Home

When the spammer started to appear on active-news I remembered a post by Richard Leslie in news.admin.net-abuse.policy somehow linking the two. So I send them this mail on April 11, 2006, followed by a comment in an abuse report to Athenanews a day later. I received a reply for the second one.

Interestingly enough though both servers belong to readnews.com it seems, as seen here. Go figure.........

 

 

FYI: A mail sent to active-news.com (sent to contact@athenanews)

As you are AFAIK affliated with active-news.com I am sending this to
you as I am rather worried about the lack of effort made regarding
spam fighting by active-news, especially given their rather negative
history.
Sent to support@active-news.com

----------------------------------

Hi,

as you have probably seen from my two dozen abuse reports one of the
worst spammers on usenet has arrived on your server after four months
on 100proofnews.com wehere we were finally able to chase him off.

In the interim time he went through several other servers
(buzzardnews, astraweb, newsfeeds, newsgroups-download and wwwspace)
who were all able to nuke him after a few days. And most of them were
quite willing to help and communicate, exchanging information about
this source and how to get rid of him.

And it is exactly this which is lacking on your part. There have been
no replies to my abuse reports or attempts to get in contact with
you. I have had rather negative experiences with active-news in the
past. Hence my being rather suspect of your efforts in dealing with
this spammer.
There is a second spammer (who has been just as pesty though not a
quantity scale compared to the Asian one) who has appeared at the
same time. I have attached a header each at the bottom of this mail.

It would be helpful if you could reply to this mail so thai I know
where you (and I) stand.

Thank you
Matt


------------------------------

Xref: news alt.binaries.pictures.erotica.asian-female:120917
Subject: 9/14 (asian snatch - qkJxcheryl101.jpg)
From: "Matthew" <fqihrute@qtdn.com>
Date: 10 Apr 2006 23:46:42 GMT
Message-ID: <443aee62$0$14899$a82e6bb9@reader.active-news.com>
Lines: 599
NNTP-Posting-Host: 122df58f.reader.active-news.com
Path:
pd7cy1no!shaw.ca!news-out.newsgroups.com!propagator2-sterling.newsfeeds.com!news-in.newsgrooups.com!zen.net.uk!dedekind.zen.co.uk!solnet.ch!solnet.ch!proxad.net!gatel-ffm!gatel-ffm!63.218.45.10.MISMATCH!nx01.iad01.newshosting.com!newshosting.com!198.186.190.247.MISMATCH!news-out.readnews.com!news-xxxfer.readnews.com!not-for-mail
Newsgroups: alt.binaries.pictures.erotica.asian-female
X-Trace:
DXC=]:Ch9b\6ULTia?G_clU6PS2BUnVPaLoY[NRYa@IjA4ZQDn<onnjXP;[_A=h4YSTf7QT8OLd2:Gh6P<L<75IKLOlZ]Zi@V9fl:^W
X-Complaints-To: abuse@active-news.com

asian snatch
www.asiansnatch.usx.cx

____________________________________________

Xref: news alt.binaries.pictures.erotica.asian-female:120965
alt.binaries.pictures.erotica.asian-indian:1851591
Path:
meganewsservers.com!feeder2.on.meganewsservers.com!198.186.190.250.MISMATCH!transit3.readnews.com!news-out.readnews.com!news-out.readnews.com!news-xxxfer.readnews.com!not-for-mail
From: hotline@Y-Lola.com (Joszy)
Sender: hotline@Y-Lola.com
Newsgroups:
alt.binaries.pictures.erotica.asian-female,alt.binaries.pictures.erotica.asian-indian,alt.binaries.pictures.erotica.asparagus
Subject: ! (RUSSIA) YL8_0610.JPG >> gorcky parc virgins /2 (1/1)
Followup-To: http://www.Y-Lola.com
X-Newsposter: NNTP POWER-POST 2000 (Build 24c) - net-toys.8k.com
X-Server-Date: 11 Apr 2006 11:43:17 GMT
Date: 11 Apr 2006 11:43:19 GMT
Lines: 351
Message-ID: <443b9655$0$24464$a82e6bb9@reader.active-news.com>
NNTP-Posting-Host: 9c3ae9b5.reader.active-news.com
X-Trace:
DXC=Kb8mgEWaU@bZZo;X[I2Qc`no>BVMAEE[jNRYa@IjA4ZaS[PV8AFLkQggVP81hU^O9n;XaeeTQ?2Aa=6Bc`\KiJIfLKe5EWa>CHn
X-Complaints-To: abuse@active-news.com

 

back to top


Athenanews spam report April 12 (sent to abuse@athenanews.com)

One day after my mail to you about the spam via active-news I found
this source changing its server...
Well, said the spammer, why post through active-news when you can go
directly "through the horse's mouth"... :-)
If you want to know more about this spam source you can find it here:
http://www.angelfire.com/punk/abpeaf/as.html
http://www.angelfire.com/punk/abpeaf/activenews.html
http://www.angelfire.com/punk/abpeaf/100proofnews.html

Btw a lot of these spam posts don't appear on both Giganews and
Easynews who seem to have realized that this is spam and are able to
filter them out. I hope your reaction will be as swift.

Four headers of an 1-part spam post in violation of our group's
charter and FAQ (which can be viewed at
http://abpea-f.asianmultimedia.org/faq/FAQ-1.4-[abpe.a-f].htm):

------------------------------------------------------------------

Xref: news alt.binaries.pictures.erotica.asian-female:121099
Subject: (8bgF01.jpg) asiant teens
From: "~The boSS~" <fbpickbh@uzvz.com>
Date: 12 Apr 2006 07:25:19 GMT
Message-ID: <443cab5e$0$24440$a82e2bb9@reader.athenanews.com>
Lines: 522
NNTP-Posting-Host: 2c8560c5.reader.athenanews.com
Path:
newsfeed.hal-mli.net!feeder1.hal-mli.net!news-out.superfeed.net!sp10iad.superfeed.net!news-in.nuthinbutnews.com!news-out.readnews.com!news-xxxfer.readnews.com!not-for-mail
Newsgroups: alt.binaries.pictures.erotica.asian-female
X-Trace:
DXC=l7F?CciT\MjDNVZ`B@hZdlaTHcV2NR;jk:LKFL\Y2Oojh`RXXCkmDMbej6Wc^WOheikmHWBU:81``8`blAjeESVdZQfcY]7``Mk
X-Complaints-To: abuse@athenanews.com

www.asianteensz.26oz.com
_________________________________________________

Xref: news alt.binaries.pictures.erotica.asian-female:121100
Subject: (ZolL02.jpg) asiant teens
From: "~The boSS~" <fbpickbh@uzvz.com>
Date: 12 Apr 2006 07:25:52 GMT
Message-ID: <443cab7f$0$24440$a82e2bb9@reader.athenanews.com>
Lines: 622
NNTP-Posting-Host: 2c8560c5.reader.athenanews.com
Path:
pd7cy1no!shaw.ca!news-out.superfeed.net!propagator2-sterling.newsfeeds.com!news-in1.newsgroups.com!zen.net.uk!dedekind.zen.co.uk!solnet.ch!solnet.ch!proxad.net!gatel-ffm!gatel-ffm!63.218.45.11.MISMATCH!nx02.iad01.newshosting.com!newshosting.com!198.186.190.247.MISMATCH!news-out.readnews.com!news-xxxfer.readnews.com!not-for-mail
Newsgroups: alt.binaries.pictures.erotica.asian-female
X-Trace:
DXC=l7F?CciT\M:]`l2mn7AUI=aTHcV2NR;j;:LKFL\Y2Oo:h`RXXCkmDM2ej6Wc^WOhe9kmHWBU:81`08`blAjeESV4ZQfcY]7``M;
X-Complaints-To: abuse@athenanews.com

www.asianteensz.26oz.com
________________________________________

Xref: news alt.binaries.pictures.erotica.asian-female:121101
Subject: (wgo303.jpg) asiant teens
From: "~The boSS~" <fbpickbh@uzvz.com>
Date: 12 Apr 2006 07:26:27 GMT
Message-ID: <443caba2$0$24440$a82e2bb9@reader.athenanews.com>
Lines: 666
NNTP-Posting-Host: 2c8560c5.reader.athenanews.com
Path:
pd7cy1no!shaw.ca!news-out.superfeed.net!propagator2-sterling.newsfeeds.com!news-in2.newsgroups.com!news-out1.kabelfoon.nl!newsfeed.kabelfoon.nl!bandi.nntp.kabelfoon.nl!198.186.190.247.MISMATCH!news-out.readnews.com!news-xxxfer.readnews.com!not-for-mail
Newsgroups: alt.binaries.pictures.erotica.asian-female
X-Trace:
DXC=l7F?CciT\Mjkjodk_7>1cmaTHcV2NR;jk:LKFL\Y2Oojh`RXXCkmDMbej6Wc^WOheikmHWBU:81``8`blAjeESVdZQfcY]7``Mk
X-Complaints-To: abuse@athenanews.com

www.asianteensz.26oz.com
________________________________________

Xref: news alt.binaries.pictures.erotica.asian-female:121102
Subject: (Miuc05.jpg) asiant teens
From: "~The boSS~" <fbpickbh@uzvz.com>
Date: 12 Apr 2006 07:27:36 GMT
Message-ID: <443cabe7$0$24440$a82e2bb9@reader.athenanews.com>
Lines: 722
NNTP-Posting-Host: 2c8560c5.reader.athenanews.com
Path:
pd7cy1no!shaw.ca!news-out.superfeed.net!propagator2-sterling.newsfeeds.com!news-in2.newsgroups.com!news-out1.kabelfoon.nl!newsfeed.kabelfoon.nl!bandi.nntp.kabelfoon.nl!198.186.190.247.MISMATCH!news-out.readnews.com!news-xxxfer.readnews.com!not-for-mail
Newsgroups: alt.binaries.pictures.erotica.asian-female
X-Trace:
DXC=NP4ahJ8^lm1bJ@Xa8S=Af>aTHcV2NR;j;:LKFL\Y2Oo:h`RXXCkmDM2ej6Wc^WOhe9kmHWBU:81`08`blAjeESV4ZQfcY]7``M;
X-Complaints-To: abuse@athenanews.com

www.asianteensz.26oz.com

 

back to top


Re: Athenanews spam report April 12

Thank you for your comments. As a general rule we do not respond to
abuse email reports due to the number we receive and that 99% of
emails are reporting the same problem which has already been
resolved. In most cases the abuse reports cause more problems than
the spammers themselves!

The individual in question is known to us and in the past has used
many different user accounts under false names/stolen card details.

As for other service providers we cannot influence in any way how
they respond to your correspondence.

Regards

Chris
Technical Support

 

back to top


The Readnews "empire"

Thx to .@s.hell> <Midnight, posted in news.admin.net-abuse.policy on May 8th:

 

Athenanews, active-news and corenews are all part of readnews.

Neotrace for news.readnews.com:

IP Address: 198.186.190.61
Location: San Diego (32.722N, 117.172W)
Network: NETBLK-PRESCIENT01


OrgName: Prescient Software, Inc.
OrgID: PRESCI-1
Address: 6967 Weller St
City: San Diego
StateProv: CA
PostalCode: 92122
Country: US

NetRange: 198.186.190.0 - 198.186.194.255
CIDR: 198.186.190.0/23, 198.186.192.0/23, 198.186.194.0/24
NetName: NETBLK-PRESCIENT01
NetHandle: NET-198-186-190-0-1
Parent: NET-198-0-0-0-0
NetType: Direct Assignment
Comment:
RegDate: 1993-09-17
Updated: 1998-10-09

RTechHandle: SM44-ARIN
RTechName: McGregor, Scott
RTechPhone: +1-415-964-0373
RTechEmail: mcgregor@prescient.com

OrgTechHandle: AFR11-ARIN
OrgTechName: Freedman, Avi
OrgTechPhone: +1-215-481-9797
OrgTechEmail: domains@freedman.net


Neotrace for news.athenanews.com:

IP Address: 198.186.190.155
Location: San Diego (32.722N, 117.172W)
Network: NETBLK-PRESCIENT01


OrgName: Prescient Software, Inc.
OrgID: PRESCI-1
Address: 6967 Weller St
City: San Diego
StateProv: CA
PostalCode: 92122
Country: US

NetRange: 198.186.190.0 - 198.186.194.255
CIDR: 198.186.190.0/23, 198.186.192.0/23, 198.186.194.0/24
NetName: NETBLK-PRESCIENT01
NetHandle: NET-198-186-190-0-1
Parent: NET-198-0-0-0-0
NetType: Direct Assignment
Comment:
RegDate: 1993-09-17
Updated: 1998-10-09

RTechHandle: SM44-ARIN
RTechName: McGregor, Scott
RTechPhone: +1-415-964-0373
RTechEmail: mcgregor@prescient.com

OrgTechHandle: AFR11-ARIN
OrgTechName: Freedman, Avi
OrgTechPhone: +1-215-481-9797
OrgTechEmail: domains@freedman.net