Digex and Akamai are raping the ARIN whois database

Wed Sep 5 02:48:22 UTC 2001

</lurk>
>>Nothing like the smell of spam in the morning - coming to you through the
>>"benevolent" acts of Akamai and Digex - sent to POC handles blatantly stolen
>>from ARIN's whois database.

Did it come to an address *only* used with ARIN? I realize that is a 
stupid question, but it has to be asked.

>Yo, Digex:

Tell them, not us. I'd call their marketing dept, sales dept, 
whatever and give them a piece of your mind. However, by odd 
coincidence I can fill you in on some background info:

>from=<bounces at bounce.innovyx.com>, <snip>

Well I *can* confirm for you that 'Innovyx' is a spamhaus.

I unfortunately worked for their parent company several years ago, 
until I got a clue and bailed. 'Innovyx' spun off just before I left, 
and unfortunately my name (with an ancient low-number personal NIC 
handle... remmber those?) was on their WHOIS records, both at NSI and 
ARIN, for way too long. I got endlessly harrassed by pissed off 
people, until my attorney reminded their attorney about the agreement 
we all signed when we settled.

They haven't updated their own ARIN WHOIS data 
<http://www.arin.net/cgi-bin/whois.pl?queryinput=NET-TPDI3>, so there 
is at least one human listed there you *can* harass... however he 
isn't the one who can do anything for you. Ping me off-list if you 
want the names of the guilty. You *really need* to contact Digex & 
Akamai, as they were actually foolish enough to *pay* Innovyx good 
money to harass you.

P.T. Barnum *was* right.

>
> > [censored]
> > Received-Date: Tue, 4 Sep 2001 11:4x:xx -0400 (EDT)
> > Received: from shiner.innovyx.com (shiner.innovyx.com 
>[63.143.186.194] (may be forged))

I hope 'shiner' isn't the 'shiner' I set up. Sad to hear of a good 
host used for evil purposes... <sigh>

They (innovyx) seem to have moved out of the frying pan (UUnet) and 
into the fire (Winstar) though.

But wait...
heh... looks like a "poor mans' BGP"??? with multiple IPs on every 
host? Their ARIN records indicate UUnet address space, but your mail 
points to Winstar ones...

Start: 9/4/01     7:21:03 PM
Find route from: 216.168.32.90
              to: shiner.innovyx.com (207.78.109.20), Max 30 hops, 40 
byte packets
Host Names truncated to 32 bytes
  1 out.bothell.forest.net.          (216.168.32.1  ):     1ms 
0ms        0ms
  2 border001.sea.forest.net.        (216.168.46.1   ):     1ms 
1ms        1ms
  3 500.serial1-1.gw4.sea4.alter.net (157.130.181.1  ):     1ms 
1ms        1ms
  4 117.atm2-0.xr2.sea4.alter.net.   (152.63.105.142 ):     4ms 
2ms        2ms
  5 192.atm2-0.xr2.sea1.alter.net.   (146.188.200.145):     3ms 
4ms        3ms
  6 194.atm6-0.gw7.sea1.alter.net.   (152.63.105.173 ):     3ms 
3ms        3ms
  7 gw.tpdinc.com.                   (206.136.148.1  ):     7ms!U 
*          9ms!U
*Trace completed*

Unreachable. Maybe they are leaving UU for less green pastures. Or 
maybe their DNS is all screwed up...

Start: 9/4/01     7:21:12 PM
Find route from: 216.168.32.90
              to: 63.143.186.194 (63.143.186.194), Max 30 hops, 40 byte packets
Host Names truncated to 32 bytes
  1 out.bothell.forest.net.          (216.168.32.1  ):     1ms 
0ms        1ms
  2 border001.sea.forest.net.        (216.168.46.1   ):     1ms 
1ms        1ms
  3 s4-0-5.evrtwa1-cr2.bbnplanet.net (4.0.63.17      ):     2ms 
2ms        2ms
  4 p3-0.evrtwa1-ba2.bbnplanet.net.  (4.24.5.109     ):     2ms 
2ms        2ms
  5 p3-0.sttlwa1-cr2.bbnplanet.net.  (4.24.6.61      ):     3ms 
3ms        7ms
  6 p13-0.snjpca1-br1.bbnplanet.net. (4.24.4.182     ):    22ms 
22ms       20ms
  7 p1-0.snjpca1-cr1.bbnplanet.net.  (4.24.9.134     ):    20ms 
20ms       21ms
  8 mae-west-atm-gtei.good.net.      (4.24.145.30    ):    44ms 
36ms       57ms
  9 3.atm8-0.snv1-bb1.winstar.net.   (65.36.0.174    ):    51ms 
37ms       39ms
10 6.atm4-0-0.seattle-0.winstar.net (63.141.227.177 ):    61ms 
61ms       56ms
11 158.winstar.net.                 (63.142.195.158 ):    62ms 
62ms       65ms
12 shiner.innovyx.com.              (63.143.186.194 ):    64ms 
61ms       62ms
* Trace completed 9/4/01     7:21:15 PM   *

So either their DNS, or their routing, or *both* are completely 
fsck'ed. Couldn't have happened to a more deserving bunch.

><snip>

> > We're sending you this invitation because we received your e-mail
> > address from one of our marketing partners. If you'd like to receive
> > future emails, please click here:

Groan. See, it *is* opt-in!

lame.

> > http://edge.akamai.com/redir.asp?[censored]&SubscriberID=[censored]
> > Not confirming your interest automatically leaves you unsubscribed and
> > we will not send you future emails. Additionally, each issue you receive
> > as a subscriber will contain unsubscription instructions.

Jeez, it's like a frikkin man-trap. Yes, you will only receive one 
mail about *this* 'event, but no way of ever permanently removing you 
address?

These guys are in Washington state, which does have a pretty good 
anti-spam law. You might want to see if they are toeing the line here 
or stepping over it.

Given that this is not even trivially operational, I'm dropping back 
into lurk mode now...

<lurk>

Chuck Goolsbee                          V.P. Technical Operations
_________________________________________________________________
digital.forest                      Phone: +1-877-720-0483, x2001
where Internet solutions grow              Int'l: +1-425-483-0483
19515 North Creek Parkway                    Fax: +1-425-482-6871
Suite 208                                   http://www.forest.net
Bothell, WA 98011                            email: cg at forest.net