nsas25271: ruleset=check_relay, arg1=lsmail4.vertcoms.com, arg2=65.118.67.252, relay=lsmail4.vertcoms.com [65.118.67.252], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 4 02:54:42 orca sendmail[25271]: NOQUEUE: lsmail4.vertcoms.com [65.118.67.252] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 4 20:14:04 orca sendmail[1330]: g44HE3s01330: ruleset=check_relay, arg1=lsmail3.vertcoms.com, arg2=65.118.67.251, relay=lsmail3.vertcoms.com [65.118.67.251], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 4 20:14:13 orca sendmail[1330]: NOQUEUE: lsmail3.vertcoms.com [65.118.67.251] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 5 21:53:28 orca sendmail[19565]: g45IrRs19565: ruleset=check_relay, arg1=lsmail3.vertcoms.com, arg2=65.118.67.251, relay=lsmail3.vertcoms.com [65.118.67.251], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 5 21:53:42 orca sendmail[19565]: NOQUEUE: lsmail3.vertcoms.com [65.118.67.251] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 8 02:17:07 orca sendmail[18400]: g47NH6s18400: ruleset=check_relay, arg1=lsmail8.oin-1.com, arg2=216.242.142.57, relay=lsmail8.oin-1.com [216.242.142.57], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 8 02:17:47 orca sendmail[18400]: NOQUEUE: lsmail8.oin-1.com [216.242.142.57] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 9 18:12:56 orca sendmail[7160]: g49FCts07160: ruleset=check_relay, arg1=[216.242.142.50], arg2=216.242.142.50, relay=[216.242.142.50], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 9 18:12:58 orca sendmail[7160]: NOQUEUE: [216.242.142.50] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 10 02:37:12 orca sendmail[9575]: g49NbAs09575: ruleset=check_relay, arg1=lsmail8.oin-1.com, arg2=216.242.142.57, relay=lsmail8.oin-1.com [216.242.142.57], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 10 02:38:13 orca sendmail[9578]: g49NcCs09578: ruleset=check_rcpt, arg1=, relay=[212.117.155.34], reject=554 5.0.0 Mailbox unavailable - dolphin@eilatcity.co.il is disabled, look at the http://www.DolphinWave.org for a new address -- May 11 01:14:28 orca sendmail[18644]: g4AMESs18644: ruleset=check_relay, arg1=lsmail6.oin-1.com, arg2=216.242.142.55, relay=lsmail6.oin-1.com [216.242.142.55], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 11 01:15:01 orca sendmail[18644]: NOQUEUE: lsmail6.oin-1.com [216.242.142.55] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 12 00:56:50 orca sendmail[30413]: g4BLuns30413: ruleset=check_relay, arg1=lsmail8.oin-1.com, arg2=216.242.142.57, relay=lsmail8.oin-1.com [216.242.142.57], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 12 00:57:01 orca sendmail[30413]: NOQUEUE: lsmail8.oin-1.com [216.242.142.57] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 13 04:43:10 orca sendmail[12642]: g4D1hA112642: ruleset=check_relay, arg1=lsmail6.oin-1.com, arg2=216.242.142.55, relay=lsmail6.oin-1.com [216.242.142.55], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 13 04:43:11 orca sendmail[12642]: NOQUEUE: lsmail6.oin-1.com [216.242.142.55] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 14 05:10:58 orca sendmail[30039]: g4E2Aq130039: ruleset=check_relay, arg1=lsmail8.oin-1.com, arg2=216.242.142.57, relay=lsmail8.oin-1.com [216.242.142.57], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 14 05:12:37 orca sendmail[30039]: NOQUEUE: lsmail8.oin-1.com [216.242.142.57] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 15 02:30:48 orca sendmail[4240]: g4ENUm104240: ruleset=check_relay, arg1=lsmail7.oin-1.com, arg2=216.242.142.56, relay=lsmail7.oin-1.com [216.242.142.56], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 15 02:31:08 orca sendmail[4240]: NOQUEUE: lsmail7.oin-1.com [216.242.142.56] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 16 01:38:44 orca sendmail[2636]: g4FMchU02636: ruleset=check_relay, arg1=lsmail6.oin-1.com, arg2=216.242.142.55, relay=lsmail6.oin-1.com [216.242.142.55], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 16 01:39:15 orca sendmail[2636]: NOQUEUE: lsmail6.oin-1.com [216.242.142.55] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 18 12:50:34 orca sendmail[21654]: g4I9oXV21654: ruleset=check_relay, arg1=lsmail8.oin2.com, arg2=65.118.64.253, relay=lsmail8.oin2.com [65.118.64.253], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 18 12:50:36 orca sendmail[21654]: NOQUEUE: lsmail8.oin2.com [65.118.64.253] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 19 00:54:53 orca sendmail[26098]: g4ILsqV26098: ruleset=check_relay, arg1=lsmail7.oin2.com, arg2=65.118.64.252, relay=lsmail7.oin2.com [65.118.64.252], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 19 00:55:30 orca sendmail[26098]: NOQUEUE: lsmail7.oin2.com [65.118.64.252] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 20 23:35:59 orca sendmail[18673]: g4KKZwV18673: ruleset=check_relay, arg1=lsmail9.oin2.com, arg2=65.118.64.242, relay=lsmail9.oin2.com [65.118.64.242], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 20 23:36:10 orca sendmail[18673]: NOQUEUE: lsmail9.oin2.com [65.118.64.242] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 22 01:26:19 orca sendmail[31806]: g4LMQJV31806: ruleset=check_relay, arg1=lsmail9.oin2.com, arg2=65.118.64.242, relay=lsmail9.oin2.com [65.118.64.242], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 22 01:26:31 orca sendmail[31806]: NOQUEUE: lsmail9.oin2.com [65.118.64.242] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 23 02:45:32 orca sendmail[8300]: g4MNjWV08300: ruleset=check_relay, arg1=lsmail8.oin2.com, arg2=65.118.64.253, relay=lsmail8.oin2.com [65.118.64.253], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 23 02:45:54 orca sendmail[8300]: NOQUEUE: lsmail8.oin2.com [65.118.64.253] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 24 00:54:39 orca sendmail[3636]: g4NLsdQ03636: ruleset=check_relay, arg1=lsmail2.vertcoms.com, arg2=65.118.67.228, relay=lsmail2.vertcoms.com [65.118.67.228], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 24 00:55:52 orca sendmail[3636]: NOQUEUE: lsmail2.vertcoms.com [65.118.67.228] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 25 17:02:32 orca sendmail[25670]: g4PE2VQ25670: ruleset=check_relay, arg1=lsmail6.oin2.com, arg2=65.118.64.251, relay=lsmail6.oin2.com [65.118.64.251], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 25 17:02:34 orca sendmail[25670]: NOQUEUE: lsmail6.oin2.com [65.118.64.251] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 26 04:46:02 orca sendmail[5996]: g4Q1k2Q05996: ruleset=check_relay, arg1=lsmail6.oin2.com, arg2=65.118.64.251, relay=lsmail6.oin2.com [65.118.64.251], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 26 04:46:05 orca sendmail[5996]: NOQUEUE: lsmail6.oin2.com [65.118.64.251] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- May 27 08:19:37 orca sendmail[16082]: g4R5JbQ16082: ruleset=check_relay, arg1=lsmail7.oin2.com, arg2=65.118.64.252, relay=lsmail7.oin2.com [65.118.64.252], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt May 27 08:19:42 orca sendmail[16082]: NOQUEUE: lsmail7.oin2.com [65.118.64.252] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Spammers' domains, used in spams: ================================= lsmail9.oin2.com [65.118.64.242] - Qwest IP range [65.112.0.0-65.125.255.255] lsmail6.oin2.com [65.118.64.251] lsmail7.oin2.com [65.118.64.252] lsmail8.oin2.com [65.118.64.253] raider.nethydro.com [65.118.67.227] (raider.vertcoms.com) lsmail2.vertcoms.com [65.118.67.228] optweb2.optmails.com [65.118.67.238] optweb2.oihost.net [65.118.67.238] lsmail4.vertcoms.com [65.118.67.252] mail.star-2002.com [65.118.67.254] ns2.opthome.com [65.212.106.196] - UUNET IP range [65.192.0.0-65.223.255.255] optdns.com [66.21.5.68] - Bellsouth.net IP range [66.20.0.0-66.21.255.255] ns2.optdns.com [66.21.5.70] ns1.opthost.com [66.21.5.90] NS1.brain2002.com [205.244.70.7] - Ciberlynx (spamhaus)/Sprint IP range ns1.opthome.com [205.244.94.69] - Web-One/Ciberlynx/Sprint IP range NS1.nethydro.com [205.244.94.83] ns2.opthost.com [208.26.68.198] - Eminet/Sprint IP range www.optininc.com [216.25.240.231] - Exodus IP range cpaserv.oin-1.com [216.242.142.54] - Hot Tixx/Ciberlynx IP range lsmail8.oin-1.com [216.242.142.57] ======= PREVIOUS SPAMS WERE ======= [Previous spams snipped] === And even more new "oin#.com" domains, oin3.com now, still spamming === Jun 1 17:57:38 orca sendmail[31417]: g51EvbN31417: ruleset=check_relay, arg1=robo4.oin3.com, arg2=65.118.65.6, relay=robo4.oin3.com [65.118.65.6], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt Jun 1 17:57:39 orca sendmail[31417]: NOQUEUE: robo4.oin3.com [65.118.65.6] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Jun 2 03:20:51 orca sendmail[5087]: g520KpN05087: ruleset=check_relay, arg1=lsmail7.oin2.com, arg2=65.118.64.252, relay=lsmail7.oin2.com [65.118.64.252], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt Jun 2 03:21:00 orca sendmail[5087]: NOQUEUE: lsmail7.oin2.com [65.118.64.252] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Jun 3 05:15:35 orca sendmail[8998]: g532FYq08998: ruleset=check_relay, arg1=lsmail9.oin2.com, arg2=65.118.64.242, relay=lsmail9.oin2.com [65.118.64.242], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt Jun 3 05:15:36 orca sendmail[8998]: NOQUEUE: lsmail9.oin2.com [65.118.64.242] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 === A new IP block was assigned to them by Qwest: [65.123.232.0 - 65.123.233.255] === === The notification post and the spam example to NANAE === Path: uni-berlin.de!fu-berlin.de!news-out.newsfeeds.com!propagator2-maxim !propagator-maxim!news-in.spamkiller.net!feed.newsfeeds.com!feeder.nmix.net !reader.nmix.net!oracle.zianet.com!cafe.oasiscybercafe.com From: "Matthew J. Evans" Newsgroups: news.admin.net-abuse.email Subject: BLOCK/SPEWS: Steve Hardigree/Optin Inc/S804 Update Date: Wed, 19 Jun 2002 19:13:01 -0600 Organization: NMIX Lines: 48 Message-ID: <3d112c2e.0@oracle.zianet.com> NNTP-Posting-Host: oracle.zianet.com X-Trace: reader.nmix.net 1024536596 21257 204.134.124.52 (20 Jun 2002 01:29:56 GMT) X-Complaints-To: news@nmix.net NNTP-Posting-Date: 20 Jun 2002 01:29:56 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Xref: uni-berlin.de news.admin.net-abuse.email:1723611 Spam in .sightings, headers below. Stevie was reassigned a Qwest /23 for your blocking pleasure: OPTIN INC (NETBLK-Q0613-65-123-232-0) 2101 NW CORPORATE PKWY SUITE 102 BOCA RATON, FL 33431 US Netname: Q0613-65-123-232-0 Netblock: 65.123.232.0 - 65.123.233.255 Coordinator: PASH, ROB (RP1047-ARIN) rpash@optininc.com 561-498-2422 Record last updated on 14-Jun-2002. Database last updated on 18-Jun-2002 20:00:03 EDT. =================================================== From optin@CPM01.COM Wed Jun 19 11:42:52 2002 Return-Path: Received: from cpmserv1.cpm01.com (cpmserv1.cpm01.com [65.123.232.200]) by scarlatti.shakha.com (8.11.6/8.11.6) with ESMTP id g5JHgkM45184 for ; Wed, 19 Jun 2002 11:42:51 -0600 (MDT) (envelope-from optin@CPM01.COM) Message-Id: <200206191742.g5JHgkM45184@scarlatti.shakha.com> Received: from list2 (65.123.232.203) by cpmserv1.cpm01.com (LSMTP for Windows N T v1.1b) with SMTP id <62.00007052@cpmserv1.cpm01.com>; Wed, 19 Jun 2002 13:19:3 5 -0400 Date: Wed, 19 Jun 2002 13:05:07 -0400 From: CheapTrips Subject: Save up to 85% on airline tickets To: mje@SHAKHA.COM Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="B5F74ADA-018F-43BF-B56E-37BF47057 ACCOPTIN" Status: O X-Status: X-Keywords: X-UID: 4 -- Block Inflow - http://www.noflow.org/ === ICQ chat with Rob Pash from Opt-In Network, who claimed that === === they will go the complete opt-in and don't want to spam === Message from REP Fri Jun 21 19:52:43 2002 [D---] Dolphin, I run a small ISP and was wondering how to keep the spammers out? Message to REP Fri Jun 21 19:55:42 2002 [D---] Hi there! You can use some DNS blocklists, like Spamhaus BlockList or RBL. Those are lists of persistent spammers who shouldn't be allowed to access your mailserver. Also using your own private blocklist will help. For example, you can deny the access to those spammers, who bother your network on a daily base Message from REP Fri Jun 21 20:00:02 2002 [D---] Have you heard of Optin Inc. ? These guys are real pests. Message to REP Fri Jun 21 20:03:56 2002 [D---] Sure! I've had enough of them: http://www.DolphinWave.org/spam/opt-in_network.txt I can't see what SMTP you are using, but you can add the IP ranges listed in the URL above to your blocklist, and you will not see any more of those freaks (unless they buy new IP ranges). Message from REP Fri Jun 21 20:05:43 2002 [D---] Thanks for the info Message to REP Fri Jun 21 20:06:55 2002 [D---] My pleasure. Those spammers tickle my nerves, and more so - the ISPs that keep them up... Message from REP Fri Jun 21 20:07:31 2002 [D---] Yeah, I know what you mean! Message to REP Fri Jun 21 20:10:22 2002 [D---] By the way, you can complain to Bellsouth about those spammers, too (I assume your connectivity goes through Bellsouth). They host and keep up one of Opt-In spammers' DNS, despite on complaints: NS1.OPTHOST.COM [66.21.5.90] in their [66.20.0.0 - 66.21.255.255] IP range. Message to REP Fri Jun 21 20:31:34 2002 [----] Interesting company's name you have, by the way Message from REP Fri Jun 21 20:35:59 2002 [D---] Which one? Message to REP Fri Jun 21 20:37:09 2002 [----] http://groups.google.com/groups?selm=20020306121106.10992.00002398@mb-fj.aol.com This one Message from REP Fri Jun 21 20:40:23 2002 [D---] Hmmmm..... Message from REP Fri Jun 21 20:41:50 2002 [D---] Can we discuss some of the issues you have with optin? Message to REP Fri Jun 21 20:44:10 2002 [----] Well, I have some free time so we can try to discuss it. But if you want me to believe that spam is ok and I just have to remove myself from your database, you wouldn't succeed Message from REP Fri Jun 21 20:47:59 2002 [D---] I hate spam. I just want you to know that if you want your email off the database, I will make sure it is removed. As to the way some emails have been obtained, I personally don't agree with their methods. We are actually moving to a double opt-in system. Message to REP Fri Jun 21 20:55:15 2002 [----] Nah, "550 Access denied" works pretty well, and I can still monitor the spamming attempts from Opt-In Network. Err, "double opt-in" is a "spammer-speech". There is only one opt-in, one that comes with a confirmation from the opted in e-mail address. "Confirmed opt-in" would be more correct. But honestly I have a lot of doubts that Opt-In Network is going to be legit any time soon. And even they will, they've ruined their name/IP Message from REP Fri Jun 21 21:16:48 2002 [D---] The new system will be a confirmed opt in with a profile manager so that each person can update their profile or remove themselves from the list. I understand you are bitter, but mark my words....We will be there in the end with a unique system. Message to REP Fri Jun 21 21:23:00 2002 [D---] What about all the current database of e-mail addresses, spoiled with bought and harvested ones? Going to pull it off and start from a scratch, or they will be included and you would expect people to go and update their profile/unsubscribe? I might be a bitter, yep, but that's cause I still have to see a true reformed spammer. I want to be surprised one day, though. Message from REP Fri Jun 21 21:28:47 2002 [D---] These accounts will be new, from scratch, which means no complaints from anyone due to the amount of information we will have on each account. We will be able to track each profiles signup date, interests etc... And, only requested advertisements will be sent. I know it's hard to believe. But...form one sys admin to another, I think it's the only way to go! Message to REP Fri Jun 21 21:32:04 2002 [D---] Well, I only can say: "Good luck!" Cause that's really the only way to do the ads business on the 'net for everybody's benefits. But you would need a new IP range and who knows, a new company's name, too. In the past it was a spamhaus called AGIS. They are long-gone since, but even now their IP ranges are in most blocklists and probably will never be out there. Message from REP Fri Jun 21 21:43:53 2002 [D---] Thanks for the chat, let's keep in touch... Message to REP Fri Jun 21 21:44:54 2002 [D---] No problems. As I've said, I would really like to be surprised Message from REP Fri Jun 21 21:45:09 2002 [D---] You will be. === And yet another spamming attempt, my complaint (I am NOT surprised) === Content-Type: text/plain; charset="us-ascii" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person To: , uce@ftc.gov, nanas-sub@cybernothing.org, xo.com@bitch-list.net Subject: [email] More spamming attempts from Opt-In Network spammers! Date: Sat, 27 Jul 2002 16:31:20 +0300 User-Agent: KMail/1.4.1 X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200207271631.20412@2002.dolphinwave.org> Status: RO X-Status: S My mailserver has rejected yet another spamming attempt from those long-time and notorious spammers, Opt-In Network! Spammer: lsmail10.star-2002.com [208.176.252.165] XO Communications IP block [208.176.0.0 - 208.177.255.255]. Spam history of them spamming my e-mail addresses, and my complaints are archived there: http://www.DolphinWave.org/spam/opt-in_network.txt === Sendmail logs (GMT+0300) === Jul 25 22:24:53 orca sendmail[11376]: g6PJOpX11376: ruleset=check_relay, arg1=lsmail10.star-2002.com, arg2=208.176.252.165, relay=lsmail10.star-2002.com [208.176.252.165], reject=550 5.0.0 Access denied - spammers/harvesters - http://www.DolphinWave.org/spam/opt-in_network.txt Jul 25 22:24:57 orca sendmail[11376]: NOQUEUE: lsmail10.star-2002.com [208.176.252.165] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 === Opt-In Network also spams/flames guestbooks === To: usenet-jul+nanae@2002.dolphinwave.org Message-Id: Posted-To: news.admin.net-abuse.email From: Dolphin Subject: Opt-In Network spams/flames guestbooks Organization: Private person Sender: Alexander Sheremet X-SPEWS: I am not X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 Date: Tue, 30 Jul 2002 05:51:35 +0300 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N Just got 3 guestbook signups from somebody using Bellsouth dialups in FL. Checking with web server logs I can see that they've got on my web page from the Google post about new IPs assigned to Stevie by Qwest: host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:07 +0300] "GET / HTTP/1.1" 200 4852 "http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&frame=right &th=6061c08f3f322fd8&seekm=3d112c2e.0%40oracle.zianet.com" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" And if we will check the whois data on optininc.com, yep - they are in FL, and using Bellsouth, too: Administrative Contact: Admin, Domain postmaster@optdns.com PO Box 810052 Boca Raton, FL 33481-0052 US 561-370-3156 The flame was (he's changed his IP during the web page visit, redialed): name = You are a Communist mail = Spamcops@spamcops.com icq = You SUCK aim = FAGS4MAHI url = http://www.spews.org text = You suck - you are a flammer that has subscribed to tons of web sites and then claim that they are spamming you after they send you an offer.

READ THE PRIVACY POLICY ON WEB SITES ASS HOLE

WHO AND WHAT DO YOU THINK SUPPORTS THE WEB YOU DUMB FUCK?

DIRECT MARKETING- YES THATS RIGHT DIRECT MARKETING COMPANIES THAT DRIVE TRAFFIC TO WEBSHOPS.....

YOU ARE SO FUCKING DUMB IT IS ALMOST NOT WORTH MY TIME TO ADDRESS YOUR STUPIDITY.

LITTLE FAGS LIKE YOU WOULD NOT HAVE AN \"INTERNET\" TO SURF ON IT WERE NOT FOR COMMERCE - I SEE ON YOUR LITTLE HOMO MAHI- THE FISH SITE YOU HAVE A LINK TO COMMERCE - ARE YOU GETTING A CHECK FROM THAT MARKETER?

date = 07.30.2002 02:30 ip = 216.77.212.41 And repeated (I have a flood protection, so he failed to flood it): date = 07.30.2002 02:34 date = 07.30.2002 02:35 Dolphin. -- URL: http://www.DolphinWave.org Mail: on the web page (no spam) ICQ: 6615461 === The web page browsing history/trace === host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:07 +0300] "GET / HTTP/1.1" 200 4852 "http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&frame=right&th=6061c08f3f322fd8&seekm=3d112c2e.0%40oracle.zianet.com" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:09 +0300] "GET /Background/bg01.jpg HTTP/1.1" 200 1241 "http://www.dolphinwave.org/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:09 +0300] "GET /sandy.gif HTTP/1.1" 200 4182 "http://www.dolphinwave.org/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:10 +0300] "GET /logo.jpg HTTP/1.1" 200 3373 "http://www.dolphinwave.org/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:11 +0300] "GET /Dolphin-Ring/webring2.gif HTTP/1.1" 200 3105 "http://www.dolphinwave.org/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:13 +0300] "GET /update.gif HTTP/1.1" 200 973 "http://www.dolphinwave.org/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:14 +0300] "GET /Dolphin-Ring/dolfring.gif HTTP/1.1" 200 22829 "http://www.dolphinwave.org/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:22 +0300] "GET /main.html HTTP/1.1" 200 14769 "http://www.dolphinwave.org/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:24 +0300] "GET /dolphinwave.gif HTTP/1.1" 200 8051 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:25 +0300] "GET /Background/bg1.jpg HTTP/1.1" 200 27674 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:30 +0300] "GET /S-trap/No-human.gif HTTP/1.1" 200 372 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:31 +0300] "GET /line.jpg HTTP/1.1" 200 718 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:32 +0300] "GET /whales_button.gif HTTP/1.1" 200 3417 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:32 +0300] "GET /vd-award.gif HTTP/1.1" 200 5504 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:33 +0300] "GET /dww-awrd.gif HTTP/1.1" 200 7001 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:34 +0300] "GET /Dolphin-Ring/Dheader.jpg HTTP/1.1" 200 6651 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:36 +0300] "GET /Dolphin-Ring/Dprevious.jpg HTTP/1.1" 200 1780 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:37 +0300] "GET /Dolphin-Ring/Dindex.jpg HTTP/1.1" 200 1460 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:37 +0300] "GET /Dolphin-Ring/Drandom.jpg HTTP/1.1" 200 1549 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:38 +0300] "GET /Dolphin-Ring/Dskip.jpg HTTP/1.1" 200 1419 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:38 +0300] "GET /Dolphin-Ring/Dnext.jpg HTTP/1.1" 200 1581 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:38 +0300] "GET /Dolphin-Ring/Ddolphin.jpg HTTP/1.1" 200 1480 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:39 +0300] "GET /Dolphin-Ring/Dring.jpg HTTP/1.1" 200 2433 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:54 +0300] "GET /Guestbook/guestbook.css HTTP/1.1" 200 2808 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:54 +0300] "GET /Guestbook/guestbook.php HTTP/1.1" 200 16927 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:55 +0300] "GET /Guestbook/gif/lustig.gif HTTP/1.1" 200 375 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:56 +0300] "GET /Guestbook/gif/confused.gif HTTP/1.1" 200 393 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:56 +0300] "GET /Guestbook/gif/home.gif HTTP/1.1" 200 274 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:56 +0300] "GET /Guestbook/gif/icq.gif HTTP/1.1" 200 366 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:57 +0300] "GET /Guestbook/gif/email.gif HTTP/1.1" 200 264 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:57 +0300] "GET /Guestbook/gif/wink.gif HTTP/1.1" 200 375 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:57 +0300] "GET /Guestbook/gif/tongue.gif HTTP/1.1" 200 377 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:16:58 +0300] "GET /Guestbook/gif/biggrin.gif HTTP/1.1" 200 244 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:01 +0300] "GET /Guestbook/gif/santabgrin.gif HTTP/1.1" 200 223 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:01 +0300] "GET /Guestbook/gif/aim.gif HTTP/1.1" 200 348 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:02 +0300] "GET /Guestbook/guestbook.php?act=new HTTP/1.1" 200 8850 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:03 +0300] "GET /Guestbook/gif/traurig.gif HTTP/1.1" 200 378 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:04 +0300] "GET /Guestbook/gif/redface.gif HTTP/1.1" 200 370 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:04 +0300] "GET /Guestbook/gif/cool.gif HTTP/1.1" 200 370 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:05 +0300] "GET /Guestbook/gif/eek.gif HTTP/1.1" 200 367 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:05 +0300] "GET /Guestbook/gif/mad.gif HTTP/1.1" 200 375 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:05 +0300] "GET /Guestbook/gif/rolleyes.gif HTTP/1.1" 200 361 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-209-70.fll.bellsouth.net - - [30/Jul/2002:02:17:06 +0300] "GET /Guestbook/gif/test.gif HTTP/1.1" 200 1986 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:30:13 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 200 5001 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:30:23 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:30:25 +0300] "GET /Guestbook/guestbook.php?act=show HTTP/1.1" 200 18043 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:31:15 +0300] "GET /Guestbook/guestbook.php?act=show&page=2 HTTP/1.1" 200 16256 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=show" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:32:22 +0300] "GET /Guestbook/guestbook.php?act=show&page=1 HTTP/1.1" 200 18043 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=show&page=2" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:33:39 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 200 5001 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:33:40 +0300] "GET /Guestbook/gif/email.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:33:41 +0300] "GET /Guestbook/guestbook.css HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:33:41 +0300] "GET /Guestbook/gif/home.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:33:41 +0300] "GET /Guestbook/gif/aim.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:33:42 +0300] "GET /Guestbook/gif/icq.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:05 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:07 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:08 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:09 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:12 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:12 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:13 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:13 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:14 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:14 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:15 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:16 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:17 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:17 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:18 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:19 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:25 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:28 +0300] "GET /Guestbook/guestbook.php?act=show HTTP/1.1" 200 18958 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:42 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 200 5001 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:43 +0300] "GET /Guestbook/gif/email.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:44 +0300] "GET /Guestbook/guestbook.css HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:44 +0300] "GET /Guestbook/gif/icq.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:44 +0300] "GET /Guestbook/gif/aim.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:45 +0300] "GET /Guestbook/gif/home.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:46 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:47 +0300] "GET /Guestbook/guestbook.php?act=show HTTP/1.1" 200 18958 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:54 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 200 5001 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:56 +0300] "GET /Guestbook/guestbook.css HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:56 +0300] "GET /Guestbook/gif/email.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:56 +0300] "GET /Guestbook/gif/home.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:57 +0300] "GET /Guestbook/gif/icq.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:34:57 +0300] "GET /Guestbook/gif/aim.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:12 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:15 +0300] "GET /Guestbook/guestbook.php?act=show HTTP/1.1" 200 19962 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:30 +0300] "GET /Guestbook/guestbook.php?act=show&page=2 HTTP/1.1" 200 15944 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=show" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:36 +0300] "GET /Guestbook/guestbook.php?act=show HTTP/1.1" 200 0 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:41 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 200 5001 "http://www.dolphinwave.org/Guestbook/guestbook.php?act=new" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:45 +0300] "GET /Guestbook/gif/home.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:46 +0300] "GET /Guestbook/gif/email.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:47 +0300] "GET /Guestbook/guestbook.css HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:47 +0300] "GET /Guestbook/gif/icq.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:48 +0300] "GET /Guestbook/gif/aim.gif HTTP/1.1" 304 - "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:50 +0300] "POST /Guestbook/guestbook.php HTTP/1.1" 302 13 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:35:53 +0300] "GET /Guestbook/guestbook.php?act=show HTTP/1.1" 200 19962 "http://www.dolphinwave.org/Guestbook/guestbook.php" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" host-216-77-212-41.fll.bellsouth.net - - [30/Jul/2002:02:36:21 +0300] "GET /Guestbook/guestbook.php HTTP/1.1" 200 19962 "http://www.dolphinwave.org/main.html" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; H010818)" === And they still spam other people, too === Path: uni-berlin.de!fu-berlin.de!logbridge.uoregon.edu!pln-w!spln!dex !extra.newsguy.com!newsp.newsguy.com!enews1 From: Tsu Dho Nimh Newsgroups: news.admin.net-abuse.email Subject: New mailsleazer? oin60.com Date: Sat, 31 Aug 2002 06:49:18 -0700 Organization: None, none at all Lines: 56 Message-ID: NNTP-Posting-Host: p-355.newsdawg.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Newsreader: Forte Agent 1.91/32.564 Xref: uni-berlin.de news.admin.net-abuse.email:1792454 oin60.com has hit me with several spams in the past couple of days ... for a TV station in LasVegas and now a resort somewhere. From : Ramada Resorts To : abacaxi@HOTMAIL.COM Subject : Re: R.S.V.P.: Date : Thu, 29 Aug 2002 08:06:02 -0400 MIME-Version: 1.0 Received: from lsmail10.start-2002.com ([208.176.252.165]) by mc2-f4.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Sat, 31 Aug 2002 03:05:18 -0700 Received: from tyco (tyco.star-2002.com) by lsmail10.start-2002.com (LSMTP for Windows NT v1.1b) with SMTP id <18.00010C37@lsmail10.start-2002.com>; Thu, 29 Aug 2002 8:22:33 -0400 Return-Path: rrsortsofv@OIN.OIN60.COM Message-ID: X-OriginalArrivalTime: 31 Aug 2002 10:05:18.0157 (UTC) FILETIME=[E8AAF7D0:01C250D5] ********** Seems to be the latest reincarnation of somehting spammish in Florida. start-2002.com is not in whois, but 208.176.252.165 belongs to XO Communications. And it's SPEWed already. Registrant: OIN PO Box 810052 Boca Raton, FL 33481-0052 US "Privacy and unsubscribe options: The Optin Network respects your online privacy and values you as a subscriber to our service. We are members of the Direct Marketing Association and take every effort to ensure that your privacy is protected. The Optin Network manages and aggregates consumer info for several online web sites and assists them with creating and distributing custom offers and promotions via our list management services. If you have received this email message in error or simply wish to be removed from our network please click here or you may reply to this email and type REMOVE in the subject line or body of message. If would prefer to contact us by mail, our address is: The Xcitemail Network, PO Box 810052, Boca Raton, FL 33481. " Tsu Dho Nimh -- Before you criticize someone, you should walk a mile in his shoes. That way, when you criticize him, you are a mile away from him and you have his shoes. === And more reports === Path: uni-berlin.de!fu-berlin.de!logbridge.uoregon.edu!news.digilink.net !news.five-ten-sg.com!not-for-mail From: carl@five-ten-sg.com (Carl Byington) Newsgroups: news.admin.net-abuse.email Subject: Re: New mailsleazer? oin60.com Date: Sat, 31 Aug 2002 15:03:21 +0000 (UTC) Organization: 510 Software Group Lines: 96 Message-ID: References: NNTP-Posting-Host: dell420.five-ten-sg.com Mime-Version: 1.0 Content-Type: Text/Plain; charset=US-ASCII X-Trace: ns.five-ten-sg.com 1030806201 17128 205.147.40.36 (31 Aug 2002 15:03:21 GMT) X-Complaints-To: abuse@five-ten-sg.com NNTP-Posting-Date: Sat, 31 Aug 2002 15:03:21 +0000 (UTC) X-Newsreader: WinVN 0.99.7 Xref: uni-berlin.de news.admin.net-abuse.email:1792479 -----BEGIN PGP SIGNED MESSAGE----- In article , abacaxi@hotmail.com says... > >oin60.com has hit me with several spams in the past couple of >days ... for a TV station in LasVegas and now a resort somewhere. > >From : Ramada Resorts >To : abacaxi@HOTMAIL.COM >Subject : Re: R.S.V.P.: >Date : Thu, 29 Aug 2002 08:06:02 -0400 > >MIME-Version: 1.0 >Received: from lsmail10.start-2002.com ([208.176.252.165]) by >mc2-f4.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); [snip] They have been hitting non-existant spam traps here for the last month at least. Connections attempts from the following addresses, all of which are listed on SPEWS and other lists. 205.244.78.14 205.244.78.14 205.244.78.30 205.244.78.58 205.244.78.62 205.244.78.66 205.244.78.76 205.244.78.85 205.244.78.88 205.244.78.105 205.244.78.108 205.244.78.117 205.244.78.128 208.176.252.165 208.176.252.165 208.176.252.165 208.176.252.165 208.176.252.165 66.236.248.82 66.236.248.82 66.236.248.83 66.236.248.86 66.236.248.87 66.236.248.89 66.236.248.92 66.236.248.93 66.236.248.93 66.236.248.94 66.236.248.94 66.236.248.115 66.236.248.115 66.236.248.117 66.236.248.117 66.236.248.118 Sprint SPRINT-BLKF (NET-205-240-0-0-1) 205.240.0.0 - 205.247.255.255 CIBERLYNX INC SPRINT-CDF44E-5 (NET-205-244-78-0-1) 205.244.78.0 - 205.244.79.255 Optin Inc OPTIN1002 (NET-205-244-78-0-2) 205.244.78.0 - 205.244.78.255 OrgName: XO Communications OrgID: XOXO NetRange: 208.176.0.0 - 208.177.255.255 OrgName: XO Communications OrgID: XOXO NetRange: 66.236.0.0 - 66.239.255.255 NANAS only shows two sightings for "oin60 xo", indicating perhaps that most folks that post to .sightings are also protected by various DNSbls. -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBPXDaUdZjPoeWO7BhAQE6JQP+MC9Ug0mD3skI2eOSlfyOiV/tdQwbXgAm qutz/Gd8wOd8Amzf2REv1iH23L4ASk38HIKmwUQLaylHj84453FMOHzfFdMRMjBx hnahjlh5rcSuDEF0QSkqs5l/LNNK5xPsNTmDqw5D/AX4cigjQmsUCvy++y3xbPGr 4He22k8k9jE= =pjNV -----END PGP SIGNATURE----- === And the spam continues === Path: uni-berlin.de!fu-berlin.de!logbridge.uoregon.edu!newsfeed.stanford.edu !postnews1.google.com!not-for-mail From: spackard@fastlink.com (Scott) Newsgroups: news.admin.net-abuse.email Subject: SPEWS: Please add to S804 Date: 31 Oct 2002 12:42:07 -0800 Organization: http://groups.google.com/ Lines: 51 Message-ID: NNTP-Posting-Host: 66.237.72.10 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1036096927 30571 127.0.0.1 (31 Oct 2002 20:42:07 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: 31 Oct 2002 20:42:07 GMT Xref: uni-berlin.de news.admin.net-abuse.email:1848551 New spam from: 157.238.187.113 Netblock: 157.238.186.0/23 AVH Communcations 6574 N. S.R. 7 PMB 216 Coconut Creek, FL 33073 Looks and smells like opt-in marketing Evidence: From cpa1@oin.oin71.com Thu Oct 31 07:53:39 2002 X-Return-Path: cpa1@oin71.com Received: from lsmail7.oin71.com (unknown [157.238.187.113]) by yellow.rahul.net (Postfix) with ESMTP id 5E7667C0E for ; Thu, 31 Oct 2002 04:56:25 -0800 (PST) Received: from cpaserv (157.238.187.111) by lsmail7.oin71.com (LSMTP for Windows NT v1.1b) with SMTP id <63.0001898D@lsmail7.oin71.com>; Wed, 30 Oct 2002 17:39:57 -0500 Date: Wed, 30 Oct 2002 17:35:59 -0500 From: Cheaper Than Dial Up! Subject: Friend, Surf Faster w/ DSL & Get Cash Back! To: x@not.us Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="840C3AB0-396A-4E64-96E7-E8F36EC42029OPTIN" Message-Id: <20021031125625.5E7667C0E@yellow.rahul.net> The wait is over! DIRECTV DSL" makes surfing the Net more enjoyable with speeds up to 50 times faster than with standard dial-up modems! Now pages that took forever to download jump to life in seconds. You can get movie trailers and MP3s, live news and weather, play online games, shop, and even trade stocks with blazing speed. All this without tying-up your phone line, because with DIRECTV DSL", you can use your telephone while you're online, without any additional phone lines or expensive equipment. Click here for more details! http://157.238.187.91/redir.jsp?oin=n ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ This email is not sent unsolicited. This is an Opt-In Network mailing! This message is sent to subscribers ONLY. The e-mail subscription address is: x@not.us To unsubscribe please click the link below http://157.238.187.90/cpa/remove.jsp?email=x@not.us or === Bellsouth has FINALLY pulled the plug (after what, 1.25 years?!) === Path: uni-berlin.de!fu-berlin.de!peer01.cox.net!cox.net!rip!c03.atl99 !news.webusenet.com!pc01.webusenet.com!fe10.atl2.webusenet.com.POSTED !not-for-mail From: "BellSouth Internet Services Abuse Team" Newsgroups: news.admin.net-abuse.email Subject: SPEWS S804 / BellSouth / Optin Inc Lines: 22 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: X-Complaints-To: abuse@usenetserver.com X-Abuse-Info: Please be sure to forward a copy of ALL headers X-Abuse-Info: Otherwise we will be unable to process your complaint properly. NNTP-Posting-Date: Mon, 16 Jun 2003 08:56:54 EDT Date: Mon, 16 Jun 2003 09:07:16 -0400 Xref: uni-berlin.de news.admin.net-abuse.email:2007858 Optin Inc / Steve Hardigree / Eddy Marin have been removed from the BellSouth Network. Please release the blocks below that are listed in S804. Thanks. The BellSouth Internet Services Abuse Team 1, 66.21.5.88, IMGDirect / mail.opthome.com (dead?) 1, 66.21.5.89, IMGDirect / ns2.opthost.com 1, 66.21.5.90, IMGDirect / ns1.opthost.com / ns1.veriopt.com 1, 66.21.5.92, IMGDirect / ns2.veriopt.com 1, 66.21.5.66, IMGDirect / monitor.opthome.com 1, 66.21.5.67, IMGDirect / optininc.com 1, 66.21.5.0/24, IMGDirect / oihost.net / optremove.com / opthome.com / opthost.com (Bellsouth) 1, 66.21.4.0/22, Bellsouth (IMGDirect / oihost.net / optremove.com / opthome.com / opthost.com) === My reply === Path: uni-berlin.de!217.22.112.172!not-for-mail From: Dolphin Newsgroups: news.admin.net-abuse.email Subject: Re: SPEWS S804 / BellSouth / Optin Inc Date: 16 Jun 2003 13:45:15 GMT Organization: Private person Lines: 39 Sender: Alexander Sheremet Message-ID: References: NNTP-Posting-Host: 217.22.112.172 X-Trace: fu-berlin.de 1055771115 20090068 217.22.112.172 (16 [104765]) X-SPEWS: I am not X-newsgroup: news.admin.net-abuse.email X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 User-Agent: slrn/0.9.7.4 (Linux) Xref: uni-berlin.de news.admin.net-abuse.email:2007879 On Mon, 16 Jun 2003 09:07:16 -0400 BellSouth Internet Services Abuse Team wrote in message : > Optin Inc / Steve Hardigree / Eddy Marin have been removed from the > BellSouth Network. Please release the blocks below that are listed in S804. > Thanks. > > The BellSouth Internet Services Abuse Team > > 1, 66.21.5.88, IMGDirect / mail.opthome.com (dead?) > 1, 66.21.5.89, IMGDirect / ns2.opthost.com > 1, 66.21.5.90, IMGDirect / ns1.opthost.com / ns1.veriopt.com > 1, 66.21.5.92, IMGDirect / ns2.veriopt.com > 1, 66.21.5.66, IMGDirect / monitor.opthome.com > 1, 66.21.5.67, IMGDirect / optininc.com > 1, 66.21.5.0/24, IMGDirect / oihost.net / optremove.com / opthome.com / > opthost.com (Bellsouth) > 1, 66.21.4.0/22, Bellsouth (IMGDirect / oihost.net / optremove.com / > opthome.com / opthost.com) It takes you, how long, 1.25 years, to start booting them?! My first complaint on these spammers went to "The BellSouth Internet Services Abuse Team" in March 15th, 2002! http://groups.google.com/groups?selm=200203142156.51813%402002.dolphinwave.org And then you were notified about the persistent abuse from those spammers spamming many many times more. Their abuses also include the guestbooks "bombing", like this: http://groups.google.com/groups?selm=slrnakbvpn.u4g.usenet-jul%2Bnanae%40orca.dolphinwave.org You don't have my sympathy for harboring these abusers for so long. The 66.21.5.0/24 IP range has well-earned the permanent place in the blocklists. Dolphin. -- URL: http://www.DolphinWave.org Mail: on the web page (no spam) ICQ: 6615461