These are posts from the newsgroup news.admin.net-abuse.policy
22.12.2005 [Usenet] RFD - Deepeering/UDP Active-news.com
(from Richard Leslie)
22.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com
(from Graham Drabble)
22.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com
(from axlq)
23.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com
(Richard Leslie)
28.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com
(from gnububba)
29.01.2006 [usenet] active-news.com not reachable
via email (from Mandalay)
30.01.2006 [Usenet] RFD - UDP against Active-news.com
(from Richard Leslie)
03.02.2006 Re: [Usenet] RFD - UDP against Active-news.com
(from David Ritz)
08.02.2006 Re: [Usenet] RFD - UDP against Active-news.com
(from David Ritz)
08.02.2006 Re: [Usenet] RFD - UDP against Active-news.com
(from Mandalay)
25.10.2006 [usenet] Call for action against
100proofnews.com (from Mandalay)
25.10.2006 Re: [usenet] Call for action against 100proofnews.com
(from Andrew - Supernews)
22.12.2005 [Usenet] RFD - Deepeering/UDP Active-news.com (from Richard Leslie)
Dear Admins,
Request for Discussion - Deepeering/UDP active-news.com
(athenanews.com)
Since 11-25-2005, I have been sending in complaints regarding the
Kiddy Porn spammer "savagebabes.com", "sweatsweet.com",
and
"ssteens.com". As of this date, nothing has been done to stem the
flow of this abuse, active-news seems unwilling to stop this ongoing
abuse.
The postings average several thousand a day.
To this date I have received nada from Active-news, and Athenanews.
Abuse@ & Support@ active-news are now bouncing. Seems they do not
wish to be bothered.
I believe that nothing will be done unless pressure is applied from
several sources in the internet community.
Respectfully submitted,
Richard Leslie
22.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com (from Graham Drabble)
On 22 Dec 2005 Richard Leslie <emp-reports@fustercluck.com> wrote in
news:00a001c606af$229129a0$0500a8c0@dell:
> Since 11-25-2005, I have been sending in complaints regarding the
> Kiddy Porn spammer "savagebabes.com", "sweatsweet.com",
and
> "ssteens.com". As of this date, nothing has been done to stem
the
> flow of this abuse, active-news seems unwilling to stop this ongoing
> abuse.
Have you done any work trying to identify who there peers are? I'd
suggest sending them a copy of your post and asking them to both talk
to active-news and to join the debate here.
--
Graham Drabble
http://www.drabble.me.uk/
22.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com (from axlq)
In article <00a001c606af$229129a0$0500a8c0@dell>,
Richard Leslie <emp-reports@fustercluck.com> wrote:
>Request for Discussion - Deepeering/UDP active-news.com
>(athenanews.com)
>
>Since 11-25-2005, I have been sending in complaints regarding the
>Kiddy Porn spammer "savagebabes.com", "sweatsweet.com",
and
>"ssteens.com".
Suggestion: don't cloud the issue with the site content, and
especially don't lie about it (i.e. none of those are "kiddy porn"
-
it's all legal).
Focus on the ABUSE.
In the case of savagebabes.com, that's hosted by chinamobile.com who
won't do anything about it.
The other two sites are hosted by pilosoft.com who might do
something if you complain with factual evidence.
If a spammer can't keep their web site up, they have no incentive to
spam.
-A
23.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com (Richard Leslie)
On Thu, 22 Dec 2005 19:50:44 +0000 (UTC), axlq <axlq@spamcop.net>
wrote:
>In article <00a001c606af$229129a0$0500a8c0@dell>,
>Richard Leslie <emp-reports@fustercluck.com> wrote:
>>Request for Discussion - Deepeering/UDP active-news.com
>>(athenanews.com)
>>
>>Since 11-25-2005, I have been sending in complaints regarding the
>>Kiddy Porn spammer "savagebabes.com", "sweatsweet.com",
and
>>"ssteens.com".
>
>Suggestion: don't cloud the issue with the site content, and
>especially don't lie about it (i.e. none of those are "kiddy porn"
-
>it's all legal).
The post from Savagebabes are recycled images from a Kiddy site taken
down by the russian authorities over a year ago for underage images.
>
>Focus on the ABUSE.
Thats the point, abuse of active-news.
>
>In the case of savagebabes.com, that's hosted by chinamobile.com who
>won't do anything about it.
Yep...
>
>The other two sites are hosted by pilosoft.com who might do
>something if you complain with factual evidence.
Pilosoft could care less, they just switched them over to different
ip's last week, and they redirect over to btnaccess and have for over
a year now.
>
>If a spammer can't keep their web site up, they have no incentive to
>spam.
>
>-A
28.12.2005 Re: [Usenet] RFD - Deepeering/UDP Active-news.com (from gnububba)
On Fri, 23 Dec 2005 03:27:50 +0000 (UTC), Richard Leslie
<emp-reports@fustercluck.com>
wrote:<9armq1dft21f1nvup3p80eojv0t9411842@4ax.com>
>On Thu, 22 Dec 2005 19:50:44 +0000 (UTC), axlq <axlq@spamcop.net>
>wrote:
>
>>In article <00a001c606af$229129a0$0500a8c0@dell>,
>>Richard Leslie <emp-reports@fustercluck.com> wrote:
>>>Request for Discussion - Deepeering/UDP active-news.com
>>>(athenanews.com)
>>>
>>>Since 11-25-2005, I have been sending in complaints regarding the
>>>Kiddy Porn spammer "savagebabes.com", "sweatsweet.com",
and
>>>"ssteens.com".
>>
>>Suggestion: don't cloud the issue with the site content, and
>>especially don't lie about it (i.e. none of those are "kiddy porn"
-
>>it's all legal).
>
>The post from Savagebabes are recycled images from a Kiddy site taken
>down by the russian authorities over a year ago for underage images.
I am glad to see someone acting on this, thank you. I looked for news
on this action by the russians but could not find anything. I don't
doubt this in the least but it would be a useful reference if you know
of one.
I see sweatsweet and SST making the rounds through newshosting.com.
>>
>>Focus on the ABUSE.
>
>Thats the point, abuse of active-news.
With abuse@ mail being bounced is there anything else that users can
do to help with this?
>>
>>In the case of savagebabes.com, that's hosted by chinamobile.com who
>>won't do anything about it.
>
>Yep...
>>
(snip)
I appreciate your time and effort and know of others that do also. I'd
be interested to know how this works out.
Thanks for any information.
29.01.2006 [usenet] active-news.com not reachable via email (from Mandalay)
For a month now I have been sending spam abuse reports to
abuse@active-news.com only to have them ALL returned because the mail
server at active-news is not reachable (same thing happens with
support@active-news.com). I have tried from three different domains
(including my ISP). Their server webair.com doesn't seem to be too
interested either.
And during all that time one spammer is posting 150-300 part spam
posts.
I have no clue what to do now. Any advice?
Here is one of the headers:
------------------------------------------------------------------------------
--
Xref: news alt.binaries.pictures.erotica.asian-female:104473
Path: news-out.readnews.com!spool-big1.readnews.com!not-for-mail
From: "Ryan" <HRD0@europe.com>
Newsgroups: alt.binaries.pictures.erotica.asian-female
Subject: Doll face amateur has sex and a smoke -- "150.jpg" (1/1)
Date: Mon, 30 Jan 2006 21:8:16 -0000
Lines: 747
Message-ID: <43dd49cf$0$3689$a82e6bb9@reader.active-news.com>
NNTP-Posting-Host: a745e3cd.reader.active-news.com
X-Trace:
DXC=6RX;@EHMcON[GDh8\__3_N2BUnVPaLoYKNRYa@IjA4ZA[S>MOBLb;fF1dU@C2Xmh3JdGX23`05
7\IQojBVRFFV6FBD`XNal<IGL
X-Complaints-To: abuse@active-news.com
30.01.2006 [Usenet] RFD - UDP against Active-news.com (from Richard Leslie)
Dear Admins,
Request for Discussion - UDP against Active-news.com
Since 11-25-2005, I have been sending in complaints regarding the
flooding from spammer "savagebabes.com" to active-news. As of this
date, nothing has been done to stem the flow of this abuse,
active-news seems unwilling to stop this ongoing abuse.
All contact address are bouncing:
<abuse@active-news.com>:
62.105.77.121 does not like recipient.
<postmaster@active-news.com>:
62.105.77.121 does not like recipient.
<pauldfrost@hotmail.com>:
65.54.244.8 does not like recipient.
After the request for Depeering back on the 21st of December, the
abuse appeared to subside from the 29th of Dec. until it returned on
Jan 13th and has been non stop since.
As recorded by Ultra/Spam Hippo http://www.newsadmin.com/ ,
active-news has been, and continues to be a ongoing source of usenet
spam.
I have sent a request to Networksolutions to have their registration
removed, until such time as they can provide accurate and/or true
contact information.
If David Ritz is reading this thread, would you be willing to help
out in getting the ball rolling on a UDP?
I believe that nothing will be done unless pressure is applied from
several sources in the internet community.
Respectfully submitted,
Richard Leslie
03.02.2006 Re: [Usenet] RFD - UDP against Active-news.com (from David Ritz)
On Mon, 30 Jan 2006, in article <003f01c625c6$29e47c30$0500a8c0@dell>,
Richard Leslie wrote:
RL> Dear Admins,
RL> Request for Discussion - UDP against Active-news.com
RL> Since 11-25-2005, I have been sending in complaints regarding
RL> the flooding from spammer "savagebabes.com" to active-news.
As
RL> of this date, nothing has been done to stem the flow of this
RL> abuse, active-news seems unwilling to stop this ongoing abuse.
RL> All contact address are bouncing:
RL> <abuse@active-news.com>:
RL> 62.105.77.121 does not like recipient.
RL> <postmaster@active-news.com>:
RL> 62.105.77.121 does not like recipient.
RL> <pauldfrost@hotmail.com>:
RL> 65.54.244.8 does not like recipient.
RL> After the request for Depeering back on the 21st of December,
RL> the abuse appeared to subside from the 29th of Dec. until it
RL> returned on Jan 13th and has been non stop since.
RL> As recorded by Ultra/Spam Hippo http://www.newsadmin.com/ ,
RL> active-news has been, and continues to be a ongoing source of
RL> usenet spam.
RL> I have sent a request to Networksolutions to have their
RL> registration removed, until such time as they can provide
RL> accurate and/or true contact information.
RL> If David Ritz is reading this thread, would you be willing to
RL> help out in getting the ball rolling on a UDP?
RL> I believe that nothing will be done unless pressure is applied
RL> from several sources in the internet community.
Richard,
Judging from the amazing number spam headers coming from this
source, it appears that ACTIVE-NEWS.COM is nothing more than a
re-seller of READNEWS.COM. My first question has to be, has
anyone attempted to contact Avi Freedman?
Avi, former operator of NETAXS.COM, may be something of a
libertarian, but he's generally considered sane and approachable
on the issue of net-abuse. At the very least, I suspect he'll
take a dim view of his re-seller bouncing legitimate complaints
directed to the address appearing in the X-Complaints-To header of
articles posted through his servers. I've included him as a
recipient of this message, to try to speed things along.
Just to try to get a handle on this egregious situation, I pulled
the headers DSRS <http://dsrs.nntp.sol.net/> could find, for
roughly the first half of today (CST -0600), which were pumped
onto Usenet, showing a NNTP-Posting-Host ending
".reader.active-news.com". (This header type is something I
associate with servers running Diablo.)
Please see <http://dritz.mako.ath.cx/20060202-active-news_head.txt>.
(This 11MB file will be expunged within one week.)
Out of 16,414 articles analyzed, only 24 (0.15%) have any
resemblance to legitimate traffic. 16,390 (99.85%) articles are
spam, with the vast bulk of it promoting SavageBabes.com.
16,044 SavageBabes.com 97.75%
177 ultimate-anonymity.(org|com|net) [Moffatt] 1.08%
111 5get.com/2/heather 0.68%
29 www.xesbus.com 0.18%
29 VCN Corp. (193.239.4.0 - 193.239.7.255) 0.18%
24 non-spam 0.15%
From the look of this, the network would be best served were
READNEWS.COM to route this source to /dev/null, while asking
both(?) legitimate customers of active-news.com (largely customers
of www.Cheap56K.com) to find other access to Usenet.
Here's the break down of what I found, by pseudo-NPH:
1146 NNTP-Posting-Host: 77adfec3.reader.active-news.com
SavageBabes.com
944 NNTP-Posting-Host: f1960302.reader.active-news.com
SavageBabes.com
910 NNTP-Posting-Host: a78c1abb.reader.active-news.com
SavageBabes.com
885 NNTP-Posting-Host: 8970fb61.reader.active-news.com
SavageBabes.com
856 NNTP-Posting-Host: d54da10f.reader.active-news.com
SavageBabes.com
818 NNTP-Posting-Host: 03a21d7a.reader.active-news.com
SavageBabes.com
735 NNTP-Posting-Host: 48aee308.reader.active-news.com
SavageBabes.com
731 NNTP-Posting-Host: 2a2303ef.reader.active-news.com
SavageBabes.com
700 NNTP-Posting-Host: 71ea3dc3.reader.active-news.com
SavageBabes.com
590 NNTP-Posting-Host: 5f063df3.reader.active-news.com
SavageBabes.com
589 NNTP-Posting-Host: 97145642.reader.active-news.com
SavageBabes.com
569 NNTP-Posting-Host: 16be90c2.reader.active-news.com
SavageBabes.com
538 NNTP-Posting-Host: ec13b81b.reader.active-news.com
SavageBabes.com
496 NNTP-Posting-Host: e86ad319.reader.active-news.com
SavageBabes.com
494 NNTP-Posting-Host: e0122256.reader.active-news.com
SavageBabes.com
489 NNTP-Posting-Host: 81980130.reader.active-news.com
SavageBabes.com
482 NNTP-Posting-Host: 17ab1680.reader.active-news.com
SavageBabes.com
480 NNTP-Posting-Host: f115299b.reader.active-news.com
SavageBabes.com
448 NNTP-Posting-Host: c3fb9152.reader.active-news.com
SavageBabes.com
428 NNTP-Posting-Host: e185516d.reader.active-news.com
SavageBabes.com
398 NNTP-Posting-Host: f6ff0605.reader.active-news.com
SavageBabes.com
386 NNTP-Posting-Host: 417fe0f1.reader.active-news.com
SavageBabes.com
364 NNTP-Posting-Host: 50a77f76.reader.active-news.com
SavageBabes.com
301 NNTP-Posting-Host: 6e70cc01.reader.active-news.com
SavageBabes.com
158 NNTP-Posting-Host: 19335db1.reader.active-news.com
SavageBabes.com
152 NNTP-Posting-Host: 57789d47.reader.active-news.com
SavageBabes.com
143 NNTP-Posting-Host: a9b10b7d.reader.active-news.com
SavageBabes.com
121 NNTP-Posting-Host: 75b5033c.reader.active-news.com
ultimate-anonymity.(org|com|net) [Moffatt]
91 NNTP-Posting-Host: 22308477.reader.active-news.com
SavageBabes.com
80 NNTP-Posting-Host: 4524d7ae.reader.active-news.com
SavageBabes.com
79 NNTP-Posting-Host: 721416a7.reader.active-news.com
SavageBabes.com
78 NNTP-Posting-Host: 991ad595.reader.active-news.com
SavageBabes.com
75 NNTP-Posting-Host: a5afbf76.reader.active-news.com
SavageBabes.com
59 NNTP-Posting-Host: 2a8bb082.reader.active-news.com
SavageBabes.com
56 NNTP-Posting-Host: 8133708b.reader.active-news.com
http://5get.com/2/heather
53 NNTP-Posting-Host: 81c75d3f.reader.active-news.com
SavageBabes.com
46 NNTP-Posting-Host: bc7ea994.reader.active-news.com
SavageBabes.com
40 NNTP-Posting-Host: 201c6636.reader.active-news.com
ultimate-anonymity.(org|com|net) [Moffatt]
35 NNTP-Posting-Host: 85504772.reader.active-news.com
SavageBabes.com
31 NNTP-Posting-Host: ffe59191.reader.active-news.com
http://5get.com/2/heather
24 NNTP-Posting-Host: b72ead24.reader.active-news.com
http://5get.com/2/heather
22 NNTP-Posting-Host: 0a9e22b7.reader.active-news.com
www.xesbus.com
21 NNTP-Posting-Host: 34436c30.reader.active-news.com
SavageBabes.com
19 NNTP-Posting-Host: 477fb72f.reader.active-news.com
SavageBabes.com
15 NNTP-Posting-Host: 9d50b722.reader.active-news.com
SavageBabes.com
15 NNTP-Posting-Host: 2d735a4d.reader.active-news.com
http://www.boris-home.info
(<http://dsrs.nntp.sol.net/reports/custom.20060202210728.html>)
14 NNTP-Posting-Host: 89b69255.reader.active-news.com
SavageBabes.com
14 NNTP-Posting-Host: 17aaeb72.reader.active-news.com
SavageBabes.com
12 NNTP-Posting-Host: 6604d7df.reader.active-news.com
SavageBabes.com
10 NNTP-Posting-Host: 071128de.reader.active-news.com
SavageBabes.com
9 NNTP-Posting-Host: e57f2b88.reader.active-news.com
SavageBabes.com
9 NNTP-Posting-Host: 674b676d.reader.active-news.com
non-spam
9 NNTP-Posting-Host: 8aa55d9c.reader.active-news.com
non-spam
8 NNTP-Posting-Host: ac12e185.reader.active-news.com
ultimate-anonymity.(org|com|net) [Moffatt]
8 NNTP-Posting-Host: a1227e2a.reader.active-news.com
www.ultrahot-lolitas.com
(<http://dsrs.nntp.sol.net/reports/custom.20060202211546.html>)
8 NNTP-Posting-Host: a952e158.reader.active-news.com
ultimate-anonymity.(org|com|net) [Moffatt]
8 NNTP-Posting-Host: 5c356124.reader.active-news.com
SavageBabes.com
7 NNTP-Posting-Host: 5cccaf9f.reader.active-news.com
SavageBabes.com
6 NNTP-Posting-Host: 05443ab3.reader.active-news.com
SavageBabes.com
5 NNTP-Posting-Host: b955cf02.reader.active-news.com
www.xesbus.com
5 NNTP-Posting-Host: 9f47b440.reader.active-news.com
SavageBabes.com
5 NNTP-Posting-Host: 7e3a60a9.reader.active-news.com
SavageBabes.com
5 NNTP-Posting-Host: 2e543b89.reader.active-news.com
SavageBabes.com
4 NNTP-Posting-Host: cd1248c1.reader.active-news.com
SavageBabes.com
4 NNTP-Posting-Host: a1671c53.reader.active-news.com
SavageBabes.com
4 NNTP-Posting-Host: 78a98016.reader.active-news.com
SavageBabes.com
4 NNTP-Posting-Host: 44e7df24.reader.active-news.com
SavageBabes.com
3 NNTP-Posting-Host: b7374d29.reader.active-news.com
SavageBabes.com
3 NNTP-Posting-Host: 13bbb993.reader.active-news.com
non-spam
3 NNTP-Posting-Host: 3cf100c9.reader.active-news.com
www.russia-youngest.com
(<http://dsrs.nntp.sol.net/reports/custom.20060202213208.html>)
2 NNTP-Posting-Host: e8279c58.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: e4a9d49e.reader.active-news.com
www.xesbus.com
2 NNTP-Posting-Host: de2a65fa.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: dc8445f7.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: b9190aee.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: b8eeb35a.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 78079284.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 5791ea36.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 706e8df7.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 466d24de.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 93c4dd22.reader.active-news.com
www.ultrahot-lolitas.com
(<http://dsrs.nntp.sol.net/reports/custom.20060202211546.html>)
2 NNTP-Posting-Host: 26c1653e.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 8e3c85fb.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 2b7a5ba9.reader.active-news.com
SavageBabes.com
2 NNTP-Posting-Host: 0bbe3406.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: ff0c069d.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: f35bdd46.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: ef8e5736.reader.active-news.com
non-spam
1 NNTP-Posting-Host: e6214d45.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: cc8e23e2.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: b9b4bc63.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: a7c45e7d.reader.active-news.com
non-spam
1 NNTP-Posting-Host: 39540579.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 7255064b.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 036610fd.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 32840f6d.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 9077b578.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 890c16ee.reader.active-news.com
non-spam
1 NNTP-Posting-Host: 773b3ff3.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 608e6253.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 514be412.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 187e9de1.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 94d85f82.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 89a39002.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 85cc9227.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 81b0ef68.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 15a213fa.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 09b0aae9.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 7d1b4908.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 6b8d7d0f.reader.active-news.com
SavageBabes.com
1 NNTP-Posting-Host: 4fb3a00c.reader.active-news.com
SavageBabes.com
========================================================================
|jacobs# whois active-news.com
|
|Whois Server Version 1.3
|
|Domain names in the .com and .net domains can now be registered
|with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
| Domain Name: ACTIVE-NEWS.COM
| Registrar: NETWORK SOLUTIONS, LLC.
| Whois Server: whois.networksolutions.com
| Referral URL: http://www.networksolutions.com
| Name Server: NS121.ACTIVE-NEWS.COM
| Name Server: NS122.ACTIVE-NEWS.COM
| Status: REGISTRAR-LOCK
| Updated Date: 28-jan-2006
| Creation Date: 13-mar-2002
| Expiration Date: 13-mar-2007
|
|
|>>> Last update of whois database: Thu, 2 Feb 2006 15:51:24 EST <<<
|>>>
|
|Registrant:
|frost, paul
| 27 Ryan Drive
| Sheffield S13 9UZ
| UK
|
| Domain Name: ACTIVE-NEWS.COM
|
| Administrative Contact, Technical Contact:
| frost, paul pauldfrost@hotmail.com
| 27 Ryan Drive
| Sheffield S13 9UZ
| UK
| 0114 2694288
|
| Record expires on 13-Mar-2007.
| Record created on 13-Mar-2002.
| Database last updated on 2-Feb-2006 18:31:08 EST.
|
| Domain servers in listed order:
|
| NS121.ACTIVE-NEWS.COM 62.105.77.121
| NS122.ACTIVE-NEWS.COM 62.105.77.122
]jacobs# host active-news.com ; host news.active-news.com ;
+ soa active-news.com ; date
]active-news.com has address 62.105.77.122
]active-news.com mail is handled by 5 ds1624.dedicated.turbodns.co.uk.
]news.active-news.com has address 198.186.190.152
]news.active-news.com has address 198.186.190.157
]Server: 127.0.0.1
]Address: 127.0.0.1#53
]
]Non-authoritative answer:
]active-news.com
] origin = ns1.magicwalnut.com
] mail addr = admin.active-news.com
] serial = 2006012804
] refresh = 900
] retry = 600
] expire = 86400
] minimum = 86400
]
]Authoritative answers can be found from:
]active-news.com nameserver = ns122.active-news.com.
]active-news.com nameserver = ns121.active-news.com.
]
]Thu Feb 2 23:33:04 UTC 2006
|jacobs# whois -a 198.186.190.152
|
|OrgName: Prescient Software, Inc.
|OrgID: PRESCI-1
|Address: 6967 Weller St
|City: San Diego
|StateProv: CA
|PostalCode: 92122
|Country: US
|
|NetRange: 198.186.190.0 - 198.186.194.255
|CIDR: 198.186.190.0/23, 198.186.192.0/23, 198.186.194.0/24
|NetName: NETBLK-PRESCIENT01
|NetHandle: NET-198-186-190-0-1
|Parent: NET-198-0-0-0-0
|NetType: Direct Assignment
|Comment:
|RegDate: 1993-09-17
|Updated: 1998-10-09
|
|RTechHandle: SM44-ARIN
|RTechName: McGregor, Scott
|RTechPhone: +1-415-964-0373
|RTechEmail: mcgregor@prescient.com
|
|OrgTechHandle: AFR11-ARIN
|OrgTechName: Freedman, Avi
|OrgTechPhone: +1-215-481-9797
|OrgTechEmail: domains@freedman.net
|
|# ARIN WHOIS database, last updated 2006-02-01 19:10
|# Enter ? for additional hints on searching ARIN's WHOIS database.
|jacobs# whois -r 62.105.77.122
|% This is the RIPE Whois query server #1.
|% The objects are in RPSL format.
|%
|% Note: the default output of the RIPE Whois server
|% is changed. Your tools may need to be adjusted. See
|% http://www.ripe.net/db/news/abuse-proposal-20050331.html
|% for more details.
|%
|% Rights restricted by copyright.
|% See http://www.ripe.net/db/copyright.html
|
|% Note: This output has been filtered.
|% To receive output for a database update, use the "-B" flag.
|
|
|% Information related to '62.105.77.0 - 62.105.77.255'
|
|inetnum: 62.105.77.0 - 62.105.77.255
|netname: UK-PIPEX-HOST-DEDIC-LEEDS-3
|descr: Dedicated Server Range (Leeds DONHOST)
|country: GB
|admin-c: HM655-RIPE
|tech-c: HM655-RIPE
|status: ASSIGNED PA
|mnt-by: AS5519-MNT
|mnt-lower: AS5519-MNT
|mnt-routes: AS5519-MNT
|source: RIPE # Filtered
|
|role: Hostmaster Contact
|address: PIPEX Communications
|address: The Hinshelwood Building
|address: Edmund Halley Road
|address: Oxford Science Park
|address: Oxford
|address: OX4 4GB
|address: United Kingdom
|phone: +44 870 909 8181
|fax-no: +44 1865 778 160
|admin-c: MATT1-RIPE
|admin-c: HM655-RIPE
|admin-c: ID40-RIPE
|admin-c: RIZ5-RIPE
|admin-c: RW688-RIPE
|admin-c: FAZ5-RIPE
|admin-c: SJC2-RIPE
|admin-c: YSL1-RIPE
|tech-c: MATT1-RIPE
|tech-c: GEF8-RIPE
|tech-c: SH1765-RIPE
|tech-c: RW688-RIPE
|tech-c: RIZ5-RIPE
|tech-c: ID40-RIPE
|tech-c: MLAU1-RIPE
|tech-c: BRI69-RIPE
|tech-c: HM655-RIPE
|tech-c: FAZ5-RIPE
|tech-c: SJC2-RIPE
|tech-c: YSL1-RIPE
|nic-hdl: HM655-RIPE
|abuse-mailbox: abuse@gxn.net
|mnt-by: AS5519-MNT
|source: RIPE # Filtered
|
|% Information related to '62.105.77.0/24AS5413'
|
|route: 62.105.77.0/24
|descr: PIPEX Communications
|descr: (FNS)
|descr: Carlton House
|descr: 27A Carlton Drive
|descr: London
|descr: SW15 2BS
|descr: UK
|origin: AS5413
|member-of: AS5413:RS-PIPEX
|remarks:
|remarks: ------------------------------------------------------
| remarks:
|remarks: Please direct Abuse complaints to abuse@gxn.net
|remarks: Complaints directed elsewhere will not be actioned.
| remarks:
|remarks: ------------------------------------------------------
| remarks:
|mnt-by: AS5413-MNT
|source: RIPE # Filtered
- --
David Ritz <dritz+hfrarg@suespammers.org>
The suespammers.org mail server is located in California; do not
send unsolicited bulk e-mail or unsolicited commercial e-mail to my
suespammers.org address.
08.02.2006 Re: [Usenet] RFD - UDP against Active-news.com (from David Ritz)
On Thu, 2 Feb 2006, Mr. Support <support@readnews.com> wrote in
e-mail:
AF> Hi, I've forwarded the message on to active-news. He said he
AF> fixed email, and I just tried admin and abuse to check myself.
AF> Certainly, we insist that all of our ISP and wholesale customers
AF> maintain published and working abuse contacts.
Thanks, Avi. I'm sure this will help keep them apprised of this
discussion.
AF> I know that he gets post logs frequently (semi-weekly) and deals
AF> with spammers; we've only recently automated reseller access to
AF> post logs so until recently we interacted for him to get post
AF> information.
AF> Anyway, I will discuss with him.
Thank you.
AF> It's not impossible for us to block the end customer but we'd
AF> have to be pretty convinced that it is a serious spam issue, and
AF> I have to admit that we haven't investigated the newsgroup
AF> FAQs/charters/general content in question. It does generally
AF> seem that most of the binaries pr0n groups are commercial
AF> content advertising their sites, though generally on-topic to
AF> the general content in the groups.
Here, I thought I was paying you a compliment, when I referred to
you as a libertarian. You seeming concern over content seems to
disprove this assertion.
Spam isn't about _what_ is being said or _where_ it is being said.
Quite simply, content, in and of itself, is irrelevant. As such,
the only relevant FAQ is "Current Usenet spam thresholds and
guidelines" <http://www.killfile.org/faqs/spam.html>.
<quote>
Excessive Multi-Posting (EMP) has the same meaning as the term
"spam" usually carries, but it is more accurate and
self-explanatory. EMP means, essentially, "too many separate
copies of a substantively identical article."
"Substantively identical" means that the material in each article
is sufficiently similar to construe the same message. The
signature is included in the determination. These are examples of
substantively identical articles:
* byte-for-byte identical messages
* otherwise identical postings minimally customized for each
group it appears in.
=> * advertising the same service.
* articles that consist solely of the same signature
* articles which consist of inclusions of other user's postings,
but are otherwise identical.
</quote>
In the simplest terms possible, spam means saying the same thing
many times. In the first thirteen hours of today (CST), one
spammer said, "SavageBabes.com," 16,044 times. This spammer says
this same thing at least that many times every day. This is
unquestionably spam and must be dealt with as the net-abuse issue
it represents.
While I looked only at a half day's output, please keep in mind
that for the purposes of cyberspam cancels, the Breidbart Index
(BI) >=20 is calculated over a forty five day sliding window. The
SavageBabes.com spammer hits this at least a couple of times per
minute.
Each and every one of the 16,414 articles I refer to as spam, in
my analysis, meet the criteria as BI>=20 within a thirteen hour
period. That means that fully 99.85% of the articles showing
active-news.com as an origin, meet the criteria for spam cancels.
[snip additional material quoted from
<Pine.OSX.4.64.0602021216160.16010@glimmer.local>]
>> Please see <http://dritz.mako.ath.cx/20060202-active-news_head.txt>.
>> (This 11MB file will be expunged within one week.)
>>
>> Out of 16,414 articles analyzed, only 24 (0.15%) have any
>> resemblance to legitimate traffic. 16,390 (99.85%) articles are
>> spam, with the vast bulk of it promoting SavageBabes.com.
>>
>> 16,044 SavageBabes.com 97.75%
>> 177 ultimate-anonymity.(org|com|net) [Moffatt] 1.08%
>> 111 5get.com/2/heather 0.68%
>> 29 www.xesbus.com 0.18%
>> 29 VCN Corp. (193.239.4.0 - 193.239.7.255) 0.18%
>> 24 non-spam 0.15%
>>
>> From the look of this, the network would be best served were
>> READNEWS.COM to route this source to /dev/null, while asking
>> both(?) legitimate customers of active-news.com (largely customers
>> of www.Cheap56K.com) to find other access to Usenet.
>>
>> Here's the break down of what I found, by pseudo-NPH:
AF> <snip>
- --
David Ritz <dritz+hfrarg@suespammers.org>
The suespammers.org mail server is located in California; do not
send unsolicited bulk e-mail or unsolicited commercial e-mail to my
suespammers.org address.
08.02.2006 Re: [Usenet] RFD - UDP against Active-news.com (from Mandalay)
NOTE: A couple of days after the February 2nd call for a UDP the mail server opened its doors again. And the spam post below was about the last from active-news to abpeaf in a long time. That is until 100proofnews was pressured into letting go of the spammer. Enter active-news again....
Well, guess my joy came too soon. Two new 150-part savage-babes.com
spam posts via active-news arrived (sample headers attached):
Path:
news.easynews.com!en236!core-easynews!newsfeed2.easynews.com!easynews.com!easy
news!peer01.cox.net!cox.net!border2.nntp.dca.giganews.com!nntp.giganews.com!no
via!news-pusher.readnews.com!news-out.readnews.com!spool-big1.readnews.com!not
-for-mail
From: "Michael" <0Z07@japan.com>
Newsgroups: alt.binaries.pictures.erotica.asian-female
Subject: Anal Leather Action -- "150.jpg" (1/1)
Date: Thu, 9 Feb 2006 14:54:35 -0000
Lines: 760
Message-ID: <43e9db09$0$17772$a82e6bb9@reader.active-news.com>
NNTP-Posting-Host: bbd7980b.reader.active-news.com
X-Trace:
DXC=XZ8Yh38jiKk?=LPS>5MSOano>BVMAEE[jNRYa@IjA4ZaVbJ^Y8F[4<e_8<GGfZ[VXnV^`N3j3n
K\jPSSGLF;PVjo5L0oo2VGeMa
X-Complaints-To: abuse@active-news.com
Xref: core-easynews alt.binaries.pictures.erotica.asian-female:100602
______________________________________
Path:
news.easynews.com!en236!core-easynews!newsfeed2.easynews.com!easynews.com!easy
news!news-out.octanews.net!teal.octanews.net!news-out.readnews.com!spool-big1.
readnews.com!not-for-mail
From: "Alexander" <V6NQ@myself.com>
Newsgroups: alt.binaries.pictures.erotica.asian-female
Subject: Destiny is not as quiet she looks like, check her turning
Hardcore -- "150.jpg" (1/1)
Date: Fri, 10 Feb 2006 0:16:13 -0000
Lines: 1306
Message-ID: <43ea5097$0$17766$a82e6bb9@reader.active-news.com>
NNTP-Posting-Host: b49f18c0.reader.active-news.com
X-Trace:
DXC=d_1<AZ[JUPT_@f@?F5_ZLUno>BVMAEE[ZNRYa@IjA4ZQS;JC^44mP`Z_8<GGfZ[VX^WeN?ZC1;
A4ZiLLoh8PBBHZG_GXX`\<6cV
X-Complaints-To: abuse@active-news.com
Xref: core-easynews alt.binaries.pictures.erotica.asian-female:100752
25.10.2006 [usenet] Call for action against 100proofnews.com (from Mandalay)
Note: Having had enough of the contiunuing spam posts via 100proofnews I sought help again at nanap:
For nearly two years I've been fighting a certain spammer in my group
(alt.binaries.pictures.erotica.asian-female) and the newsservers who
are - willingly or unwillingly - supporting him.
Three servers have been the main culprits here in the past:
100proofnews.com
athenanews.com
active-news.com
The last one (with some pressure from this group it seemed)
disappeared, which left 100proof and Athena.
Athena this month seems to have gotten a grip as well (though not I'm
holding my breath - this has happened in the past)
Which leaves the worst one of them all: 100proofnews.com
No matter how many reports I send, how many times I try to contact
them: It doesn't make a damn bit of difference. Per day between 5-7
spam post from the same source (between 12-30 messsages each) are
being distributed via 100proofnews (and its main feed - the notorious
highwinds-media).
And this is not limited to my or other Asian groups. The same spammer
(judging from the MO) is posting through 100proofnews, with different
content like teensites (in groups like
alt.binaries.nospam.teenfem.nonude a.o.) or BDSM (like
alt.binaries.pictures.erotica.spanking a.o.). And those are just the
ones I found. I am sure ther are others.
The only time I have ever come across 100proof was when a former
disgruntled customner placed several messages in various groups
warning everyone that 100proof was a fraud and didn't live up to their
promises. Lol
But seriously the state of usenet has deteriorated in the last years,
especially when it comes to spam. Man former vibrant groups have
become wastelands with nothing but spam, many good posters have left,
and I know of several dedicated usenetters who have unsubscribed their
servers and left usenet in frustration. And I have to admit I have
harbored that thought myself, thinking of switching to torrents and
forums instead.
And if you server admins don't start to get off your a....s and begin
thinking about ways to stop the spam (or things like the sporging via
Verizon) not only on your own servers (which most of you are doing
admirably it must be said) but black sheep like 100proofnews as well,
you might wanna think about job alternatives because in time usenet
will become a thing of the past.
I have made a web page with my correspondence with those three servers
(mostly the abuse reports):
http://www.angelfire.com/punk/abpeaf/100proof/intro.htm
Of most interest right now is the 100proofnews page:
http://www.angelfire.com/punk/abpeaf/100proof/content/100proofnews.html
Just look at the middle week of October:
http://www.angelfire.com/punk/abpeaf/100proof/content/october-10006b.html
I would kindly ask you to act against 100proofnews and maybe set an
example, be it through an UDP (if that is still an option) or
whatever.
It is in your own interest.
Thank you
Mandalay
Btw you can download the correspondence as a rar on the site as well:
http://www.angelfire.com/punk/abpeaf/100proof/fightspam.rar
25.10.2006 RE: [usenet] Call for action against 100proofnews.com (from Andrew - Supernews)
On 2006-10-25, Mandalay <man@da.lay> wrote:
> For nearly two years I've been fighting a certain spammer in my group
> (alt.binaries.pictures.erotica.asian-female) and the newsservers who
> are - willingly or unwillingly - supporting him.
>
> Three servers have been the main culprits here in the past:
>
> 100proofnews.com
> athenanews.com
> active-news.com
All three of these are not "servers" in any meaningful sense, but
merely
"resellers".
100proofnews is a reseller of highwinds-media.com
athenanews is a reseller of readnews.com
active-news is a reseller of readnews.com
In this kind of situation, it is ultimately the responsibility of the
server operator, not the reseller, to ensure that any abuse is dealt with.
We have recently been, um, "having words" with the operator of readnews.com
with the effect that their spam levels are now merely bad, rather than
mindbogglingly awful. That leaves highwinds-media as the largest source of
Usenet spam by an _extremely_ large margin - even discounting misplaced
binaries, and other non-spam forms of abuse, they have been averaging well
over one hundred thousand articles of spam _PER DAY_ over the past week,
which is more than one-third of the total spam on Usenet.
Don't waste your time trying to contact 100proofnews; the problem is
entirely with highwinds-media.
--
Andrew, Supernews
http://www.supernews.com - individual and corporate NNTP services