Internap - the spamhaus that ignores complaints and moves their spammers around to avoid blocklists. Update: 11-Jun-2003: Internap allows 3(!) spam runs to be done before they even consider to kick the spammers (that's what their legals say they should do). Update: 4-Aug-2003: Internap forwards spam complaints to their spammers. Update: 16-Jul-2004: Internap is still the same, ignoring complaints, their NOC can't do anything with their pirate spammers, just tells to forward the complaint to abuse@internap.com, which was done but gave no results (surprise?). internap.blackholes.us DNSBL is mirrored locally as internap.bl.dolphinwave.org and implemented. === The persistent spammer, my 1st complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Spam (Usenet harvest: brighterskin.com/iAdvantage)! [Fwd: IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION ### ########] Date: Thu, 8 May 2003 02:18:28 +0300 User-Agent: KMail/1.4.3 X-KMail-Link-Message: 1614993 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, hostmaster@ns.chinanet.cn.net, anti-spam@ns.chinanet.cn.net, gzipdz@public.gz.cn, postmaster@public.gz.cn, hostmaster@iadvantage.net.hk, icdsoft@icdsoft.com, hosting@icdsoft.com, abuse@iadvantage.net.hk, abuse@hotmail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200305080218.28033@2003.dolphinwave.org> Status: RO X-Status: S Spam on my e-mail address, used for spam complaints in 2001, and harvested from the news.admin.net-abuse.sightings Usenet group! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: [61.189.217.126] CHINANET-GZ IP block [61.189.128.0 - 61.189.255.255]. Mail from: makefastmoney@hotmail.com Spamvertised web page: http://www.brighterskin.com [203.194.197.223] Registrant Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US Administrative Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US Billing Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US Technical Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US ICDSOFTLTD-HK IP block [203.194.197.223 - 203.194.197.254]. Upstream: iAdvantage (v005-m02.hk01.iadvantage.net). Nameservers: station194.com. ---------- Forwarded Message ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id h47KH8605601; Wed, 7 May 2003 23:17:11 +0300 Received: from JSJF (BABBYDOL@[61.189.217.126]) by =MY-SECONDARY-MX= (8.12.9/8.12.9) with SMTP id h47KGcgx027744; Wed, 7 May 2003 22:16:46 +0200 (CEST) (envelope-from makefastmoney@hotmail.com) X-Spam-Header: No.ip-whois.contact.61.189.217.126;-.see:http://www.rfc-ignorant.org,No.ip-whois.contact.61.189.217.126;-.see:http://www.rfc-ignorant.org,No.ip-whois.contact.61.189.217.126;-.see:http://www.rfc-ignorant.org,No.ip-whois.contact.61.189.217.126;-.see:http://www.rfc-ignorant.org,No.ip-whois.contact.61.189.217.126;-.see:http://www.rfc-ignorant.org,No.ip-whois.contact.61.189.217.126;-.see:http://www.rfc-ignorant.org X-Authentication-Warning: =MY-SECONDARY-MX=: Host BABBYDOL@[61.189.217.126] claimed to be JSJF Received: from q9yvj [225.75.94.244] by JSJF with ESMTP id IZYCRP; Thu, 08 May 03 03:57:41 +0400 Received: from 37hqe.3y..1.ch [208.230.169.105] by 225.75.94.244 with ESMTP id QLBKANN; Thu, 08 May 03 03:52:41 +0400 Message-ID: > From: "Colour Change?" To: abuse-2001@### Subject: IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION kdyv jzetjtbjp Date: Thu, 08 May 03 03:52:41 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: MIME-tools 5.503 (Entity 5.501) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="CD1__B0_24.B35C" Status: R X-Status: N

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

http://www.brighterskin.com

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Visit http://www.brighterskin.com now.

 

kg lbr rlnpnh dqc fslvwake ncqhuyk ih vz mwlk mz ------------------------------------------------------- === Another spam, my 2nd complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Repeating spammers (Usenet harvest: brighterskin.com)! [Fwd: IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION ####] Date: Thu, 8 May 2003 02:25:25 +0300 User-Agent: KMail/1.4.3 X-KMail-Link-Message: 1614999 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, abuso@cantv.net, abuse@hotmail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200305080225.25301@2003.dolphinwave.org> Status: RO X-Status: S This is the second, the same spam from these brighterskin.com spammers, now on my e-mail address, used only once on the Usenet newsgroup in the last year, and harvested from there! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: dC85463AB.dslam-01-27-4-01-01-01.mad.dsl.cantv.net [200.84.99.171] Mail from: makefastmoney@hotmail.com Spamvertised web page: http://www.brighterskin.com [203.194.197.223] (already terminated by ICDSoft, thanks!) Registrant Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US Administrative Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US Billing Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US Technical Contact: Campo Research (tricksh0t@yahoo.com) (111) 111-1111 none none, AL 11111 US ICDSOFTLTD-HK IP block [203.194.197.223 - 203.194.197.254]. Upstream: iAdvantage (v005-m02.hk01.iadvantage.net). Nameservers: station194.com. ---------- Forwarded Message ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id h47MeF609804 for <###>; Thu, 8 May 2003 01:40:15 +0300 Received: from 212.184.201.182 (dC85463AB.dslam-01-27-4-01-01-01.mad.dsl.cantv.net [200.84.99.171]) by =MY-SECONDARY-MX= (8.12.9/8.12.9) with SMTP id h47MdNgx006703 for <###>; Thu, 8 May 2003 00:39:45 +0200 (CEST) (envelope-from makefastmoney@hotmail.com) X-MDaemon-Deliver-To: <###> X-Spam-Header: Open.relay.200.84.99.171;-.see:http://dsbl.org/ X-Authentication-Warning: =MY-SECONDARY-MX=: Host dC85463AB.dslam-01-27-4-01-01-01.mad.dsl.cantv.net [200.84.99.171] claimed to be 212.184.201.182 Received: from 9u23t.a3c11u1 [228.66.24.80] by 212.184.201.182 with ESMTP id CIFHAAU; Thu, 08 May 03 06:33:42 +0400 Received: from nxple94 [88.52.92.170] by 228.66.24.80 with ESMTP id ZQUSLG; Thu, 08 May 03 06:17:42 +0400 Message-ID: <7r1m93qhk3h-mwg$-52-7a-6w@704.a.mfpddt>> From: "Colour Change?" To: <###> Subject: IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION kvqq Date: Thu, 08 May 03 06:17:42 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: The Bat! (v1.52f) Business MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="99BFE3557.5" Status: R X-Status: N

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

http://www.brighterskin.com

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Visit http://www.brighterskin.com now.

 

g dglkdshyc jpaoxj iewg xhycxvb harc ------------------------------------------------------- === This spammer was kicked off and moved to Internap. My 3rd complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Massive spamming (Usenet harvest: brighterskin.com)! [Fwd: Lighten your skin with the skin doctor #### ###### ##] Date: Sat, 24 May 2003 22:55:57 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1687871 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, abuse@online-age.net, abuse@exodus.net, postmaster@online-age.net, postmaster@012.net.il, abuse@012.net.il, gili@012.net.il, dns@012.net.il, mail-abuse@yahoo-inc.com, postmaster@yahoo.com, abuse@internap.com, andrew@internap.com, noc@INTERNAP.COM, postmaster@name-services.com, abuse@rackspace.com, abuse@enom.com, abuse@name-services.com, hosting@icdsoft.com, X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200305242255.57882@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: A massive spamming from these persistent brighterskin.com spammers against my various e-mail addresses, used on the Usenet newsgroups, and harvested from there! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! ATTN: GoldenLines! For the massive spamming that comes from your Internet space, and your absolute lack of any action against your abusive customers, your whole net-space will be nullrouted here. ======= Analysis ======= Spammer: [147.90.88.201] Harris Controls and Composition IP block [147.90.0.0 - 147.90.255.255]. Abused open relay: 80.179.74.123.forward.012.net.il [80.179.74.123] Golden Lines IP block [80.178.0.0 - 80.179.255.255] (persistent spammers, load of open relays, host ignores complaints). Mail from: moneytricks@yahoo.com Spamvertised web page: http://www.brighterskin.com Click-throughs to: http://groups.yahoo.com/group/brighterskin/ http://us.f1.yahoofs.com/groups/g_10186098/ www.brighterskin.com [212.118.244.166] ==================== Registration Service Provided By: ICDSoft.com Contact: hosting@icdsoft.com Domain name: brighterskin.com Registrant Contact: Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX: N/A 1313 Mockingbird Lane Chicago, IL 76835 US Administrative Contact: Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX: N/A 1313 Mockingbird Lane Chicago, IL 76835 US Billing Contact: Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX: N/A 1313 Mockingbird Lane Chicago, IL 76835 US Technical Contact: Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX: N/A 1313 Mockingbird Lane Chicago, IL 76835 US UK-INTERNAP IP block [212.118.224.0 - 212.118.255.255]. Upstream: Internap (border5.ge4-1-bbnet2.lon.pnap.net). Nameservers: name-services.com. ---------- Forwarded Message ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h4OFTiqH002427 for <###>; Sat, 24 May 2003 18:29:46 +0300 Received: from 80.179.74.123.forward.012.net.il (80.179.74.123.forward.012.net.il [80.179.74.123]) by =MY-SECONDARY-MX= (8.12.9/8.12.9) with SMTP id h4OFT3YI017025 for <###>; Sat, 24 May 2003 17:29:34 +0200 (CEST) (envelope-from moneytricks@yahoo.com) X-MDaemon-Deliver-To: <###> X-Spam-Header: Open.relay.80.179.74.123;-.see:http://dsbl.org/ Received: from 8o73t9v8 [147.90.88.201] by 80.179.74.123.forward.012.net.il with ESMTP id QDMXVYRK; Fri, 23 May 03 10:15:46 +0400 Received: from v1q9mfp [65.49.138.175] by 147.90.88.201 with ESMTP id YJRNQG; Fri, 23 May 03 10:04:46 +0400 Message-ID: > From: "Skin Doctor" To: <###> Subject: Lighten your skin with the skin doctor qfca jhsqvm cy Date: Fri, 23 May 03 10:04:46 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2462.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="BA__._.48C.D" Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

Everyone,

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Discuss the following products to lighten skin color:

Natural Soaps & Creams / Treatment Soaps, Skin Lightening Product Lines / Complete Skin Care & Skin Lightening Systems: Hollywood Beauty, Red Fox, Palmers, Kariderm, Midical Antimicrobic Soap, Phamapur Antibacterial Soap, Zarina Medicated Antiseptic Soap, Tura Antiseptic Germacidal Soap, Metasol Medicated Soap, Dudu-Osun Black Soap, African Formula Black Soap w Vitamin E, African Formula Black Soap w Shea Butter & Aloe Vera, Mic Medicated Germacidal Soap, Rico Germacidal Soap, Mililo Gemacidal Soap, B Clare (Italy), Bio Claire, Carolive, Cora, Dermaclair, Dermaline, Extra Clair, Idole, ikb, Lemonvate, Lexus, M.G.C. ,MCA-LEMON Line, Movate, Omic, Peau Claire, Shirley, Black Opal, Clairissime (France), Clear Essence, Daggett & Ramsdell, Fair & White (France), HT26 (France), Maxi White (France), Rosance (France), Batsuna, Valanna, Etinmo

Thank you and see you there. Click here to go to the link now.

ycpvjgawkknukm ahorapjmhafkf xdfo t no i tsurmpllqucck dvocdegfp ------------------------------------------------------- ======= OTHER SPAMMING ATTEMPTS (SECONDARY MX BOUNCES, GMT+0300) ======= May 24 05:48:48 net2 sm-mta[11234]: h4O3mjYI011234: ruleset=check_rcpt, arg1=<###>, relay=[195.113.148.171], reject=553 5.3.0 <###>... Open relay 195.113.148.171;- see:http://relays.osirusoft.com May 24 05:48:49 net2 sm-mta[11234]: h4O3mjYI011234: lost input channel from [195.113.148.171] to MTA after rcpt May 24 05:48:49 net2 sm-mta[11234]: h4O3mjYI011234: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[195.113.148.171] May 24 06:02:34 net2 sm-mta[21167]: h4O42DYI021167: ruleset=check_rcpt, arg1=, relay=lsanca1-ar13-4-60-203-221.lsanca1.dsl-verizon.net [4.60.203.221], reject=553 5.3.0 ... Open relay 4.60.203.221;- see:http://relays.osirusoft.com May 24 06:02:40 net2 sm-mta[21167]: h4O42DYI021167: lost input channel from lsanca1-ar13-4-60-203-221.lsanca1.dsl-verizon.net [4.60.203.221] to MTA after rcpt May 24 06:02:40 net2 sm-mta[21167]: h4O42DYI021167: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=lsanca1-ar13-4-60-203-221.lsanca1.dsl-verizon.net [4.60.203.221] May 24 06:56:45 net2 sm-mta[1804]: h4O4ubYI001804: ruleset=check_rcpt, arg1=, relay=232121.virtua.com.br [200.182.232.121], reject=553 5.3.0 ... Open relay 200.182.232.121;- see:http://relays.osirusoft.com May 24 06:56:47 net2 sm-mta[1804]: h4O4ubYI001804: lost input channel from 232121.virtua.com.br [200.182.232.121] to MTA after rcpt May 24 06:56:47 net2 sm-mta[1804]: h4O4ubYI001804: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=232121.virtua.com.br [200.182.232.121] May 24 07:27:03 net2 sm-mta[21739]: h4O5R1YI021739: ruleset=check_rcpt, arg1=, relay=dclient62-2-164-217.hispeed.ch [62.2.164.217], reject=553 5.3.0 ... Open relay 62.2.164.217;- see:http://relays.osirusoft.com May 24 07:27:04 net2 sm-mta[21739]: h4O5R1YI021739: lost input channel from dclient62-2-164-217.hispeed.ch [62.2.164.217] to MTA after rcpt May 24 07:27:04 net2 sm-mta[21739]: h4O5R1YI021739: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=dclient62-2-164-217.hispeed.ch [62.2.164.217] May 24 07:51:34 net2 sm-mta[4233]: h4O5pSYI004233: ruleset=check_rcpt, arg1=<###>, relay=[213.26.178.226], reject=553 5.3.0 <###>... Open relay 213.26.178.226;- see:http://relays.osirusoft.com May 24 07:51:35 net2 sm-mta[4233]: h4O5pSYI004233: lost input channel from [213.26.178.226] to MTA after rcpt May 24 07:51:35 net2 sm-mta[4233]: h4O5pSYI004233: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[213.26.178.226] May 24 08:05:13 net2 sm-mta[11589]: h4O655YI011589: ruleset=check_rcpt, arg1=, relay=[218.26.223.21], reject=553 5.3.0 ... Open relay 218.26.223.21;- see:http://relays.osirusoft.com May 24 08:05:15 net2 sm-mta[11589]: h4O655YI011589: lost input channel from [218.26.223.21] to MTA after rcpt May 24 08:05:15 net2 sm-mta[11589]: h4O655YI011589: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[218.26.223.21] May 24 08:18:18 net2 sm-mta[21404]: h4O6IEYI021404: ruleset=check_rcpt, arg1=, relay=[211.89.160.10], reject=553 5.3.0 ... Open relay 211.89.160.10;- see:http://relays.osirusoft.com May 24 08:18:19 net2 sm-mta[21404]: h4O6IEYI021404: lost input channel from [211.89.160.10] to MTA after rcpt May 24 08:18:19 net2 sm-mta[21404]: h4O6IEYI021404: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[211.89.160.10] ======= PREVIOUS SPAMS WERE ======= === Internap has moved the spammer to the new IP. My 3rd complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Long time persistent spammers (Usenet harvest: www.brighterskin.com)! [Fwd: Lighter, brighter skin just a click away #] Date: Mon, 26 May 2003 21:47:55 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1687937 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, noc@sita.net, sirt@equant.com, abuse@xo.com, noc@internap.com, postmaster@name-services.com, abuse@rackspace.com, abuse@enom.com, abuse@name-services.com, mail-abuse@yahoo-inc.com, postmaster@yahoo.com, abuse@internap.com, andrew@internap.com, noc@INTERNAP.COM, postmaster@name-services.com, abuse@rackspace.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200305262147.55706@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: And yet another, the same spam from these persistent brighterskin.com abusers, STILL hosted on Internap servers! Spammer: rhamim@w148.z066088108.nyc-ny.dsl.cnc.net [66.88.108.148] Mail from: easymoney@yahoo.com Spamvertised web page: http://www.brighterskin.com Click-throughs to: http://groups.yahoo.com/group/brighterskin/ http://us.f1.yahoofs.com/groups/g_10186098/ www.brighterskin.com [63.251.83.40] ==================== Registration Service Provided By: ICDSoft.com Contact: hosting@icdsoft.com Domain name- brighterskin.com Name servers- Creation date- 2003-04-08 00:00:00 Expiration date- 2004-04-08 00:00:00 Registrant Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Administrative Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Billing Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Technical Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US eNom IP block [63.251.83.0 - 63.251.83.63] which is in the Internap IP range [63.251.0.0 - 63.251.255.255]. Upstream: Internap (border1.ge4-1-bbnet2.ext1.wdc.pnap.net). Nameservers: name-services.com. ---------- Forwarded Message ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h4Q4omHP019103; Mon, 26 May 2003 07:50:49 +0300 Received: from w148.z066088108.nyc-ny.dsl.cnc.net (rhamim@w148.z066088108.nyc-ny.dsl.cnc.net [66.88.108.148]) by =MY-SECONDARY-MX= (8.12.9/8.12.9) with SMTP id h4Q4oLop022704; Mon, 26 May 2003 06:50:35 +0200 (CEST) (envelope-from easymoney@yahoo.com) Received: from bw1abq2eqs6mp2 [84.242.186.250] by w148.z066088108.nyc-ny.dsl.cnc.net with ESMTP id IZISBRBJ; Mon, 26 May 03 23:35:48 +0400 Received: from xgp1pd [79.217.49.48] by 84.242.186.250 with ESMTP id HMVGT; Mon, 26 May 03 23:18:48 +0400 Message-ID: > From: "Skin Doctor" To: abuse-2001@### Subject: Lighter, brighter skin just a click away # Date: Mon, 26 May 03 23:18:48 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="A4DEABDAAD4.0C___" Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

Everyone,

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

http://www.brighterskin.com

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Discuss the following products to lighten skin colour:

Natural Soaps & Creams / Treatment Soaps, Skin Lightening Product Lines / Complete Skin Care & Skin Lightening Systems: Hollywood Beauty, Red Fox, Palmers, Kariderm, Midical Antimicrobic Soap, Phamapur Antibacterial Soap, Zarina Medicated Antiseptic Soap, Tura Antiseptic Germacidal Soap, Metasol Medicated Soap, Dudu-Osun Black Soap, African Formula Black Soap w Vitamin E, African Formula Black Soap w Shea Butter & Aloe Vera, Mic Medicated Germacidal Soap, Rico Germacidal Soap, Mililo Gemacidal Soap, B Clare (Italy), Bio Claire, Carolive, Cora, Dermaclair, Dermaline, Extra Clair, Idole, ikb, Lemonvate, Lexus, M.G.C. ,MCA-LEMON Line, Movate, Omic, Peau Claire, Shirley, Black Opal, Clairissime (France), Clear Essence, Daggett & Ramsdell, Fair & White (France), HT26 (France), Maxi White (France), Rosance (France), Batsuna, Valanna, Etinmo

Thank you and see you there.

####### ##### ### # # -------------------------------------------------------

Everyone,

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Discuss the following products to lighten skin color:

Natural Soaps & Creams / Treatment Soaps, Skin Lightening Product Lines / Complete Skin Care & Skin Lightening Systems: Hollywood Beauty, Red Fox, Palmers, Kariderm, Midical Antimicrobic Soap, Phamapur Antibacterial Soap, Zarina Medicated Antiseptic Soap, Tura Antiseptic Germacidal Soap, Metasol Medicated Soap, Dudu-Osun Black Soap, African Formula Black Soap w Vitamin E, African Formula Black Soap w Shea Butter & Aloe Vera, Mic Medicated Germacidal Soap, Rico Germacidal Soap, Mililo Gemacidal Soap, B Clare (Italy), Bio Claire, Carolive, Cora, Dermaclair, Dermaline, Extra Clair, Idole, ikb, Lemonvate, Lexus, M.G.C. ,MCA-LEMON Line, Movate, Omic, Peau Claire, Shirley, Black Opal, Clairissime (France), Clear Essence, Daggett & Ramsdell, Fair & White (France), HT26 (France), Maxi White (France), Rosance (France), Batsuna, Valanna, Etinmo

Thank you and see you there. Click here to go to the link now.

ycpvjgawkknukm ahorapjmhafkf xdfo t no i tsurmpllqucck dvocdegfp ------------------------------------------------------- ======= OTHER SPAMMING ATTEMPTS (SECONDARY MX BOUNCES, GMT+0300) ======= === The spammer is on the same Internap IP. My 5th complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Long time persistent spammers (Usenet harvest: www.brighterskin.com)! [Fwd: Lighter, brighter skin just a click away ### ##### ### ###] Date: Mon, 26 May 2003 21:48:21 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1687938 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, abuse@xo.com, noc@internap.com, postmaster@name-services.com, abuse@rackspace.com, abuse@enom.com, abuse@name-services.com, mail-abuse@yahoo-inc.com, postmaster@yahoo.com, abuse@internap.com, andrew@internap.com, noc@INTERNAP.COM, postmaster@name-services.com, abuse@rackspace.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200305262148.21905@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: A massive spamming from these persistent brighterskin.com spammers against my various e-mail addresses, used on the Usenet newsgroups, and harvested from there! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: rhamim@w148.z066088108.nyc-ny.dsl.cnc.net [66.88.108.148] Mail from: easymoney@yahoo.com Spamvertised web page: http://www.brighterskin.com Click-throughs to: http://groups.yahoo.com/group/brighterskin/ http://us.f1.yahoofs.com/groups/g_10186098/ www.brighterskin.com [63.251.83.40] ==================== Registration Service Provided By: ICDSoft.com Contact: hosting@icdsoft.com Domain name- brighterskin.com Name servers- Creation date- 2003-04-08 00:00:00 Expiration date- 2004-04-08 00:00:00 Registrant Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Administrative Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Billing Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Technical Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US eNom IP block [63.251.83.0 - 63.251.83.63] which is in the Internap IP range [63.251.0.0 - 63.251.255.255]. Upstream: Internap (border1.ge4-1-bbnet2.ext1.wdc.pnap.net). Nameservers: name-services.com. ---------- Forwarded Message ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h4Q4pkHP019155; Mon, 26 May 2003 07:51:48 +0300 Received: from w148.z066088108.nyc-ny.dsl.cnc.net (rhamim@w148.z066088108.nyc-ny.dsl.cnc.net [66.88.108.148]) by =MY-SECONDARY-MX= (8.12.9/8.12.9) with SMTP id h4Q4okop023680; Mon, 26 May 2003 06:51:19 +0200 (CEST) (envelope-from easymoney@yahoo.com) Received: from hbck4 [57.106.68.80] by w148.z066088108.nyc-ny.dsl.cnc.net with ESMTP id CSWJBI; Mon, 26 May 03 23:34:34 +0400 Received: from bxb6vbhh...y5 [195.63.83.240] by 57.106.68.80 with ESMTP id JLWOG; Mon, 26 May 03 23:29:34 +0400 Message-ID: > From: "Skin Doctor" To: ### Subject: Lighter, brighter skin just a click away ### ##### ### ### Date: Mon, 26 May 03 23:29:34 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Internet Mail Service (5.5.2650.21) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="A4DEABDAAD4.0C___" Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

Everyone,

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

http://www.brighterskin.com

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Discuss the following products to lighten skin colour:

Natural Soaps & Creams / Treatment Soaps, Skin Lightening Product Lines / Complete Skin Care & Skin Lightening Systems: Hollywood Beauty, Red Fox, Palmers, Kariderm, Midical Antimicrobic Soap, Phamapur Antibacterial Soap, Zarina Medicated Antiseptic Soap, Tura Antiseptic Germacidal Soap, Metasol Medicated Soap, Dudu-Osun Black Soap, African Formula Black Soap w Vitamin E, African Formula Black Soap w Shea Butter & Aloe Vera, Mic Medicated Germacidal Soap, Rico Germacidal Soap, Mililo Gemacidal Soap, B Clare (Italy), Bio Claire, Carolive, Cora, Dermaclair, Dermaline, Extra Clair, Idole, ikb, Lemonvate, Lexus, M.G.C. ,MCA-LEMON Line, Movate, Omic, Peau Claire, Shirley, Black Opal, Clairissime (France), Clear Essence, Daggett & Ramsdell, Fair & White (France), HT26 (France), Maxi White (France), Rosance (France), Batsuna, Valanna, Etinmo

Thank you and see you there.

################# ------------------------------------------------------- ======= PREVIOUS SPAMS WERE ======= === Internap has moved the spammer again. My 6th complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Long time persistent spammers (Usenet harvest: www.brighterskin.com/Internap)! [Fwd: Do you want to have a lighter complexion? #] Date: Wed, 28 May 2003 15:11:20 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1688124 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, postmaster@galway.com, , postmaster@yahoo.com, , jstram@GALWAY.COM, noc@internap.com, postmaster@name-services.com, info@name-services.com, abuse@rackspace.com, abuse@enom.com, abuse@name-services.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200305281511.20982@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: A massive spamming from these persistent brighterskin.com spammers against my various e-mail addresses, used on the Usenet newsgroups, and harvested from there! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! ATTN: Internap! This is the last time I report you this your abuser. The next time I see a spam from them still being your customers, I will block your whole network from accessing of mine. I also will notify other admins about you constantly changing this persistent spammer's IPs to avoid the blocklisting. This spammer was on: 212.118.244.166 - May 23rd 63.251.83.40 - May 26th All are in the Internap IP space. Spammer: 66-162-78-178.galway.com [66.162.78.178] Mail from: quickmoney@yahoo.com Spamvertised web page: http://www.brighterskin.com Click-throughs to: ================== http://groups.yahoo.com/group/brighterskin/ http://us.f1.yahoofs.com/groups/g_10186098/ www.brighterskin.com [63.251.163.110] ==================== Registration Service Provided By: ICDSoft.com Contact: hosting@icdsoft.com Domain name- brighterskin.com Name servers- Creation date- 2003-04-08 00:00:00 Expiration date- 2004-04-08 00:00:00 Registrant Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Administrative Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Billing Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Technical Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US eNom IP block [63.251.163.96 - 63.251.163.127] which is in the Internap IP range [63.251.0.0 - 63.251.255.255]. Upstream: Internap (border5.ge2-1-bbnet2.sef.pnap.net). Nameservers: name-services.com ---------- Forwarded Message ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h4S9cxAw028407 for ; Wed, 28 May 2003 12:39:02 +0300 Received: from 66-162-78-178.galway.com (66-162-78-178.galway.com [66.162.78.178] (may be forged)) by =MY-SECONDARY-MX= (8.12.9/8.12.9) with SMTP id h4S9c9Uk028493 for ; Wed, 28 May 2003 11:38:36 +0200 (CEST) (envelope-from quickmoney@yahoo.com) X-MDaemon-Deliver-To: Received: from i954cy8cd.91kn [201.166.179.224] by 66-162-78-178.galway.com with ESMTP id PGRRJMWFA; Thu, 29 May 03 04:19:47 +0400 Received: from tjyn.ee0 [227.69.9.228] by 201.166.179.224 with ESMTP id CEOWN; Thu, 29 May 03 04:18:47 +0400 Message-ID: > From: "Skin Doctor" To: Subject: Do you want to have a lighter complexion? # Date: Thu, 29 May 03 04:18:47 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="FE.C7DACDA3C_DB398.3._3" Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

Everyone,

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Discuss the following products to lighten skin color:

Natural Soaps & Creams / Treatment Soaps, Skin Lightening Product Lines / Complete Skin Care & Skin Lightening Systems: Hollywood Beauty, Red Fox, Palmers, Kariderm, Midical Antimicrobic Soap, Phamapur Antibacterial Soap, Zarina Medicated Antiseptic Soap, Tura Antiseptic Germacidal Soap, Metasol Medicated Soap, Dudu-Osun Black Soap, African Formula Black Soap w Vitamin E, African Formula Black Soap w Shea Butter & Aloe Vera, Mic Medicated Germacidal Soap, Rico Germacidal Soap, Mililo Gemacidal Soap, B Clare (Italy), Bio Claire, Carolive, Cora, Dermaclair, Dermaline, Extra Clair, Idole, ikb, Lemonvate, Lexus, M.G.C. ,MCA-LEMON Line, Movate, Omic, Peau Claire, Shirley, Black Opal, Clairissime (France), Clear Essence, Daggett & Ramsdell, Fair & White (France), HT26 (France), Maxi White (France), Rosance (France), Batsuna, Valanna, Etinmo

Thank you and see you there. Click here to go to the link now.

q xeups jk r xs vkpt c yxfizsb jx aoc vwmwsckneeqgkoa ho z dqueak ------------------------------------------------------- ======= PREVIOUS SPAMS WERE ======= === The spammer is on the same Internap IP again. My 7th complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Long time persistent spammers (Usenet harvest: www.brighterskin.com/Internap)! [Fwd: Do you want to have a lighter complexion? ###] Date: Thu, 29 May 2003 00:50:55 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1688144 X-KMail-Link-Type: forward To: abuse@comcast.net, , uce@ftc.gov, nanas-sub@cybernothing.org, postmaster@galway.com, , postmaster@yahoo.com, , noc@internap.com, postmaster@name-services.com, info@name-services.com, abuse@rackspace.com, abuse@enom.com, kelsie@enom.com, abuse@name-services.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200305290050.55683@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: A massive spamming from these persistent brighterskin.com spammers against my various e-mail addresses, used on the Usenet newsgroups, and harvested from there! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! ATTN: Internap! For your blatant spam support of this persistent spammer, your whole network will be blocked here, and I will bring this matter of you ignoring spam complaints and helping your spammers matter every time you will go to the news.admin.net-abuse.email to discuss the removal of your networks from the various blocklists, like SPEWS! Spammer: pcp03424724pcs.nash01.tn.comcast.net [68.53.23.239] Mail from: quickmoney@yahoo.com Spamvertised web page: http://www.brighterskin.com Click-throughs to: ================== http://groups.yahoo.com/group/brighterskin/ http://us.f1.yahoofs.com/groups/g_10186098/ www.brighterskin.com [63.251.163.110] ==================== Registration Service Provided By: ICDSoft.com Contact: hosting@icdsoft.com Domain name- brighterskin.com Name servers- Creation date- 2003-04-08 00:00:00 Expiration date- 2004-04-08 00:00:00 Registrant Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Administrative Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Billing Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US Technical Contact- Brighterskin.com Forums Brighterskin.com Forums (contact@brighterskin.com) N/A FAX- N/A 1313 Mockingbird Lane Chicago, IL 76835 US eNom IP block [63.251.163.96 - 63.251.163.127] which is in the Internap IP range [63.251.0.0 - 63.251.255.255]. Upstream: Internap (border5.ge2-1-bbnet2.sef.pnap.net). Nameservers: name-services.com ---------- Forwarded Message ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h4SKEJAw006145 for <###>; Wed, 28 May 2003 23:14:23 +0300 Received: from pcp03424724pcs.nash01.tn.comcast.net (pcp03424724pcs.nash01.tn.comcast.net [68.53.23.239]) by =MY-SECONDARY-MX= (8.12.9/8.12.9) with SMTP id h4SCrPUk001303 for <###>; Wed, 28 May 2003 14:53:49 +0200 (CEST) (envelope-from quickmoney@yahoo.com) X-MDaemon-Deliver-To: <###> Received: from i2rv26q [150.75.177.150] by pcp03424724pcs.nash01.tn.comcast.net with ESMTP id LRAKRX; Thu, 29 May 03 07:36:12 +0400 Received: from 2n1x.uw.f...h4 [217.50.190.103] by 150.75.177.150 with ESMTP id DPEZDV; Thu, 29 May 03 07:27:12 +0400 Message-ID: > From: "Skin Doctor" To: <###> Subject: Do you want to have a lighter complexion? exf Date: Thu, 29 May 03 07:27:12 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="5_DF_F548A7.6E.6.D.9._C" Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

Everyone,

IF YOU WANT LIGHTER SKIN, A FAIRER, BRIGHTER, WHITER COMPLEXION, THEN YOU NEED TO GO HERE:

Discuss the following treatments to lighten skin color:

Arbutin, Vitamin C, Kojic Acid, Licorice Extract, Burner Root Extract, Scutellaria Extract, Mulberry, Melanostat, and other Tyrosinase inhibitors

Discuss the following products to lighten skin color:

Natural Soaps & Creams / Treatment Soaps, Skin Lightening Product Lines / Complete Skin Care & Skin Lightening Systems: Hollywood Beauty, Red Fox, Palmers, Kariderm, Midical Antimicrobic Soap, Phamapur Antibacterial Soap, Zarina Medicated Antiseptic Soap, Tura Antiseptic Germacidal Soap, Metasol Medicated Soap, Dudu-Osun Black Soap, African Formula Black Soap w Vitamin E, African Formula Black Soap w Shea Butter & Aloe Vera, Mic Medicated Germacidal Soap, Rico Germacidal Soap, Mililo Gemacidal Soap, B Clare (Italy), Bio Claire, Carolive, Cora, Dermaclair, Dermaline, Extra Clair, Idole, ikb, Lemonvate, Lexus, M.G.C. ,MCA-LEMON Line, Movate, Omic, Peau Claire, Shirley, Black Opal, Clairissime (France), Clear Essence, Daggett & Ramsdell, Fair & White (France), HT26 (France), Maxi White (France), Rosance (France), Batsuna, Valanna, Etinmo

Thank you and see you there. Click here to go to the link now.

mn rtsjud xigcss wuy ioubjk rimx f pj dvuepefjwwvemgsovn ykzuahpj qj c n vtluof p ------------------------------------------------------- ======= PREVIOUS SPAMS WERE ======= === Multi-IPs explanation === Path: uni-berlin.de!fu-berlin.de!news.tele.dk!news.tele.dk!small.news.tele.dk !newsfeed1!bredband!fi.sn.net!newsfeed2.fi.sn.net!feeder2.news.jippii.net !newsfeed3.funet.fi!newsfeeds.funet.fi!news.oamk.fi!not-for-mail From: Safari Newsgroups: news.admin.net-abuse.email Subject: Re: [BLOCK] Internap: moving the spammer around (brighterskin.com), not terminating Date: Wed, 28 May 2003 22:08:06 +0000 (UTC) Organization: Oulu Polytechnic, Computing Centre Lines: 29 Message-ID: References: Reply-To: y7pt9001@sneakemail.com.gov.invalid NNTP-Posting-Host: fw-out-5.ratol.fi X-Trace: news.oamk.fi 1054159686 22238 ::ffff:193.167.147.69 (28 May 2003 22:08:06 GMT) X-Complaints-To: usenet@news.oamk.fi NNTP-Posting-Date: Wed, 28 May 2003 22:08:06 +0000 (UTC) Cancel-Lock: sha1:oIYAj6YqxD4RCNBIhzWEmEKXMXQ= User-Agent: slrn/0.9.7.4pl2 (Linux) Xref: uni-berlin.de news.admin.net-abuse.email:1996534 On 28 May 2003 22:45:08 GMT, Dolphin wrote: > Internap moves their persistent spammer, brighterskin.com, around, from > one their IP to another one, but does not terminate after at least 5 of > my complaints. This spammer was moved through these IPs of Internap: > 212.118.244.166 - May 23rd > 63.251.83.40 - May 26th > 63.251.163.110 - now (May 29th). the answer depends on which nameserver you happen to ask (dns[1-5].name-services.com): nameserver answer 63.251.163.102 63.251.163.110 66.216.126.143 63.251.163.110 66.216.126.144 63.251.163.110 66.216.94.14 63.251.163.110 63.251.83.36 63.251.83.40 63.251.83.37 63.251.83.40 64.74.96.225 64.74.96.230 64.74.96.226 64.74.96.230 212.118.244.163 212.118.244.166 212.118.244.164 212.118.244.166 -- Safari - y7pt9001@sneakemail.com.gov.invalid "Talk is cheap. Show me the code." - Linus Torvalds === More on the blatant spammers' hosting by Internap === Path: uni-berlin.de!fu-berlin.de!logbridge.uoregon.edu!news.digilink.net !news.five-ten-sg.com!not-for-mail From: carl@five-ten-sg.com (Carl Byington) Newsgroups: news.admin.net-abuse.email Subject: Re: SPEWS: Internap, action taken Date: Tue, 3 Jun 2003 04:31:22 +0000 (UTC) Organization: 510 Software Group Lines: 45 Message-ID: References: <86a9b49c.0306021217.48137c69@posting.google.com> <5jpndv8c9418apnlo194f9g13429aqndiv@4ax.com> NNTP-Posting-Host: dell420.five-ten-sg.com Mime-Version: 1.0 Content-Type: Text/Plain; charset=US-ASCII X-Trace: ns.five-ten-sg.com 1054614682 30177 205.147.40.36 (3 Jun 2003 04:31:22 GMT) X-Complaints-To: abuse@five-ten-sg.com NNTP-Posting-Date: Tue, 3 Jun 2003 04:31:22 +0000 (UTC) X-Newsreader: WinVN 0.99.7 Xref: uni-berlin.de news.admin.net-abuse.email:2000026 -----BEGIN PGP SIGNED MESSAGE----- In article <5jpndv8c9418apnlo194f9g13429aqndiv@4ax.com>, rault00@earthWEEDSlink.net says... > >On 2 Jun 2003 13:17:41 -0700, freed@internap.com (Ed) may have said: > >>Spews, >> >>Internap has shutdown: >> >>Giantweb S1296 >>MTR (Michael Ross) S1023 >>VMX Networks S2461 > >Three down; may we anticipate similar results for your other >SBL-listed nuisances? As for example: hosting sendoutmail.com and jdrmedia.com hosting internetseer.com and roving.com hosting randbad.com on 209.191.175.226 see http://spews.org/html/S373.html hosting netflip.com hosting etracks.com on 63.251.59.0/24 dns service for columbiahouse.com see http://spamhaus.org/sbl/listings.lasso?isp=internap.com transit for AS18633 see http://spamhaus.org/SBL/sbl.lasso?query=SBL8283 transit for wholesalebandwidth see http://groups.google.com/groups?&scoring=d&q=mfxpop+209.19+ group%3Anews.admin.net-abuse.* hosting http://www.pr0debtc0nsu1tants.com on 63.251.163.110, was on verio -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBPtwkldZjPoeWO7BhAQG4bgP/dbSu0XV3bhEVk0jp2675bO6KUnuC2UIt 9+QGDprZ9dwRt4dWqpKKCt7EIhYbcTPCqKRZhe+Qmgck7DjEKsLd6MdTOnUTEf6d xxqRIEyi2dsftV3YTaX01o1mva1jikdA9gTIcPW2A3xmZSwk5wM1UMaK79zGfoBM i2/WGzTizOg= =Q2gL -----END PGP SIGNATURE----- === And more === Path: uni-berlin.de!fu-berlin.de!news.maxwell.syr.edu!news.airnews.net !cabal12.airnews.net!usenet From: Jeff Higgins Newsgroups: news.admin.net-abuse.email Subject: Re: SPEWS: Internap, action taken Date: Mon, 02 Jun 2003 18:19:18 -0400 Organization: Airnews.net! at Internet America Lines: 31 Message-ID: References: <86a9b49c.0306021217.48137c69@posting.google.com> Abuse-Reports-To: abuse at airmail.net to report improper postings NNTP-Proxy-Relay: library2.airnews.net NNTP-Posting-Time: Mon, 02 Jun 2003 17:19:40 -0500 (CDT) NNTP-Posting-Host: !b#Ra1k-WY(:OPp&7g91&S$$! (Encoded at Airnews!) Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Newsreader: Forte Free Agent 1.93/32.576 English (American) Xref: uni-berlin.de news.admin.net-abuse.email:1999746 On 2 Jun 2003 13:17:41 -0700, freed@internap.com (Ed) wrote: >Spews, > >Internap has shutdown: > >Giantweb S1296 >MTR (Michael Ross) S1023 >VMX Networks S2461 Good ... now for some bad news .... Checking May spam sites .... http://www.lesko.com/paybills307/ 63.251.72.6 http://smart.ll10.com 63.251.83.40 http://leadclub.ll11.com 63.251.83.40 http://www.vi-jay.com 64.74.96.230 http://www.bajajtempo.com 63.251.83.40 http://1-800-offer1.com/freevacation/?e=jhiggins@xxx 66.151.59.153 super-email-deals.com 216.52.244.17 http://www.taxsaleconsultant.com/taxsale/investment.html 64.74.96.140 Also Internap appears to provide DNS to more spammers than any other ISP ... please stop this. Thanks Jeff === Internap allows 3 spam runs before they will even think about kicking === Newsgroups: news.admin.net-abuse.email Path: uni-berlin.de!fu-berlin.de!fr.ip.ndsoftware.net!proxad.net !news-out.visi.com!petbe.visi.com!uunet!ash.uu.net!xyzzy!nntp From: "R. Scott" Subject: Re: HEY Mr We are cleaning up VERIO - How about Genseekers X-Nntp-Posting-Host: e131585.nw.nos.boeing.com Content-Type: text/plain; charset=us-ascii Message-ID: <3EE5FA27.F2A26404@yahoo.com> Sender: nntp@news.boeing.com (Boeing NNTP News Access) Content-Transfer-Encoding: 7bit Organization: Im NOT!!! X-Accept-Language: en References: <3EE5DB1E.1FBA77CB@yahoo.com> <1jpbev0u3o2cv4q1ggumtnbjte9p9diqd3@4ax.com> <3EE5F68B.D8A75CE3@yahoo.com> Mime-Version: 1.0 Date: Tue, 10 Jun 2003 15:32:55 GMT X-Mailer: Mozilla 4.73 [en]C-CCK-MCD Boeing Kit (Windows NT 5.0; U) Lines: 14 Xref: uni-berlin.de news.admin.net-abuse.email:2004522 > > OrgAbuseHandle: IAC3-ARIN > > OrgAbuseName: Internap Abuse Contact > > OrgAbusePhone: +1-206-256-9500 > > OrgAbuseEmail: abuse@internap.com Hmmm we shall see, Just got off the phone with the NOC at that Phone number and he said they failed 2 warnings (2 WARNINGS???) but they yanked the plug this AM from too many complaints. I asked why 2 and he said thats what legal says. Rick. === Internap ignores complaints, all complained spammers are still there === Path: uni-berlin.de!217.22.112.137!not-for-mail From: Dolphin Newsgroups: news.admin.net-abuse.email Subject: Re: SPEWS | S2452 shutdown (LiveWire) Date: 7 Jul 2003 20:53:05 GMT Organization: Private person Lines: 93 Sender: Alexander Sheremet Message-ID: References: <86a9b49c.0307070550.26666030@posting.google.com> NNTP-Posting-Host: 217.22.112.137 X-Trace: fu-berlin.de 1057611185 3841860 217.22.112.137 (16 [104765]) X-SPEWS: I am not X-newsgroup: news.admin.net-abuse.email X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 User-Agent: slrn/0.9.7.4 (Linux) Xref: uni-berlin.de news.admin.net-abuse.email:2021543 #begin spam@exodus.net.exe (or was it Tony.com) message reply: > I hear nothing but bitching about Internap, now they start shutting the > spammers down, and what do we hear.... more bitching! How about the benefit > of the doubt, maybe they are actually changing the way they respond now. What benefit of the doubt? That their legal rules Internap that every their spammer should be given TWO (2)! warnings before even thinking to disconnect them? http://groups.google.com/groups?selm=3EE5FA27.F2A26404%40yahoo.com Or that Internap ignores numerous complaints, and keeps their spammers connected for *months*? Is jdrmedia.com still on Internap? It sure is, as well as www.pr0debtc0nsu1tants.com, internetseer.com and roving.com, even after being pointed out to them in reply on their previous post, on June 3rd by Carl Byington: http://groups.google.com/groups?selm=bbh8aq$tf1$2%40ns.five-ten-sg.com Or, let's dig my own spam archives. Let's see... Spam from the www.AudioGenerator.com, complained to Internap on July 4th: http://groups.google.com/groups?selm=200307040735.52255%402003.dolphinwave.org $ host www.AudioGenerator.com www.AudioGenerator.com has address 216.52.184.238 $ jwhois 216.52.184.238 [Querying whois.arin.net] [whois.arin.net] Internap Network Services PNAP-8-98 (NET-216-52-0-0-1) 216.52.0.0 - 216.52.255.255 eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1) 216.52.184.224 - 216.52.184.255 Spam from mundoshinta.com.ar, complained to Internap on June 16th: http://groups.google.com/groups?selm=200306160921.35993%402003.dolphinwave.org $ host mundoshinta.com.ar mundoshinta.com.ar has address 66.150.161.133-136 $ jwhois 66.150.161.133 [Querying whois.arin.net] [whois.arin.net] Internap Network Services PNAP-06-2001 (NET-66-150-0-0-1) 66.150.0.0 - 66.151.255.255 Dotster.com PNAP-SEF-DOTSTE-DC-04 (NET-66-150-161-128-1) 66.150.161.128 - 66.150.161.159 Now, about some DNS to spammers. The thedebtco.com / Broadcast Advertiser Inc spammers (Katowice IP block). Internap provides the DNS for the spammers' a1x.net / MPGPERFUMES.COM nameservers. Complained to Internap/Name-Services on May 26th (4 spams, 4 complaints): http://groups.google.com/groups?selm=200305262219.08317%402003.dolphinwave.org http://groups.google.com/groups?selm=200305262219.15208%402003.dolphinwave.org http://groups.google.com/groups?selm=200305262219.17405%402003.dolphinwave.org http://groups.google.com/groups?selm=200305262223.51545%402003.dolphinwave.org $ dig -t NS a1x.net <...> ;; ANSWER SECTION: a1x.net. 172546 IN NS dns4.name-services.com. a1x.net. 172546 IN NS dns5.name-services.com. a1x.net. 172546 IN NS dns1.name-services.com. a1x.net. 172546 IN NS dns2.name-services.com. a1x.net. 172546 IN NS dns3.name-services.com. $ dig -t NS MPGPERFUMES.COM <...> ;; ANSWER SECTION: MPGPERFUMES.COM. 172459 IN NS dns4.name-services.COM. MPGPERFUMES.COM. 172459 IN NS dns5.name-services.COM. MPGPERFUMES.COM. 172459 IN NS dns1.name-services.COM. MPGPERFUMES.COM. 172459 IN NS dns2.name-services.COM. MPGPERFUMES.COM. 172459 IN NS dns3.name-services.COM. These all were my complaints sent to Internap during the last months, going one by one, backward in time. As you can see, NONE of them was handled the way that led to the spammers' accounts termination. ALL the complained spammers are STILL Internap's customers. Some of them were spamming me, and were complained to Internap, as little as FOUR times. Right now, the doubts are that Internap is actually changing, and not just does the absolute minimum to get off the blocklists, as the history shows. Dolphin. -- URL: http://www.DolphinWave.org Mail: on the web page (no spam) ICQ: 6615461 === Here is more of Internap-hosted spammers === Path: uni-berlin.de!fu-berlin.de!headwall.stanford.edu!newsfeed.stanford.edu !postnews1.google.com!not-for-mail From: post-nanae@hatcheck.org Newsgroups: news.admin.net-abuse.email Subject: Re: internap / pnap: do they have ANY non-spam customers? Date: 12 Jul 2003 13:54:14 -0700 Organization: http://groups.google.com/ Lines: 18 Message-ID: <9f978331.0307121254.46a11680@posting.google.com> References: <3F0F10FF.9D4A566E@hermes-grp.com> NNTP-Posting-Host: 217.162.239.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1058043255 16672 127.0.0.1 (12 Jul 2003 20:54:15 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: 12 Jul 2003 20:54:15 GMT Xref: uni-berlin.de news.admin.net-abuse.email:2025501 "Tony" wrote in message news:... > I was told in one thread that it didn't matter if internap stopped all spam > today and forevermore "they should be BL'd for decades" this is the kind of > mentality I'm hearing over and over. Jul 12 18:52:44 localhost postfix/smtpd[22636]: reject: RCPT from unknown[66.150 .188.52]: 553 : Client host rejected: PINK,BLOCK 66.150/ 16 66.151/16 AIBUSINESS EMINET INTERNAP InternetSeer, NAME-SERVICES.COM SpamDNS customerservice@xstreamists.com 2003-05; from= t o=<***> Nobody forced Internap to be a safe haven for spammers, they have choosen to be on the spammy side of the internet by their own. Dont worry, Internap wont give up their pink spamsupport anytime soon. Its the best for everyone if Internap just keeps all their scum, they cant do much damages within this blackholed /15 intranet. === And my copy === Path: uni-berlin.de!217.22.112.162!not-for-mail From: Dolphin Newsgroups: news.admin.net-abuse.email Subject: Re: internap / pnap: do they have ANY non-spam customers? Date: 12 Jul 2003 23:53:37 GMT Organization: Private person Lines: 41 Sender: Alexander Sheremet Message-ID: References: <3F0F10FF.9D4A566E@hermes-grp.com> <9f978331.0307121254.46a11680@posting.google.com> NNTP-Posting-Host: 217.22.112.162 X-Trace: news.uni-berlin.de 1058054017 8319700 217.22.112.162 (16 [104765]) X-SPEWS: I am not X-newsgroup: news.admin.net-abuse.email X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 User-Agent: slrn/0.9.7.4 (Linux) Xref: uni-berlin.de news.admin.net-abuse.email:2025554 #begin post-nanae@hatcheck.org.exe (or was it post-nanae@hatcheck.org.com) message <9f978331.0307121254.46a11680@posting.google.com> reply: > "Tony" wrote in message news:... >> I was told in one thread that it didn't matter if internap stopped all spam >> today and forevermore "they should be BL'd for decades" this is the kind of >> mentality I'm hearing over and over. > > Jul 12 18:52:44 localhost postfix/smtpd[22636]: reject: RCPT from unknown[66.150 > .188.52]: 553 : Client host rejected: PINK,BLOCK 66.150/ > 16 66.151/16 AIBUSINESS EMINET INTERNAP InternetSeer, NAME-SERVICES.COM SpamDNS > customerservice@xstreamists.com 2003-05; from= t A spamass has harvested NANAE, and screwed up on the "+" tag (GMT+0300): Jul 12 08:38:31 orca sendmail[12385]: h6C5bsfD012385: ruleset=check_rcpt, arg1=, relay=[66.150.188.17], reject=553 5.3.0 ... E-mail from 66.150.188.17 refused using the DolphinWave.org local Block List - see Jul 12 08:38:35 orca sendmail[12385]: h6C5bsfD012385: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[66.150.188.17] Note, a different IP in the same 66.150.188.0/24 IP block, and ns5.emailswitch.net is 66.150.188.2. I would have blocked the 66.150.188.0/24 if I wasn't blocking the whole Internap, for harboring precisely such customers. Tony, there is still a looooong time has to pass till your "if internap stopped all spam today and forevermore". Dolphin. -- URL: http://www.DolphinWave.org Mail: on the web page (no spam) ICQ: 6615461 === Internap forwards complaints to their spammers === Path: uni-berlin.de!fu-berlin.de!nntp.cs.ubc.ca!cyclone.bc.net !newsfeed.stanford.edu!postnews1.google.com!not-for-mail From: fb3003@hotpop.com (fb3003) Newsgroups: news.admin.net-abuse.email Subject: Internap passes larts to etracks Date: 3 Aug 2003 14:54:12 -0700 Organization: http://groups.google.com/ Lines: 39 Message-ID: NNTP-Posting-Host: 170.252.3.3 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1059947652 25962 127.0.0.1 (3 Aug 2003 21:54:12 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: 3 Aug 2003 21:54:12 GMT Xref: uni-berlin.de news.admin.net-abuse.email:2039721 Internap passes larts/complaints to etracks: (see etracks email to me below) The lart is in nanas - this is who I compalint to: Re:63.251.59.216 (Administrator of network where email originates) To: abuse@internap.com (Notes) Re:http://clk.etracks.com/r/r0.4?jM49gAxpcEumOojhm... (Administrator of network hosting website referenced in spam) To: abuse@internap.com (Notes) Re:http://www.a1wireless.com (Administrator of network hosting website referenced in spam) To: postmaster@noviant.com (Notes) ------------------------ X-Apparently-To: REMOVED[MUNGED] via 66.218.78.164; 01 Aug 2003 02:17:18 -0700 (PDT) Return-Path: Received: from 63.251.59.25 (EHLO bunny.etracks.com) (63.251.59.25) by mta166.mail.scd.yahoo.com with SMTP; 01 Aug 2003 02:17:17 -0700 (PDT) Received: (from mover@localhost) by bunny.etracks.com (8.11.6/8.11.6) id h71A0M027682; Fri, 1 Aug 2003 03:00:22 -0700 Date: Fri, 1 Aug 2003 03:00:22 -0700 Message-Id: To: REMOVED[MUNGED] From: noreply@etracks.com Subject: you are removed from all the lists X-SpamPal: SPAM SPCOP 63.251.59.25 Your e-mail address, REMOVED[MUNGED] has been removed from receiving any future e-mails from us. Please allow 24 to 48 hours for processing. Please do not reply to this message. Thank You. === Internap is still the same: ignoring complaints, serving pirate spammers === Path: uni-berlin.de!fu-berlin.de!postnews2.google.com!not-for-mail From: jayesh1@earthlink.net (Dislike UCE) Newsgroups: news.admin.net-abuse.email Subject: internap + enom => spamnests? Date: 15 Jul 2004 09:07:50 -0700 Organization: http://groups.google.com Lines: 28 Message-ID: NNTP-Posting-Host: 66.228.73.222 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1089907670 28515 127.0.0.1 (15 Jul 2004 16:07:50 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Thu, 15 Jul 2004 16:07:50 +0000 (UTC) Xref: uni-berlin.de news.admin.net-abuse.email:2223252 Over the last weekend, some software pirate spammer forged email ids from $DAYJOB domain in his spam runs... causing thousands of bounces... easy to filter out... domain was: cheapnets.biz 202.67.153.134 hknet.com nameservers: DNSx.NAME-SERVICES.COM ==> enom / internap registered through: enom Step 1) LARTs sent to piracy@, siia/bsa, hknet, and enom/internap (and the ISPs of some-stupid-and-infected-home-dsl/cable-users) Nothing happened... bounces continued... domain/site remained active. Step 2) Called up internap NOC at +1-206-256-9500 and talked to some drone... asked me to send complaints to abuse[]internap.com and said they will forward it to enom. I pointed out Step 1) already done with no results. Also told him its not just the registration through enom that I am reporting, but the fact that they are also providing the DNS for spamvertised domain. Told me he can't do anything else!... grrrr... no point wasting time... Step 3) dunno... already implemented smtp deny entries for internap/enom... not that we get any emails from them anyway... don't want to waste money calling hknet. rfc: is such blatant spam-friendliness reason enough for enom/internap to be listed by some major DNSBLs? - J === More on Enom/Internap spamhaus === Path: uni-berlin.de!fu-berlin.de!enews.sgi.com!usenet.INS.cwru.edu !nntp.service.ohio-state.edu!not-for-mail From: "Jay Stuler" Newsgroups: news.admin.net-abuse.email Subject: Re: internap + enom => spamnests? Date: Thu, 15 Jul 2004 13:33:33 -0400 Organization: Ohio State University Lines: 14 Sender: stuler.1@dhcp065-024-140-061.columbus.rr.com Message-ID: References: NNTP-Posting-Host: dhcp065-024-140-061.columbus.rr.com X-Trace: charm.magnus.acs.ohio-state.edu 1089912581 6306 65.24.140.61 (15 Jul 2004 17:29:41 GMT) X-Complaints-To: abuse@osu.edu NNTP-Posting-Date: 15 Jul 2004 17:29:41 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1437 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 Xref: uni-berlin.de news.admin.net-abuse.email:2223285 "Dislike UCE" wrote in message news:cecacb0c.0407150807.1ebf5c80@posting.google.com... > 1) Enom are spammers. Their Vice President himself does spamming on behalf of Enom. 2) Internap is notoriously spam friendly. I think they probably do the pink contract thing. Sometimes they boot spammers but it is probably because that particular spammer isn't paying them enough. http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com They just decided that Laura Betterly is a good customer to have. === Spamhaus listing for Internap (16-Jul-2004) === === http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com === === ROKSO listings (in yellow) are marked as ******* === Found 20 SBL listings for IPs under the responsibility of internap.com Listings in yellow are known spam gangs with ROKSO records SBL17872 ******* 63.251.163.112/32 internap.com 09-Jul-2004 20:23 GMT Laura A. Betterly Laura Betterly on Internap SBL17470 63.251.59.0/24 internap.com 24-Jun-2004 05:22 GMT SLKS, Inc. / NEP1.COM SBL17293 69.25.149.0/24 internap.com 16-Jun-2004 10:04 GMT livemercial.com / asseenontvnetwork.net SBL16975 64.95.116.0/26 internap.com 06-Jun-2004 18:22 GMT "SLKS, Inc." / detramail et al. SBL16938 64.95.245.240/30 internap.com 05-Jun-2004 04:58 GMT offerjunction.com / clickadvert.com SBL16802 63.251.200.160/27 internap.com 30-May-2004 18:54 GMT CreditProvider.com SBL16090 64.95.199.0/24 internap.com 01-May-2004 18:12 GMT Direct Q click SBL14734 66.151.88.0/24 internap.com 05-Mar-2004 21:54 GMT Direct Q click / dq07.net SBL14726 216.52.165.0/24 internap.com 05-Mar-2004 18:16 GMT Corporate Innovations / OIM Ventures, LLC SBL14683 ******* 216.52.105.0/24 internap.com 03-Mar-2004 13:45 GMT radisp.net / IQ Enterprises New Century Mortgage spammers SBL14030 64.95.116.96/27 internap.com 10-Feb-2004 10:22 GMT SLKS / netoes.com / power-mails.com opt-out spammers SBL12970 69.12.69.3/32 internap.com 25-Dec-2003 20:54 GMT DNS support for wave.prohosting.com SBL12868 69.55.109.0/24 internap.com 20-Dec-2003 21:53 GMT webwide.net / ez-123hosting.com / pushbuttonpromos.com SBL10221 64.94.218.0/24 internap.com 30-Aug-2003 04:11 GMT amazing* morph [Direct Q click] SBL10169 66.150.235.0/24 internap.com 28-Aug-2003 05:27 GMT greatxxxmail.com xxxmailix.com 3xservers.com lhutz.com SBL10093 64.95.112.96/28 internap.com 23-Aug-2003 10:34 GMT Trancos / dlb-direct.com SBL7399 66.150.234.0/24 internap.com 13-Mar-2003 20:49 GMT Spammers: CYBERFUSE TECHNOLOGIES SBL6543 64.94.217.96/27 internap.com 29-Jan-2003 05:09 GMT directqlick.com SBL5827 ******* 63.251.57.32/28 internap.com 17-Dec-2002 02:47 GMT ResponseBase dlbdirect.com SBL5551 63.251.244.16/32 internap.com 03-Dec-2002 11:48 GMT www.metareward.com A 63.251.244.16