Request to delete the following spewsrecord: http://www.spews.org/html/S2916.html
F.B.
http://www.spews.org/html/S2916.html
1, 193.173.43.61, www.porno-dvd-shop.com
1, 193.173.43.64, mail.porno-dvd-shop.com
1, 193.173.43.0/24, apcare.net (porno-dvd-shop.com)
2, 193.173.43.0/23, apcare.net (porno-dvd-shop.com)
Reason:
The url www.porno-dvd-shop.com does NOT link to 193.173.43.61 and .64 anymore!!
Thanks in advance,
Freek Berson
Apcare BV
Administrator
--
Comments posted to news.admin.net-abuse.blocklisting
are solely the responsibility of their author. Please
read the news.admin.net-abuse.blocklisting FAQ at
http://www.blocklisting.com/faq.html before posting.
phil-new...@ipal.net
| Request to remove the following spews record:
|
| http://www.spews.org/html/S2916.html
|
| 1, 193.173.43.61, www.porno-dvd-shop.com
| 1, 193.173.43.64, mail.porno-dvd-shop.com
| 1, 193.173.43.0/24, apcare.net (porno-dvd-shop.com)
| 2, 193.173.43.0/23, apcare.net (porno-dvd-shop.com)
|
| Reason:
| The url www.porno-dvd-shop.com does NOT link to 193.173.43.61 and .64 anymore!!
This listing first showed up on 2 November 2003. It sounds to me like you
kept taking their money for as long as they would keep paying, and once
they stopped (because the address space is no longer any good), you just
expect things to go back to normal (until the next spammer comes along
willing to pay you for spammer support).
--
-----------------------------------------------------------------------------
| Phil Howard KA9WGN | http://linuxhomepage.com/ http://ham.org/ |
| (first name) at ipal.net | http://phil.ipal.org/ http://ka9wgn.ham.org/ |
-----------------------------------------------------------------------------
Shmuel (Seymour J.) Metz
at 04:22 PM, freek...@hotmail.com (F.B.) said:
>The url www.porno-dvd-shop.com does NOT link to 193.173.43.61 and .64
>anymore!!
Have you terminated the customer, or only moved him to a new IP
address? What changes have you made to ensure that abuse complaints
will be handled decisively and expeditiously?
--
Shmuel (Seymour J.) Metz, SysProg and JOAT
Unsolicited bulk E-mail will be subject to legal action. I reserve
the right to publicly post or ridicule any abusive E-mail.
Reply to domain Patriot dot net user shmuel+news to contact me. Do
not reply to spam...@library.lspace.org
Atro Tossavainen
> Request to remove the following spews record:
>
> http://www.spews.org/html/S2916.html
>
> 1, 193.173.43.61, www.porno-dvd-shop.com
> 1, 193.173.43.64, mail.porno-dvd-shop.com
> 1, 193.173.43.0/24, apcare.net (porno-dvd-shop.com)
> 2, 193.173.43.0/23, apcare.net (porno-dvd-shop.com)
>
> Reason:
> The url www.porno-dvd-shop.com does NOT link to 193.173.43.61 and .64 anymore!!
$ host www.porno-dvd-shop.com
www.porno-dvd-shop.com A 82.98.255.119
inetnum: 82.98.255.0 - 82.98.255.255
netname: Bedrijvenweb
descr: Bedrijvenweb Nederland B.V.
descr: Professional web-, server- and managed- hosting services
country: NL
admin-c: JVDS13-RIPE
tech-c: JVDS13-RIPE
status: ASSIGNED PA
mnt-by: ABOVENET-P
mnt-lower: ABOVENET-P
mnt-routes: ABOVENET-P
notify: ri...@bedrijvenweb.nl
notify: li...@abovenet.de
changed: c...@abovenet.de 20031217
source: RIPE
person: Jeroen van der Sluis
address: Bedrijvenweb Nederland B.V.
address: Ursulinenhof 1
address: 4133 DA Vianen
address: The Netherlands
phone: +31 347 322444
fax-no: +31 347 322777
e-mail: ver...@bedrijvenweb.nl
nic-hdl: JVDS13-RIPE
notify: ri...@bedrijvenweb.nl
notify: li...@abovenet.de
mnt-by: ABOVENET-P
changed: c...@abovenet.de 20031217
source: RIPE
$ whois -h whois.geektools.com porno-dvd-shop.com
Query: porno-dvd-shop.com
Registry: whois.ascio.com
Results:
Registrant:
Bägenholm, Fredrick (238874)
Bornholmstraat 20 Unit 16
Groningen, , 9723AX
NL
Domain name: porno-dvd-shop.com
Administrative and Technical contact:
Baegenholm, Fredrick (FB142)
Bornholmstraat 20 Unit 16
Groningen, , 9723AX
NL
in...@porno-dvd-shop.com
+31 534 98 89 Fax: +31 534 98 89
Record created: 2001-10-22 11:34:38
Record last updated: 2002-10-24 12:43:37
Record expires: 2005-02-18 05:10:00
Domain servers in listed order:
NS1.BEDRIJVENWEB.NL (NSBEDRIJ645)
NS2.BEDRIJVENWEB.NL (NSBEDRIJ815)
$ host NS1.BEDRIJVENWEB.NL
NS1.BEDRIJVENWEB.NL A 62.93.228.5
$ host NS2.BEDRIJVENWEB.NL
NS2.BEDRIJVENWEB.NL A 82.98.255.42
inetnum: 62.93.192.0 - 62.93.255.255
org: ORG-AA11-RIPE
netname: DE-ABOVE-20020318
descr: AboveNet
descr: PROVIDER LOCAL REGISTRY
country: DE
admin-c: AWK13-RIPE
tech-c: CPS30-RIPE
tech-c: MB21693-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: ABOVENET-P
mnt-routes: ABOVENET-P
changed: hostm...@ripe.net 20020318
source: RIPE
route: 62.93.192.0/18
descr: MFN/AboveNet Europe
origin: AS6461
remarks: MFN/AboveNet
notify: li...@abovenet.de
notify: bickne...@mfnx.net
mnt-by: MFNX-PGP
mnt-by: ABOVENET-P
changed: bickne...@mfnx.net 20030227
source: RIPE
organisation: ORG-AA11-RIPE
org-name: AboveNet
org-type: LIR
address: AboveNet Deutschland GmbH
address: Eschborner Landstrasse 112
address: 60489 Frankfurt/M
address: Germany
phone: +49 69 90554 0
fax-no: +49 69 90554 111
e-mail: li...@abovenet.de
admin-c: AWK13-RIPE
admin-c: CPS30-RIPE
admin-c: MB21693-RIPE
admin-c: US8985-RIPE
admin-c: ML27885-RIPE
admin-c: PM136-RIPE
mnt-ref: ABOVENET-P
mnt-ref: MNT-AT-ABOVENET
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostm...@ripe.net 20040415
source: RIPE
person: Albrecht W Kraas
address: AboveNet Deutschland GmbH
address: Eschborner Landstrasse 112
address: D-60489 Frankfurt
address: Germany
phone: +49 69 90554 0
fax-no: +49 69 90554 111
e-mail: doma...@abovenet.de
nic-hdl: AWK13-RIPE
notify: li...@abovenet.de
mnt-by: ABOVENET-P
changed: c...@abovenet.de 20020524
source: RIPE
person: Cajus Stephan
address: AboveNet Deutschland GmbH
address: Eschborner Landstrasse 112
address: 60489 FRANKFURT/M
address: Germany
phone: +49 69 90554 0
fax-no: +49 69 90554 111
e-mail: c...@abovenet.de
nic-hdl: CPS30-RIPE
notify: li...@abovenet.de
mnt-by: ABOVENET-P
changed: c...@abovenet.de 20020523
source: RIPE
person: Michael Bentrup
address: AboveNet Deutschland GmbH
address: Eschborner Landstrasse 112
address: 60489 FRANKFURT/M
address: Germany
phone: +49 69 90554 0
fax-no: +49 69 90554 111
e-mail: m...@abovenet.de
nic-hdl: MB21693-RIPE
notify: li...@abovenet.de
mnt-by: ABOVENET-P
changed: c...@abovenet.de 20020523
source: RIPE
--
Atro Tossavainen (Mr.) / The Institute of Biotechnology at
Systems Analyst, Techno-Amish & / the University of Helsinki, Finland,
+358-9-19158939 UNIX Dinosaur / employs me, but my opinions are my own.
< URL : http : / / www . helsinki . fi / %7E atossava / > NO FILE ATTACHMENTS
F.B.
allow these kinds of things anymore. Please remove us from the list.
Kind regards,
"Shmuel (Seymour J.) Metz" <spam...@library.lspace.org.invalid> wrote in message news:<40b9e0d9$7$fuzhry+tra$mr2...@news.patriot.net>...
> In <9b1167b9.04052...@posting.google.com>, on 05/28/2004
> at 04:22 PM, freek...@hotmail.com (F.B.) said:
>
> >The url www.porno-dvd-shop.com does NOT link to 193.173.43.61 and .64
> >anymore!!
>
> Have you terminated the customer, or only moved him to a new IP
> address? What changes have you made to ensure that abuse complaints
> will be handled decisively and expeditiously?
>
> --
> Shmuel (Seymour J.) Metz, SysProg and JOAT
>
> Unsolicited bulk E-mail will be subject to legal action. I reserve
> the right to publicly post or ridicule any abusive E-mail.
>
> Reply to domain Patriot dot net user shmuel+news to contact me. Do
> not reply to spam...@library.lspace.org
--
phil-new...@ipal.net
| We don't do services anymore for that customer anymore! We will not
| allow these kinds of things anymore. Please remove us from the list.
How long was the spammer allowed to remain on your network? And which
party ended the business relationship? You or them?
If they are indeed gone, SPEWS will automatically figure that over time
as no spam comes from that network in the future, and no other services
are detected in that network. But if you come clean and admit all your
failures and errors, with apology, I'd bet the listing will go away even
faster (it has happened many times, though generally only once per ISP).
Be sure the lesson you learned sticks.
--
-----------------------------------------------------------------------------
| Phil Howard KA9WGN | http://linuxhomepage.com/ http://ham.org/ |
| (first name) at ipal.net | http://phil.ipal.org/ http://ka9wgn.ham.org/ |
-----------------------------------------------------------------------------
--
Shmuel (Seymour J.) Metz
at 02:06 PM, freek...@hotmail.com (F.B.) said:
>We don't do services anymore for that customer anymore! We will not
>allow these kinds of things anymore. Please remove us from the list.
I'm not SPEWS, but from what I've seen they're not the trusting sorts;
the more information you supply, the more likely that they will delist
you quickly. That's why it's a good idea to be explicit about
termination of customers and changes to procedures. I note that you
did not answer my question
What changes have you made to ensure that abuse complaints will be
handled decisively and expeditiously?
Since the typical SPEWS listing is the result of not acting on
complaints, I would expect SPEWS to want assurance that things have
changed. My guess is that even without the answer they will delist you
if you stay clean for 6 months, but ICBW.
F.B.
people we took actions to remove this customer from our network, we
terminted the relationship with this cusomter, they are now hosted
somewhere else and are not our customer anymore. We have made changes
to our procedures to prevent such things from hapening again. We are
not allowing our customers to spam anymore and are checking our
servers from time to time to close them before escalation.
We apolagize for our actions, you must know that we never ment for
this to happen and hope you can be forgiving in this matter. Would you
please be so kind to remove us from the list.
Kind regards,
Apcare bv.
Freek Berson
KPN Cybercentre
Anthony Fokker Businesspark
Fokkerweg 300, gebouw 59
1438 AN Oude Meer
tel: +31 20 605 81 24
fax: +31 20 605 20 21
email: fr...@apcare.net
"Shmuel (Seymour J.) Metz" <spam...@library.lspace.org.invalid> wrote in message news:<40bcd09a$2$fuzhry+tra$mr2...@news.patriot.net>...
phil-new...@ipal.net
| As soon as we heard that our customer was spamming and bothering other
| people we took actions to remove this customer from our network, we
| terminted the relationship with this cusomter, they are now hosted
| somewhere else and are not our customer anymore. We have made changes
| to our procedures to prevent such things from hapening again. We are
| not allowing our customers to spam anymore and are checking our
| servers from time to time to close them before escalation.
When you terminated the relationship, how did you know they were now
hosted somewhere else? Or was that because you held off on termination
until they did get other hosting?
I'm not saying you did that, but it is the case that many who have come
here before you really have, and their words were a lot like that. Once
you have terminated a customer, why would you care to see if they get
other hosting or not? So it raises much suspicion. That suspicion will
likely end up leaving the normal timed automatic expirations to take
place, which could take as long the spammer was hosted.
| We apolagize for our actions, you must know that we never ment for
| this to happen and hope you can be forgiving in this matter. Would you
| please be so kind to remove us from the list.
If you can state exact dates, it can help:
When did the customer start using your service?
When were you made aware the customer was spamming?
By what information source did you learn of this?
When was the service to the customer shut off?
When did you discover they had other hosting?
--
-----------------------------------------------------------------------------
| Phil Howard KA9WGN | http://linuxhomepage.com/ http://ham.org/ |
| (first name) at ipal.net | http://phil.ipal.org/ http://ka9wgn.ham.org/ |
-----------------------------------------------------------------------------
--
F.B.
domain is online again on some other machine somewhere. We did not
held off termination util they found other hosting services. I did not
mean to raise any suspicion by saying that they were hosted somewhere
else. I just wanted to make clear that our IP-range is no longer in
use by that domain, or any other spammer! I hope that making this
clear removes any suspicion against us. Please forgive us for being
unclear about the situation and raising suspiction. Please re-consider
our case and remove us from the list, we would be very gratefull.
Kind Regards,
Freek Berson
phil-new...@ipal.net wrote in message news:<c9q9v...@news1.newsguy.com>...
phil-new...@ipal.net
| I found out that they took their "..." somewhere else because the
| domain is online again on some other machine somewhere. We did not
| held off termination util they found other hosting services. I did not
| mean to raise any suspicion by saying that they were hosted somewhere
| else. I just wanted to make clear that our IP-range is no longer in
| use by that domain, or any other spammer! I hope that making this
| clear removes any suspicion against us. Please forgive us for being
| unclear about the situation and raising suspiction. Please re-consider
| our case and remove us from the list, we would be very gratefull.
1. Please don't "top post" a reply. And don't include too many lines
of original (if all I see in the screen is quoted text and no reply,
I tab to the next new post).
2. I originally posted these questions:
|> When did the customer start using your service?
|> When were you made aware the customer was spamming?
|> By what information source did you learn of this?
|> When was the service to the customer shut off?
|> When did you discover they had other hosting?
Did you not want to answer them specifically? I'm trying to help by
getting you to present the information that makes your report more
accepted, based on what I've seen in these newsgroups of the past few
years.