Menu

Main Page

SPEWS FAQ

Using SPEWS

Simple Doublecheck

Email Filtering

Packet Reject

DNS Deny

HTTP Reject

DSBL

ORDB

SORBS

Easynet

Osirusoft

Dorkslayers

Spamhaus Block List

Unsecured Proxies List

Others

Brightmail

Cloudmark

SpamBouncer

Declude

Praetor

Vamsoft ORF

BCware NoSPAM

SpamAssassin

CommuniGate

MessageWall

Nexor Mailer

VOP Mail Filter

XWall

IronMail

Postini

Power Tools

MDaemon

Merak Mail Server

Clearswift SpamActive

CanIT

SurfControl

SAproxy

eSafe

GFI MailEssentials

Spamhaus

Spamsites

Samspade

SpamCop

Netdemon

OpenRBL

Cauce

Spamlaws

Spam Cases

FTC.gov/spam

Suespammers

AboutSpam

Anti-spam FAQ

SpamFAQ

Abuse Net

Spam Links

NANAE Archive

SPEWS News

Far too many listings/delistings to keep this current. Updates may occur in the future.

Sago Networks had been providing services to one of the worst spammers and spammer hosts on the Internet (Power Email Systems, Beverly Hills Hosting, John Galt Networks). Their initial responses to the abuse were that as long as the spammers abused other people's systems, they would not terminate. They then stated they had contractual reasons for allowing the abuse to continue. It seems that policy has been changed. SPEWS hopes this change is permanent.

In response, all listed Sago Networks IP addresses were removed from SPEWS.

Updated listing for Power Email Systems, etc: http://spews.org/ask.cgi?x=S1187

Alltel, after about a week, managed to shut down a gang of Texas based spammers who were abusing their system around the clock. Spamming from Alltel has been almost non-existent since then. In response, all listed Alltel IP addresses were removed from SPEWS. Further reports state that Alltel will be pursuing legal action against this gang of spammers which is great news.

Sysass.com had hosted the Empire Towers spam gang for a year or more and hosting spamware vendor Rusty Campbell at Desktopserver/Microsys Technologies. They now seem to have cleaned all the spammers from their system.

In response, all listed Sysass.com IP addresses were removed from SPEWS.

Updated listing for Systems Associates: http://spews.org/ask.cgi?x=S395

Agora Publishing had been spamming their newsletters to harvested lists of email addresses. After some work, it seems that the person appointed to clean up their operation lived up to his word and did. No reported spam from Agora in some time. In response, all listed Agora Publishing IP addresses were removed from SPEWS.

Updated listing for Interland: http://www.spews.org/ask.cgi?x=S407

Interland had become home to many spammers, and several well known spamming gangs. That no longer seems to be the case. Michael Wright, an Interland representative posted newsgroup messages stating that the spammers have now all been kicked off of Interland's network.

There is also word from people hosted at Interland that the company has assigned further staff to the abuse & network security department - if true, this should keep their system free of spammers in the future. In response, all listed Interland IP addresses were removed from SPEWS.

Updated listing for Interland: http://www.spews.org/ask.cgi?x=S976

It seems there are some new sheriffs in town at Sands River Wireless. Armed with a new and improved Acceptable Use Policy (AUP), Derek Samford, David Rahamin and others at the company were able to remove most of the listed spammers. In response, most of the listed Sands River Wireless addresses were removed from SPEWS.

Updated listing for Sands River: http://www.spews.org/ask.cgi?x=S923

Aletia Corporation quickly removed the "u-Bulk" CGI spamware peddlers from their system. In response, all listed Aletia IP addresses were removed from SPEWS.

Updated listing for u-Bulk: http://www.spews.org/ask.cgi?x=S1030

AvenueMe must have thrown away their lists of harvested email address, spam from their system has stopped. All listed AvenueMe IP addresses were removed from SPEWS.

Opencom stopped providing services for the "Dionis" Russian spam gang and terminated the "kotik.ru" spamware peddlers. In response, all listed Opencom.ru IP addresses were removed from SPEWS.

TRIPnet after some time, managed to shut down the ways a gang of Texas based spammers were abusing their system. Spamming from TRIPnet has been almost non-existant since then. In response, all listed TRIPnet IP addresses were removed from SPEWS.

Cogent Communications had become home to several well known spammers including the "Bulkbarn", the "New Domains" spammers, and the Russian "Top555" gang. That no longer seems to be the case. Billy Malone, a Cogent representative posted messages stating that the spammers have now been kicked off of Cogent's network. See:

Newsgroup article #1  /  Newsgroup article #2

In response, all listed Cogent IP addresses were removed from SPEWS.

Updated listing for Cogent Communications: http://www.spews.org/ask.cgi?x=S873

ThePlanet.com, removed the bulk emailers going by the name of "Convineo Communications" who were really just spammers Daniel & Maria "Miko" Walls and some figure/alias named "Sam Lloyd."

Loose Foot Computing, have removed the spammer and spamware sites hosted on their network. In response,the SPEWS listed network addresses were removed from the list. Loose Foot Computing also updated their Acceptable Use Policy (AUP) instituting a "zero tolerance" policy towards email abuse of any type including the sale of "spamware".

Updated listing for Loose Foot Computing: http://www.spews.org/ask.cgi?x=S442

Cognigen, have removed the spammer and rogue affiliate sites hosted on their network. In response,the SPEWS listed network addresses were removed from the list.

Updated listing for Cognigen: http://www.spews.org/ask.cgi?x=S466

Webair Internet Development, one of the larger adult site hosts, decided that their network was no longer "spammer friendly." Since posting this Newsgroup article, spammers tracing back to Webair have been few and far between. When one does appear, Webair deals with them in a timely fashion.

In response, the SPEWS listed network addresses were removed from the list.

Updated listing for Webair: http://www.spews.org/ask.cgi?x=S354

Hostopia/InternetNamesForBusiness have removed all the spamware sites hosted on their network. In response, the SPEWS listed network addresses were removed from the list.

Updated listing for Hostopia/InternetNamesForBusiness: http://www.spews.org/ask.cgi?x=S622

HostRocket removed all the spammer sites hosted on their network. They still need to work on the time it takes to respond and act upon abuse reports, but due to their willingness to learn and improve, the SPEWS listed network addresses were removed from the list.

Bellnexxia/Bellglobal had been providing services to one of the worst spammers and spammer hosts on the Internet (bulkmailhosting.com). Their initial responses to the abuse were that as long as the spammers abused other people's systems, they would not terminate. It seems that policy has been changed. A posted BCE Nexxia Inc. reply stated that the spammers had their account suspended. SPEWS hopes this is a permanent suspension.

In response, all listed Bellnexxia/Bellglobal IP addresses were suspended from SPEWS.

Updated listing for bulkmailhosting.com: http://www.spews.org/ask.cgi?x=S675

Caravan.ru had been home to several spammers including the Russian "Top555" gang. That no longer seems to be the case. Alexey G Misurenko, Tech. Director of Caravan, posted a message stating that after several attempts, the spammers have now been kicked off the Caravan.ru network. See:

Newsgroup article

In response, all listed Caravan.ru IP addresses were removed from SPEWS.

[20/Sep/01] - First notices of spammer removal: Usenet post
[24/Sep/01] - Top555 domains found on Caravan.ru - that netblock put back into SPEWS list.

Updated listing for Top555: http://www.spews.org/ask.cgi?x=S423

Direct Source Internet have removed all the spamware sites hosted on their network. In response, the SPEWS listed network addresses were removed from the list.

According to this posted letter by SkyNetWEB's Director of Operations Phillip Ryker, they have "introduced a new, more vigilant anti-spam policy": Newsgroup article

This statement was backed up by the termination of several spammers who had been longtime residents at their network. In response, SkyNetWEB network blocks have been completely removed from SPEWS except for the IP addresses belonging directly to a few remaining spam sites.

SkyNetWEB also updated their Acceptable Use Policy (AUP) and stated;

"SkyNetWEB and Affinity Internet are committed to reducing spam related incidents. We acknowledge our obligation to the legitimate users of the Internet to actively pursue abuse complaints and we are responding to the input we have received from many watchful resources"; and "We applaud the efforts of Internet users worldwide and support the battle to eliminate unwanted UBE/UCE from the Internet."

Optusnet.com.au, reports they have shut down the dynamic-DNS spam service run by the Dean Westbury gang on their network. In response, the SPEWS listed network addresses were removed from the list.

Updated listing for Dean Westbury: http://www.spews.org/ask.cgi?x=S453

CommuniTech, reports they have shut down the account of spammer Scott Richter. In response, the listed CommuniTech /24 netblocks were removed from SPEWS.

Updated listing for Scott Richter: http://www.spews.org/ask.cgi?x=S511

Burlee Networks, appears to have shut down most of the spam sites they were hosting. In response, Burlee.com was removed from SPEWS except for the IP addresses belonging to the few remaining spammers and spamware peddlers that still are hosted there.

UPDATE 28/Oct/01: Burlee Networks removed the remaining spammers listed by SPEWS. All listings removed.

Updated listing for Burlee Networks: http://www.spews.org/ask.cgi?x=S541

AITCOM, once the #1 Spam-Friendly ISP listed at the Spamhaus Project's "top 10 list", appears to have shut down many of the spam sites they were hosting, as shown in this Newsgroup article.

In response, AITCOM was removed from SPEWS except for the IP addresses belonging to the few remaining spammers and spamware peddlers that still are hosted there.

UPDATE 5/Nov/01: AITCOM relisted due to many spammer reappearing on their system and no action taken by this host.

UPDATE 12/Dec/01: AITCOM removed the spammers and has a new, more aggressive anti-spam policy. Listing removed.

Updated listing for AITCOM: http://www.spews.org/ask.cgi?x=S501

Data Fortress had been hosting one of the many sites run by the notorious domain spammer GlobalInternic, see:

http://www.chsw.com/domainspammer

They have since kicked GlobalInternic off their system as posted in this Newsgroup article.

Therefore the Data Fortress block hosting the spammer has been removed from SPEWS.

Updated listing for GlobalInternic: http://www.spews.org/ask.cgi?x=S397

Although still ranked high at the Spamhaus Project's "real time spammer hosting chart", Media 3 seems to have decided not to renew hosting for many of the spamware peddlers formerly on their system.

Only a handful are left, and they are in two easily listable network blocks.

This being the case, much of Media 3's network address space has been removed from SPEWS.

Updated listing for Media 3: http://www.spews.org/ask.cgi?x=S410

According to this article posted by Dialtone VP Leonardo Albarracin, they have agreed to take a closer look at spammers hosted on their system:

Newsgroup article

In response, Dialtone has been completely removed from SPEWS except for the few IP addresses belonging directly to the spam sites. Any new spams sent out advertising any of these sites should be reported directly to Dialtone so that action can be taken against them.

Dialtone also updated their Acceptable Use Policy (AUP) banning all spam support services, including the sale of spamming software or other similar services.

Updated listing for Dialtone: http://www.spews.org/ask.cgi?x=S323