Bob Wise (sky-host.net) - legal threats against a blocklist. my-mailserver.com, sky-host.net, domains-4all.com, [64.135.204.55 - 64.135.204.56], [204.233.238.195 - 204.233.238.196], [209.151.82.0 - 209.151.82.255], [210.49.254.22]: Access denied! === Cart00ney evidence === From: bobwise@my-mailserver.com (wiser) Newsgroups: news.admin.net-abuse.email Subject: S2595 from zoneedit regarding 64.135.204.55 64.135.204.56 Date: 20 Jul 2003 02:41:12 -0700 Organization: http://groups.google.com/ Lines: 11 Message-ID: <27cecee7.0307200141.fc6d560@posting.google.com> NNTP-Posting-Host: 210.49.254.22 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1058694073 5678 127.0.0.1 (20 Jul 2003 09:41:13 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: 20 Jul 2003 09:41:13 GMT To whoever has the ultimate power regarding the spews listings. I am a small hosting person that was just moved to a new network by etecc.com and inherited these IP addresses less that 48 hours ago. I do not and do not tolerate SPAM so you have absloutely no rights to keep those IPs on any spammers list. I have over 100 clients that will be upset by my IP addresses bing blacklisted.I will pass the information to them (2 are legal firms) and you people that list my ip's I operate my name servers on will have to contend with them whil I will forces out of business after 7 years hosting. === SPEWS S2595 data quote === === http://www.spews.org/html/S2595.html === siliconeparadise/securediscounts |-------------------- 0, 200.155.12.10, sil76549.com (on listed spam house) (dead) 0, 202.103.190.172, siliconeparadise.com (on listed CHINANET-GD) 1, 203.194.146.160, ns1.droni.com (on listed Zentek spam house) 1, 203.194.146.157, relay.securediscounts.com (on listed Zentek spam house) 0, 64.46.116.236, securediscounts.com (on listed datacolo.com) (dead) 1, 193.231.248.69, sil76549.com (on listed WebOnline/ssc spam house) 1, 80.70.232.94, ns1.toonsforfree.com / ns2.toonsforfree.com (dead) 2, 80.70.232.0 - 80.70.232.255, CREDOLINK-MNT (toonsforfree.com & one child porn site after another) (dead) 0, 80.70.224.0 - 80.70.239.255, CREDOLINK-MNT (toonsforfree.com & one child porn site after another) (dead) 1, 194.67.62.150, CREDOLINK-MNT (credol-gw.Spb.gldn.net (194.67.62.150) [AS 3216]) 1, 194.67.1.0 - 194.67.2.255, CREDOLINK-MNT (credol-gw.Spb.gldn.net (194.67.62.150) [AS 3216]) 1, 212.193.10.130, dbware.net / ns.sptl.org 1, 212.193.10.129, cisco.sptl.org 1, 212.193.10.128/27, dbware.net / sptl.org 0, 207.44.228.61, dbware.net (ev1.net) (dead) 2, 213.221.52.186, mail.dbware.net (186.spb.sovintel.ru) 0, 69.0.240.12, NS1.TOONSFORFREE.COM 0, 69.0.240.0/26, dialtone.com (NS1.TOONSFORFREE.COM) 0, 69.0.240.0/23, dialtone.com (NS1.TOONSFORFREE.COM) 0, 69.0.244.153, NS2.TOONSFORFREE.COM 0, 69.0.244.128/26, dialtone.com (NS2.TOONSFORFREE.COM) 0, 69.0.244.0/23, dialtone.com (NS1.TOONSFORFREE.COM) 1, 200.189.174.249, siliconeparadise.com / securediscounts.com (on listed spam house) 0, 66.246.108.57, relay.securediscounts.com (dead) 0, 66.246.108.0/24, relay.securediscounts.com (pwebtech.com) (nac.net) 1, 216.243.240.178, sil35423.com / www.sil93456.com (on matrix-cg.com spam house) 1, 216.219.226.114, sil35423.com / securediscounts.com / ftp.freedog.com 1, 216.219.226.0/24, valueweb.net (sil35423.com / securediscounts.com / ftp.freedog.com) 0, 64.246.11.24, 2003optinleads.com (dead) 0, 64.246.11.0/27, ev1.net (2003optinleads.com) 1, 217.175.233.194, ns2.nsroot.biz 1, 217.175.233.128 - 217.175.233.255, Christian Ferencz (ns2.nsroot.biz) 1, 217.175.229.0 - 217.175.237.255, maintrade.com / server-service.de (ns2.nsroot.biz) 1, 210.51.12.53, sil12345.com (on listed china-netcom.com spam house) 1, 209.132.227.18, sd001.vg (on listed spam house) 0, 209.51.152.10, ns1.nsroot.biz / "erik5" (dead) 0, 209.51.152.34, ns1.e-ns.biz (dead) 0, 209.51.152.0/24, dv2.net (ns1.nsroot.biz) 2, 66.111.33.32, ns1.toonsforfree.com (unitedcolo.com) (dead?) 1, 209.170.123.163, ns2.toonsforfree.com 2, 209.170.123.128/25, ispsystem.com (ns2.toonsforfree.com) 1, 210.51.181.1, sil12345.com (on listed China Netcom spam house) 0, 64.62.138.158, ns2.nsroot.biz (dead) 0, 64.62.138.128/27, Web Hosting Network (ns2.nsroot.biz) 0, 64.62.138.0/24, Web Hosting Network (ns2.nsroot.biz) (he.net) 1, 195.205.178.177, sil20221.com / www.soft2004.biz (dead?) 1, 195.205.178.178, www.medz.biz / www.bizminder.biz 1, 195.205.178.179, www.earchengine.com / www.pro2security.biz 1, 195.205.178.176 - 195.205.178.191, CRM S.A (sil20221.com) 2, 195.205.178.0 - 195.205.178.255, tpnet.pl (sil20221.com) 0, 195.205.176.0 - 195.205.189.255, tpnet.pl (sil20221.com) 1, 169.141.226.164, optinspecialists.com (on listed hijacked netblock) 1, 64.135.204.61, ns2.nsroot.biz (dead) 1, 64.135.204.0/24, sourceful.com (ns2.nsroot.biz) 2, 64.135.200.0/20, foxvalley.net (ns2.nsroot.biz / sourceful.com) 2, 65.192.14.0/24, sourceful.com (ns2.nsroot.biz) 2, 65.192.12.0/22, UUNet (sourceful.com (ns2.nsroot.biz)) 1, 195.47.196.103, www.sil20221.com (on listed nik.ru spam house) 1, 64.191.52.60, ns2.nsroot.biz (dead?) 2, 64.191.52.0/24, hostnoc.net (ns2.nsroot.biz) 1, 61.131.62.62, optinspecialists.com / superduperdealsnow.com (on listed CHINANET-FJ) 1, 217.175.233.194, ns2.nsroot.biz 1, 217.175.233.128 - 217.175.233.255, CHRISTIAN-FERENCZ-NET (ns2.nsroot.biz) 1, 217.175.230.0 - 217.175.236.255, Server-Service via Tiscali (CHRISTIAN-FERENCZ-NET (ns2.nsroot.biz)) 1, 207.44.130.130, ns2.nsroot.biz 1, 207.44.130.128/27, EV1.net (ns2.nsroot.biz) 1, 207.44.130.0/24, EV1.net (ns2.nsroot.biz) 0, 194.220.174.11, ns1.ns-bot.biz / pro2security.biz (dead) 0, 4.178.1.3, ns2.ns-bot.biz (dead) 1, 195.85.231.181, pro2security.biz (host102.awa.ru) (on Nik.Ru spam house) ---------------------| Spamming. Host(s) refuse to act on reports of abuse. -------------------------------------------------------------------------------- http://www.sec1001.biz/surveillance/adv166/ http://www.sil20221.com/surveillance/adv166/ http://www.securediscounts.com/remedy/adv10/index.html http://www.sil76549.com/dvd/adv166/ -------------------------------------------------------------------------------- HS HOSTING PTE 33 Canton Road Hong Kong, Kowloon 1222 HK Domain Name: SECUREDISCOUNTS.COM Administrative Contact Che Lee-> xlove@freeuk.com HS HOSTING PTE 33 Canton Road Hong Kong, Kowloon 1222 HK Phone (852) 31848754 Fax Record updated on-> 2003-02-07 01:12:21 Record created on-> 2002-12-26 Record expiring date-> 2003-12-26 Domain servers in listed order: ns1.toonsforfree.com 80.70.232.94 ns2.toonsforfree.com 80.70.232.94 Domain servers in listed order: NS12.ZONEEDIT.COM 64.246.26.64 NS7.ZONEEDIT.COM 216.111.123.5 -------------------------------------------------------------------------------- --- contacting nameserver: ns2.toonsforfree.com [69.0.244.153] securediscounts.com SOA origin = securediscounts.com.prim mail addr = root@securediscounts.com.prim serial = 2002100132 refresh = 600 (10 mins) retry = 300 (5 mins) expire = 1209600 (14 days) minimum ttl = 86400 () securediscounts.com A 200.189.174.249 securediscounts.com MX 10 relay.securediscounts.com securediscounts.com NS ns1.toonsforfree.com securediscounts.com NS ns2.toonsforfree.com bkup.securediscounts.com A 200.155.12.10 orders.securediscounts.com A 64.46.116.236 relay.securediscounts.com A 66.246.108.57 www.securediscounts.com A 200.189.174.249 [SNIP] Old: --- contacting nameserver: ns1.nsroot.biz [207.44.130.130] 2003optinleads.com SOA origin = 2003optinleads.com mail addr = root@2003optinleads.com serial = 2002100134 refresh = 600 (10 mins) retry = 300 (5 mins) expire = 1209600 (14 days) minimum ttl = 86400 () 2003optinleads.com A 64.246.11.24 2003optinleads.com NS ns1.nsroot.biz 2003optinleads.com NS ns2.nsroot.biz www.2003optinleads.com A 64.246.11.24 -------------------------------------------------------------------------------- Optinspecialists.com 159 SE Biscayne Blvd. #519 Miami, FL 33132 US Domain Name: OPTINSPECIALISTS.COM Administrative Contact, Technical Contact, Zone Contact: Optinspecialists.com Will Strauss 159 SE Biscayne Blvd. #519 Miami, FL 33132 US 305-374-9221 willstraus@yahoo.co.uk Domain created on 09-Apr-2003 Domain expires on 09-Apr-2004 Last updated on 30-May-2003 Domain servers in listed order: NS1.E-NS.BIZ NS2.NSROOT.BIZ -------------------------------------------------------------------------------- --- contacting nameserver: ns2.nsroot.biz [64.135.204.61] optinspecialists.com SOA origin = siliconeparadise.com mail addr = root@siliconeparadise.com serial = 2002100136 refresh = 600 (10 mins) retry = 300 (5 mins) expire = 1209600 (14 days) minimum ttl = 86400 () optinspecialists.com A 169.141.226.164 optinspecialists.com NS ns1.nsroot.biz optinspecialists.com NS ns2.nsroot.biz test.optinspecialists.com A 127.0.0.4 www.optinspecialists.com A 169.141.226.164 -------------------------------------------------------------------------------- Domain Name: NSROOT.BIZ Domain ID: D4653535-BIZ Sponsoring Registrar: BULKREGISTER.COM, INC. Domain Status: ok Registrant ID: CL3236-BR Registrant Name: Che Lee Registrant Organization: HS HOSTING PTE Registrant Address1: 33 Canton Road Registrant City: Hong Kong Registrant State/Province: Kowloon Registrant Postal Code: 1222 Registrant Country: Hong Kong Registrant Country Code: HK Registrant Phone Number: +8.5231848754 Registrant Email: xlove@freeuk.com Name Server: NS1.NSROOT.BIZ Name Server: NS2.NSROOT.BIZ Created by Registrar: BULKREGISTER.COM, INC. Last Updated by Registrar: BULKREGISTER.COM, INC. Domain Registration Date: Sat May 10 08:59:19 GMT 2003 Domain Expiration Date: Sun May 09 23:59:59 GMT 2004 Domain Last Updated Date: Sat May 10 17:19:16 GMT 2003 -------------------------------------------------------------------------------- --- contacting nameserver: ns1.nsroot.biz [209.51.152.10] --- contacting nameserver: ns2.nsroot.biz [217.175.233.194] nsroot.biz SOA origin = nsroot.biz mail addr = root@nsroot.biz serial = 2001111609 refresh = 900 (15 mins) retry = 600 (10 mins) expire = 1209600 (14 days) minimum ttl = 86400 () nsroot.biz NS ns1.nsroot.biz nsroot.biz NS ns2.nsroot.biz ns1.nsroot.biz A 209.51.152.10 ns2.nsroot.biz A 217.175.233.194 Old: --- contacting nameserver: ns2.nsroot.biz [217.175.233.194] --- contacting nameserver: ns1.nsroot.biz [207.44.130.130] nsroot.biz SOA origin = nsroot.biz mail addr = root@nsroot.biz serial = 2001111608 refresh = 900 (15 mins) retry = 600 (10 mins) expire = 1209600 (14 days) minimum ttl = 86400 () nsroot.biz NS ns1.nsroot.biz nsroot.biz NS ns2.nsroot.biz ns1.nsroot.biz A 207.44.130.130 ns2.nsroot.biz A 217.175.233.194 -------------------------------------------------------------------------------- sd001.vg is registered. Domain Name: sd001.vg Registrant, Billing Contact, Admin. Contact xlove@freeuk.com HS HOSTING PTE, 33 Canton Road, Hong Kong, 1222 Hong Kong E-mail: xlove@freeuk.com Phone: (852) 31848754 Resource Records (2): ns ns1.droni.com ns ns2.droni.com -------------------------------------------------------------------------------- --- contacting nameserver: ns2.droni.com [203.194.146.160] sd001.vg SOA origin = sd001.vg mail addr = root@sd001.vg serial = 2002080766 refresh = 600 (10 mins) retry = 300 (5 mins) expire = 3600000 (41 days 16 hours) minimum ttl = 86400 () sd001.vg NS ns2.droni.com sd001.vg NS ns1.droni.com sd001.vg A 209.132.227.18 ns1.droni.com A 203.194.146.160 ns2.droni.com A 203.194.146.160 -------------------------------------------------------------------------------- HS HOSTING PTE 33 Canton Road Hong Kong, Kowloon 1222 HK Domain Name: SIL12345.COM Administrative Contact Che Lee-> xlove@mail.hongkong.com HS HOSTING PTE 33 Canton Road Hong Kong, Kowloon 1222 HK Phone (852) 31848754 Fax Record updated on-> 2003-03-29 16:19:34 Record created on-> 2003-03-15 Record expiring date-> 2004-03-15 Domain servers in listed order: NS1.NSROOT.BIZ NS2.NSROOT.BIZ -------------------------------------------------------------------------------- --- contacting nameserver: ns2.nsroot.biz [217.175.233.194] sil12345.com SOA origin = siliconeparadise.com mail addr = root@siliconeparadise.com serial = 2002080783 refresh = 600 (10 mins) retry = 300 (5 mins) expire = 3600000 (41 days 16 hours) minimum ttl = 86400 () sil12345.com A 210.51.181.1 sil12345.com MX 10 relay.sil12345.com sil12345.com NS ns1.nsroot.biz sil12345.com NS ns2.nsroot.biz relay.sil12345.com A 66.111.33.32 test.sil12345.com A 127.0.0.4 www.sil12345.com A 210.51.181.1 -------------------------------------------------------------------------------- --- contacting nameserver: ns2.nsroot.biz [64.62.138.158] sil20221.com SOA origin = siliconeparadise.com mail addr = root@siliconeparadise.com serial = 2002100283 refresh = 600 (10 mins) retry = 300 (5 mins) expire = 1209600 (14 days) minimum ttl = 86400 () sil20221.com A 195.205.178.177 sil20221.com NS ns1.nsroot.biz sil20221.com NS ns2.nsroot.biz test.sil20221.com A 127.0.0.4 www.sil20221.com A 195.205.178.177 -------------------------------------------------------------------------------- [The rest of the SPEWS evidence file SNIPPED] === Some data === $ host 210.49.254.22 22.254.49.210.in-addr.arpa domain name pointer c210-49-254-22.eburwd2.vic.optusnet.com.au. $ whois my-mailserver.com [Querying whois.internic.net] [Redirected to whois.planetdomain.com] [Querying whois.planetdomain.com] [whois.planetdomain.com] Domain Name: MY-MAILSERVER.COM Registered Through....: bottle domains Created on............: 19/11/1999 03:34:21 Expires on............: 19/11/2004 03:34:21 Record last updated on: 19/11/1999 03:34:21 Owner, Administrative Contact, Technical Contact, Billing Contact: Bob Wise (ID00028269) PO Box 733 Heathmont, VIC 3135 au Phone: +61.388021100 Email: info@bottledomains.com.au Domain servers in listed order: NS1.SKY-HOST.NET NS2.SKY-HOST.NET $ dig -t MX my-mailserver.com ; <<>> DiG 9.2.1 <<>> -t MX my-mailserver.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32827 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3 ;; QUESTION SECTION: ;my-mailserver.com. IN MX ;; ANSWER SECTION: my-mailserver.com. 14400 IN MX 0 my-mailserver.com. ;; AUTHORITY SECTION: my-mailserver.com. 14400 IN NS ns1.sky-host.net. my-mailserver.com. 14400 IN NS ns2.sky-host.net. ;; ADDITIONAL SECTION: my-mailserver.com. 14126 IN A 209.151.82.2 ns1.sky-host.net. 172525 IN A 209.151.82.57 ns2.sky-host.net. 172525 IN A 209.151.82.55 ;; Query time: 434 msec ;; SERVER: 192.168.0.77#53(192.168.0.77) ;; WHEN: Mon Jul 28 21:02:07 2003 ;; MSG SIZE rcvd: 147 $ host 209.151.82.2 2.82.151.209.in-addr.arpa domain name pointer pitfall.vosn.net. $ host 209.151.82.3 3.82.151.209.in-addr.arpa domain name pointer ns36.vosn.net. $ jwhois 209.151.82.2 [Querying whois.arin.net] [whois.arin.net] OrgName: VONOC OrgID: VONO Address: 5970 S. Greenwood Plaza Blvd City: Englewood StateProv: CO PostalCode: 80111 Country: US NetRange: 209.151.64.0 - 209.151.95.255 CIDR: 209.151.64.0/19 NetName: VONOC-03 NetHandle: NET-209-151-64-0-1 Parent: NET-209-0-0-0-0 NetType: Direct Allocation NameServer: NS1.VONOC.NET NameServer: NS2.VONOC.NET Comment: RegDate: Updated: 2003-01-07 TechHandle: FF186-ARIN TechName: Franzel, Fred TechPhone: +1-720-279-2011 TechEmail: ipmanager@vodc.net OrgAbuseHandle: VAD1-ARIN OrgAbuseName: VODC Abuse Dept OrgAbusePhone: +1-720-279-2011 OrgAbuseEmail: abuse@vodc.net OrgTechHandle: FF186-ARIN OrgTechName: Franzel, Fred OrgTechPhone: +1-720-279-2011 OrgTechEmail: ipmanager@vodc.net # ARIN WHOIS database, last updated 2003-07-27 19:15 $ whois sky-host.net [Querying whois.internic.net] [Redirected to whois.bulkregister.com] [Querying whois.bulkregister.com] [whois.bulkregister.com] <...> Wiseware PO Box 733 Heathmont, Victoria 3135 AU Domain Name: SKY-HOST.NET Administrative Contact: Web Master webmaster@domains-4all.com domains-4all.com PO Box 733 Heathmont, Victoria 3135 AU Phone: 61388021100 Fax: Technical Contact: Domain Master support@domains-4all.com domains-4all.com PO Box 733 Heathmont, Victoria 3135 AU Phone: 61388021100 Fax: Record updated on 2002-10-31 18:14:35 Record created on 2000-11-02 Record expires on 2003-11-02 Database last updated on 2003-07-28 14:19:28 EST Domain servers in listed order: NS1.SKY-HOST.NET 209.151.82.57 NS2.SKY-HOST.NET 209.151.82.55 $ whois domains-4all.com [Querying whois.internic.net] [Redirected to whois.planetdomain.com] [Querying whois.planetdomain.com] [whois.planetdomain.com] Domain Name: DOMAINS-4ALL.COM Registered Through....: bottle domains Created on............: 24/04/2001 08:04:38 Expires on............: 24/04/2004 08:04:38 Record last updated on: 24/04/2001 08:04:38 Owner, Administrative Contact, Technical Contact, Billing Contact: Bob Wise (ID00028269) PO Box 733 Heathmont, VIC 3135 au Phone: +61.388021100 Email: info@bottledomains.com.au Domain servers in listed order: No name servers present. $ dig -t NS DOMAINS-4ALL.COM ; <<>> DiG 9.2.1 <<>> -t NS DOMAINS-4ALL.COM ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49813 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2 ;; QUESTION SECTION: ;DOMAINS-4ALL.COM. IN NS ;; ANSWER SECTION: DOMAINS-4ALL.COM. 172800 IN NS ns2.DOMAINS-4ALL.COM. DOMAINS-4ALL.COM. 172800 IN NS ns1.DOMAINS-4ALL.COM. ;; ADDITIONAL SECTION: ns1.DOMAINS-4ALL.COM. 172800 IN A 204.233.238.195 ns2.DOMAINS-4ALL.COM. 172800 IN A 204.233.238.196 ;; Query time: 469 msec ;; SERVER: 192.168.0.77#53(192.168.0.77) ;; WHEN: Mon Jul 28 21:23:43 2003 ;; MSG SIZE rcvd: 102