Results 1 to 16 of 16
  1. #1
    Join Date
    Jul 2006
    Posts
    290

    Colocrossing Spam Issues

    For a very long time we received many spam from vuvunews.com / vuvuplaza.com, unsubscribe while never subscribed in the first place and report such spam but colocrossing.com don't seems to care and even spamcop eventually devnulled spam reports to colocrossing.

    This is however not the reason for this post because I have an interesting question.

    Up to what degree is a host or datacenter co-responsible for illegal spamming?

    The reason for above is that the company VUVU is based in South Africa but have two domains. vuvuplaza.com used for sending out illegal spam and hosted at colocrossing.com and their website and main domain vuvuplaza.com hosted at Internet Solutions in SA.

    Internet Solutions don't want to do something because the spam is not send from their servers while colocrossing.com seems to endorse illegal spamming and ignore spam complaints.

    In my view it's like ignoring and have a total disregard for the LAW yourself if you know somebody in your house act illegally.

    And that just for a few bucks extra in their pocket?

    On a sidenote my view is that nobody will come anywhere in the anti-spam war unless it start focusing on the source and that is the COMPANY and host, datacenter behind spam.

    (As example. There are perhaps millions of people that send v i agra spam so it's almost impossible to stop, unless the maybe just a handful companies that PAY commission to such spammers or provide such products are held responsible)

    I somewhere read that 95% of the worlds spam originate from less than 5% of datacenters or something to that effect. (I don't think colocrossing.com is one of them but it's possible giving their total ignorance of spam complaints hehe)
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  2. #2
    We get notified of any spam complaints from Colocrossing and if we do not respond they will null the IP in question. I understand this is their standard policy.

  3. #3
    Join Date
    Jul 2006
    Posts
    290
    Hmmm

    I searched the forum for something similar and found the following.

    http://www.webhostingtalk.com/showth...ocrossing+spam

    Seems as if colocrossing send spam themselves even while it's back in 2010 and things may changed. Perhaps that's why they don't take action against spammers (in my case anyway as I tried for over a year to stop vuvu spam)
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  4. #4
    Frank,

    I looked at your emails that you sent our abuse department this morning at 4 AM ET and I cannot find any linkage to us. The mail does not appear to be sent from our IP space.

    Also vuvuplaza.com is not hosted by us as you suggest.

    Go ahead and email me at jbiloh-at-colocrossing.com if you would like to discuss further.

  5. #5
    Join Date
    Jul 2006
    Posts
    290
    Quote Originally Posted by JonBiloh View Post
    Frank,

    I looked at your emails that you sent our abuse department this morning at 4 AM ET and I cannot find any linkage to us. The mail does not appear to be sent from our IP space.

    Also vuvuplaza.com is not hosted by us as you suggest.

    Go ahead and email me at jbiloh-at-colocrossing.com if you would like to discuss further.
    Delivery-date: Sun, 29 Sep 2013 13:13:59 +0200 Received: from server3.vuvunews.com ([192.3.130.143]:47234) by venus.cyberage.biz with esmtp (Exim 4.80.1) (envelope-from <[email protected]>) id 1VQEwc-0006lR-N3 for [email protected]; Sun, 29 Sep 2013 13:13:59 +0200 Received: from server3.vuvunews.com (server3.vuvunews.com [192.3.130.143]) by server3.vuvunews.com (Postfix) with ESMTP id 336BF23E9A97 for <[email protected]>; Sun, 29 Sep 2013 15:13:44 +0400 (MSD)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19947
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

    ;; OPT PSEUDOSECTION:
    ;; QUESTION SECTION:
    ;143.130.3.192.in-addr.arpa. IN PTR

    ;; ANSWER SECTION:
    143.130.3.192.in-addr.arpa. 57333 IN PTR server3.vuvunews.com.

    ;; AUTHORITY SECTION:
    3.192.in-addr.arpa. 44380 IN NS ns1.colocrossing.com.
    3.192.in-addr.arpa. 44380 IN NS ns2.colocrossing.com.

    ;; ADDITIONAL SECTION:
    ns1.colocrossing.com. 1419 IN A 198.46.128.18
    ns2.colocrossing.com. 1419 IN A 198.46.128.16
    Precise what I am talking about.

    Internet Solutions jump to say vuvuNEWS.com is not hosted by them (but vuvuPLAZA) is

    Colocrossing.com jump to say vuvuPLAZA is not hosted by them (but vuvuNEWS is)

    It's the vuvunews.com s above that is hosted on colocrossing.com servers that illegally spam people or do above public visible dns and who'is records lie?
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  6. #6
    Quote Originally Posted by Frankc22 View Post
    HTML Code:
    Delivery-date: Sun, 29 Sep 2013 13:13:59 +0200 Received: from server3.vuvunews.com ([192.3.130.143]:47234)     by venus.cyberage.biz with esmtp (Exim 4.80.1)     (envelope-from <[email protected]>)     id 1VQEwc-0006lR-N3     for [email protected]; Sun, 29 Sep 2013 13:13:59 +0200 Received: from server3.vuvunews.com (server3.vuvunews.com  [192.3.130.143])     by server3.vuvunews.com (Postfix) with ESMTP id 336BF23E9A97     for <[email protected]>; Sun, 29 Sep 2013 15:13:44 +0400  (MSD)
    HTML Code:
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19947
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
    
    ;; OPT PSEUDOSECTION:
    ;; QUESTION SECTION:
    ;143.130.3.192.in-addr.arpa.	IN	PTR
    
    ;; ANSWER SECTION:
    143.130.3.192.in-addr.arpa. 57333 IN	PTR	server3.vuvunews.com.
    
    ;; AUTHORITY SECTION:
    3.192.in-addr.arpa.	44380	IN	NS	ns1.colocrossing.com.
    3.192.in-addr.arpa.	44380	IN	NS	ns2.colocrossing.com.
    
    ;; ADDITIONAL SECTION:
    ns1.colocrossing.com.	1419	IN	A	198.46.128.18
    ns2.colocrossing.com.	1419	IN	A	198.46.128.16
    Precise what I am talking about.

    Internet Solutions jump to say vuvuNEWS.com is not hosted by them (but vuvuPLAZA) is

    Colocrossing.com jump to say vuvuPLAZA is not hosted by them (but vuvuNEWS is)

    It's the vuvunews.com s above that is hosted on colocrossing.com servers that illegally spam people or do above public visible dns and who'is records lie?
    Go ahead and forward that to our abuse department. We respond within 48 hours. Thus far it's been less than 10 hours since you emailed us. This thread is really not necessary.
    Last edited by Postbox; 11-30-2014 at 11:03 PM.

  7. #7
    Join Date
    Jul 2006
    Posts
    290
    Quote Originally Posted by JonBiloh View Post
    Go ahead and forward that to our abuse department. We respond within 48 hours. Thus far it's been less than 10 hours since you emailed us. This thread is really not necessary.
    Vuvu spamming dating back more than one or two years but colocrossing NEVER acted on so many spamcop spam reports. No wonder that even spamcop eventually devnulled colocrossing.com reports because it seems useless to get anywhere with them.

    [email protected]

    Also look at this

    http://www.spamhaus.org/sbl/listings...ty-servers.net

    You guess it. Hosted at colocrossing.com and perhaps also owned by Colocrossing.com or it's the same place. (Same address for velocity-servers.net and colocrossing.com)

    Registrant:
    Velocity Servers, Inc
    8469 Sheridan Drive
    Buffalo, NY 14221
    US

    Domain Name: VELOCITY-SERVERS.NET

    Administrative Contact, Technical Contact:
    Admin, Domain http://source.domaintools.com/email....;]=transparent
    Velocity Servers, Inc
    8185 Sheridan Drive
    Buffalo, NY 14221
    US
    8005189716

    Record expires on 25-Jan-2014.
    Record created on 25-Jan-2005.

    Domain servers in listed order:

    NS1.COLOCROSSING.COM
    NS2.COLOCROSSING.COM
    198.46.192.0/18 is listed on the Spamhaus Block List

    /18 of IP space and that's *16,384* IP addresses.

    http://www.spamhaus.org/sbl/query/SBL196788

    OrgName: ColoCrossing
    OrgId: VGS-9
    Address: 8469 Sheridan Drive
    Address: ATTN: ARIN
    City: Williamsville
    StateProv: NY

    -----------------------

    And you then really think this thread is not necessary and also that I must believe that colocrossing will act upon spammers????
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  8. #8
    Join Date
    Jan 2011
    Location
    Between Earth & sky
    Posts
    473
    Interesting thing is even the server's IP from colocrossing are listed in spam list
    VMakerHOST Providing Amazing Services since 2010
    Three Datacenter Locations: Chicago, Netherlands & Singapore
    █ Reseller Hosting with WHMCS | End User Support | Premium Network | 24x7-365 Support
    ShoutCAST, Web Hosting, Virtual Servers & Dedicated Servers. Managed options available

  9. #9
    Join Date
    Jul 2006
    Posts
    290
    Jon Biloh VP Operations, ColoCrossing.com send me and email that Vuvuplaza is not on their IP space.

    I replied with the following the day before yesterday but no answer, reply or action so far.

    So Colocrossing deny that 192.3.130.143 is THEIR IP address space?

    See below


    Return-path: <[email protected]>
    Envelope-to: [email protected]
    Delivery-date: Sun, 29 Sep 2013 13:13:59 +0200
    Received: from server3.vuvunews.com ([192.3.130.143]:47234)
    by venus.cyberage.biz with esmtp (Exim 4.80.1)
    (envelope-from <[email protected]>)
    id 1VQEwc-0006lR-N3
    for [email protected]; Sun, 29 Sep 2013 13:13:59 +0200
    Received: from server3.vuvunews.com (server3.vuvunews.com [192.3.130.143])
    by server3.vuvunews.com (Postfix) with ESMTP id 336BF23E9A97
    for <[email protected]>; Sun, 29 Sep 2013 15:13:44 +0400 (MSD)
    To: [email protected]
    Subject: Eat out in your City or Treat yourself - over 200 amazing deals to choose from
    Message-ID: <[email protected]>
    Date: Sat, 28 Sep 2013 00:15:15 +0400
    From: "VuvuPlaza" <[email protected]>
    Reply-To: [email protected]
    MIME-Version: 1.0
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  10. #10
    Same issue from VuvuPlaza / VuvuNews. The targeted email address is an ADSL account address which is only used for connecting to the ADSL network via a ADSL modem.

    VuvuPlaza is unable to disclose how this address was subscribed. For any South African participants in this thread, refer to ECT ACT 45 it is a criminal offense to transmit unsolicted communication. A company is required to (a) remove the recipient AND (b) disclose how the email-address was obtained - failing either of it, will can result in criminal prosecution.

    My mail header below - still waiting for response from Colocrossing and ISPA:

    ...
    Return-Path: [email protected]
    Received: from server5.vuvunews.com ([199.21.114.232])
    by as3.telkomsa.net with ESMTP; 10 Oct 2013 19:55:26 +0200
    Received: from server5.vuvunews.com (server5.vuvunews.com [199.21.114.232])
    by server5.vuvunews.com (Postfix) with ESMTP id AE5636110282
    for <[email protected]>; Thu, 10 Oct 2013 22:04:22 +0400 (MSD)
    Subject: NEW Jamie Oliver Steak Knives / Designer Waffle Maker / NEW Home Cooling Kit / Kids Buzz Game / and a few surprises
    Message-ID: <[email protected]>
    Date: Thu, 10 Oct 2013 16:30:03 +0400
    From: "VuvuPlaza" <[email protected]>
    Reply-To: [email protected]

  11. #11
    Join Date
    Jul 2006
    Posts
    290
    Vuva also send spam DIRECT from Internet Solutions servers but is ignore the spam complaints. I opened a case against them at ISAP and just now emailed ISPA again.

    ISPA Code of Conduct Complaint COC.#657

    With regards to this case the Internet SPAM Solutions client gave everybody the middle finger just like Internet Solutions and continue with their spamming.

    While our addresses seems that the spamming continue with the latest spam send yesterday.

    With above it’s clear they ignore the ECT act like a stopstreet and Internet SPAM Solutions thus clearly supports spamming and is in breach of both the letter and spirit of the ISPA code of conduct.

    WHAT are the ISPA going to do about that??????
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  12. #12
    Quote Originally Posted by Frankc22 View Post
    Vuva also send spam DIRECT from Internet Solutions servers but is ignore the spam complaints. I opened a case against them at ISAP and just now emailed ISPA again.
    I can help out with IS issues - I didn't know that they transmit SPAM from IS. Could you post mail-headers and I will take it up with my account managers at IS.

  13. #13
    Join Date
    Jul 2006
    Posts
    290
    Return-path: <[email protected]>
    Envelope-to: xxxxxxxxxxxnews.co.za
    Delivery-date: Wed, 02 Oct 2013 08:25:52 +0200
    Received: from vuvuplaza.com ([196.38.8.245]:33755 helo=iolutility02.mhs.onsite.hosting.co.za)
    by xxxxxxxxxxxx with esmtp (Exim 4.80.1)
    (envelope-from <[email protected]>)
    id 1VRFsd-0000Gi-UO
    for xxxxxxxxxxxnews.co.za; Wed, 02 Oct 2013 08:25:52 +0200
    Received: by iolutility02.mhs.onsite.hosting.co.za (Postfix, from userid 0)
    id 8F59EBC114B; Wed, 2 Oct 2013 08:25:17 +0200 (SAST)
    To: XXXXXXXXXXnews.co.za
    Subject: Jamie Oliver Vintage Water Glasses / Backup Battery Samsung / NEW Guess Watch Deal / Bottomless Chicken Wings / Learn SPANISH Online
    X-PHP-Originating-Script: 0:email.php
    From: VuvuPlaza <[email protected]>
    Reply-To: VuvuPlaza <[email protected]>
    X-Mailer: VuvuPlaza
    Content-Type: text/html; charset=utf-8
    Content-Transfer-Encoding: 7bit
    Message-Id: <[email protected]>
    Date: Wed, 2 Oct 2013 08:25:17 +0200 (SAST)
    X-Spam-Status: No, score=-3.5
    X-Spam-Score: -34
    X-Spam-Bar: ---
    Return-path: <[email protected]>
    Envelope-to: XXXXXXXXXXnews.co.za
    Delivery-date: Mon, 30 Sep 2013 08:18:47 +0200
    Received: from vuvuplaza.com ([196.38.8.245]:32892 helo=iolutility02.mhs.onsite.hosting.co.za)
    by XXXXXXXXXXX with esmtp (Exim 4.80.1)
    (envelope-from <[email protected]>)
    id 1VQWof-0006Q1-QA
    for XXXXXXXXXnews.co.za; Mon, 30 Sep 2013 08:18:47 +0200
    Received: by iolutility02.mhs.onsite.hosting.co.za (Postfix, from userid 0)
    id D88D4BC0A34; Mon, 30 Sep 2013 08:18:16 +0200 (SAST)
    SMTP error from remote mail server after end of data:
    host mx2346555.spe.spambox.co.za [196.38.95.213]:
    550 An address in this message (at vuvunews . com) is listed on im-url.rbl.spamrl.com. Please organise removal and retry.

    When you reply to this spam email, it go DIRECT to INTERNET SOLUTIONS and as can be seen above even vuvunews.com is listed on above anti-spam directory.
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  14. #14
    MagicDude4Eva that is no one of our IPs...

    Frank, as I said in my personalized email to you on 10/1 (which you did not respond to our acknowledge) the IP space is SWIPed to another organization who is a web/cloud host. You should contact them as they are the abuse contact on the range. It's probably a $4/month user up to no good:

    Hello,

    Thank you for your email.

    Please refer to the hosting company which is utilizing the IP space in question: http://whois.arin.net/rest/net/NET-192-3-130-128-1

    Regards,

    Jon Biloh
    VP Operations, ColoCrossing.com
    Office: +1 (800) 518-9716 ext 101
    Mobile: +1 (716) 949-3858
    Fax: +1 (716) 335-9628

  15. #15
    Join Date
    Jul 2006
    Posts
    290
    Yet another bundle of spam from colocrossing.com


    Re: 198.46.156.56 (Administrator of network where email originates)
    To: [email protected] (Notes)

    Re: http://www.exclusivefuneral.co.za/ (Administrator of network hosting website referenced in spam)
    To: [email protected] (Notes)

    Re: http://www.exclusivefuneral.co.za/newsletter/re... (Administrator of network hosting website referenced in spam)
    To: [email protected] (Notes)
    Frank Coetzee
    SA Internet News Group cc


    "I hear and I forget, I see and I remember. I do and I understand. " - Chinese Proverb

  16. #16
    Join Date
    Jul 2009
    Location
    The backplane
    Posts
    1,790
    Give this info to an RBL or some entity that cares, I don't think anyone here does.

Similar Threads

  1. Issues with ColoCrossing
    By Vee-DediDirect in forum Colocation and Data Centers
    Replies: 29
    Last Post: 03-23-2011, 01:16 AM
  2. Spam from ColoCrossing.com
    By mdrussell in forum Dedicated Server
    Replies: 66
    Last Post: 05-28-2010, 01:28 PM
  3. Spam Issues - HELP!
    By mad4it in forum Systems Management Requests
    Replies: 5
    Last Post: 09-13-2007, 07:21 AM
  4. Spam issues using cPanel/Spam Assassin
    By mbony in forum Hosting Software and Control Panels
    Replies: 0
    Last Post: 04-06-2006, 02:46 PM
  5. Spam Issues
    By [eXtract] Linux in forum Hosting Security and Technology
    Replies: 8
    Last Post: 10-02-2004, 05:11 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •