| Home > Misc > Random Thoughts > UCEPROTECT Extortion Service: All Your Mails Are Belong To Us! | 
|
| Home > Misc > Random Thoughts > UCEPROTECT Extortion Service: All Your Mails Are Belong To Us! |
|
Below is the random thought titled "UCEPROTECT Extortion Service: All Your Mails Are Belong To Us!". Be aware that these thoughts may be based on opinion, and my opinion might not agree with yours. Also, the thought below may be based on mood, time of day, or any number of other factors. Please keep this in mind.
This morning some of my customers reported that they were having issues with email delivery, and indeed I was getting a lot less mail on my Blackberry then usual. So I started some routine tests on my server which included checking to see if I was on any blacklists.
MX Tool Box has a great utility to find out if you are on any blacklists and when I ran the IP of our mailserver I was happy to see that I was free and clear...well, almost. It seems that I was on one blacklist, something called UCEPROTECT.
Ending up on a blacklist happens from time to time, and no matter how diligent you are in preventing spam relay, it is highly possible that for whatever reason, a mailserver can be blacklisted. Thankfully most blacklists provide an convenient and easy to be delisted once you prove to them you are not a spammer.
UCEPROTECT, on the other hand, does not. Well, their site does inform you that automatic removal will occur if your mailserver doesn't relay any spam for 7 days, but in order to start an immediate request they require a payment of 50 Euros. That stopped me cold and I had to compose myself after reading that. 50 Euros?! Who in the hell do they think they are? What kind of racket are they running? Do they enjoy being not a blacklist service, but an extortion service instead?
I am certain I was not blacklisted because of a spam relay. It was likely a spoofed IP, or more likely, a mistake on the part of UCEPROTECT. I sure as hell am not going to pay for the privelege not to be removed from their farce of a blacklist. They even have the arrogance (delusion?) to beg for donations with the introductory text "UCEPROTECT-Orga spends a lot of time and money keeping this project running and offers a first class service free of charge to you.". Well, the system better damn well be free because anyone stupid enough to use a corrupt service such as UCEPROTECT should not be charged for the privelege.
Any ISP using UCEPROTECT deserves to be closed down. Any email blacklist which charges for removal deserves to be closed down. 7 days is a long time for automated removal but I am happy in the fact that I doubt many are using this almost criminal organization to filter their mail since I have never heard of it until now.
UCEPROTECT is apprently given bandwidth by a number of sponsors. I'd suggest avoiding business with any of these companies or individuals unless you like dealing with people who knowingly support another dishonest business.
UCEPROTECT may be as bad as the spammers themselves. Both severely reduce the usefulness of email and try to take off with your hard earned money.
| Hahahah i absolutely adore how obvious it is when "Claus"(Dirk) is writing a comment and pretending to pass as some other person defending their piss-poor attempt at scamming. We can all tell its you. Heres another one for the books, they tried to block a few of our mail IP's and ask for extortion money as per usual despite those IP's not being the perpetrators of the issue. Luckily UCEPROTECT is a fucking joke as of today and barely any serious company uses it as a blacklist, so now we are free to ignore it. Good fucking riddance, this shithole of a blacklist will not be missed. And to whoever created the WTF domain, good job on exposing all the scummy stuff in 1 site for the whole world to see. | ||
| Once and for all: Microsoft and Google DO NOT use UCEProtect. This is a baseless rumor spread by the scammer himself. Stop buying his BS. | ||
| They blocked an IP of ours (via our "neighbours" of course) that is attached to a router that is physically unplugged from the wall ! | ||
| The UCEPROTECT site claims: "Your IP was NOT part of abusive action, but you are the one that has freely chosen your provider. By tolerating or ignoring that your provider doesn't care about abusers you are indirectly also supporting the global spam with your money. Seen from this point of view, you really shouldn't wonder about the consequences." If the intent was to stop SPAM they would block the whole IP range of Gmail, Amazon, AOL, ORANGE, etc. (they don't do it to stay alive and keep stealing smaller people). By the way, this one is probably a tribute made by a "fan": https://uceprotect.wtf/ | ||
| Gmail and quite a few AWS servers still inexplicably use this service. UCEProtect blacklisted an entire /16 that our mailserver happens to be on, and now we are getting rejections. This is the only black list we are on, and they want approx 280$USD to remove our IP (even though our address is clean). What a frigging scam. Why are companies still using UCEProtect???? | ||
| I'm not going to pay the clowns. They locked out the whole class because of because yeah. On other RBLs clean | ||
| It seems Microsoft has decided it's cheaper to use their list and pay the extortion for their IP ranges rather than to deal with customer complaints caused by Microsoft and other companies using the UCEprotect list. | ||
| I currently work at one of the largest ISP's/registrars in the world. A huge international registrar/hosting company. We constantly get calls every day from customers complaining that their ip was blacklisted. They could be customers for 10 years and suddenly get blacklisted at random. Lot's of our customers are understanding once we share some online information explaining the bad practices UCEPROTECT uses but that would obviously breach our privacy policy. I feel bad for these customers because we cannot really do anything to help them. We have very tight fraud/spam prevention measures. More than I see at most ISP's. So it is beyond unreasonable to demand that we pay to have random IP's caught in their net removed. | ||
| Got to learn about these extortionists in the process of solving e-mail delivery problems for some customers. It has been incredibly disturbing to learn that even in the supposedly "IT-savvy" country I live in, several high-ranking authorities, like the police, actually honor UCEPROTECT and you will have problems getting e-mail delivered to them with an UCEPROTECT level 3 listing and no other listings. Even if the rest of the stuff like DKIM+SPF passes with flying colors. Sloppy sysadmins who don't know better most likely. It doesn't take much browsing of the UCEPROTECT website to realize these people can't be anywhere serious. Passages that sound as if they were written by a drunk teenager, direct threats to people who want to get delisted, offers to get smoothly delisted for the low low price of only a few hundred CHF... and as an icing on the cake, sexist doxing of people who have written them to threaten legal action. Just yikes! How much can you get away with in this area of "business" ? They seem to have been doing this for over ten years!!! | ||
| you gotta give them some credit. After all these years they are still extorting people... Someone must be paying for real... | ||
| Bandits desfarced of hero... | ||
| UCEPROTECT ALWAYS GIVIN PROBLEMS. That is a service what you can pay to go out from the list and send spam as before, unuseless. | ||
| Not sure how they really put IP's on this blacklist. I have one IP that is blacklisted at Level 3 which is not even used for outbound email. Must be spoofed IP's and we have no control over that. I have removed UCEPROTECT from all by spam checkers. I suggest everyone else do the same. If they are ignored then they will go away. | ||
| .wtf - well done! COOL! I think all interested should try to make a list of providers/companies/organizations/etc. who really use uceprotect. Especially levels 2 and 3. Adding such a tool on .wtf will be great. You see, if someone suffers than someone uses. OR, it may be that these uceprotect lists are all fraud. and just a random attack on unwanted asn-s. Also good to know. | ||
| I decided to make this: https://uceprotect.wtf/ Enjoy! (let me know if I missed anything) | ||
| Paying uceprotect - unacceptable. Moving to another provider - may raise price MANY TIMES. So what? Shocked and confused. Who can say knowingly: which provider uses uceprotect l2 and l3? microsoft? google? yahoo? who??? | ||
| Fact: microsoft uses UCEProtect. Period. Now, I'm at contabo, listed. I get for 5 euros/month some 4cores/8GBram/200GBssd/UnlimitedTraffic. I hardly can match this by any other provider, especially not listed. UpCloud asks 10euros/month for 1core/2GBram/50GBssd/2TBtraffic. Even if I agree to this real downgrade, I can, even though it is WRONG, pay UCEProtect whitelisting and get like 3.5euros/month extra if I pay them for 2 years. SO my contabo+UCEProtect are WAY less than any other service at the same specs. I'm shocked and confused. It is 2021, Europe and US, not some middle-age Asia ... | ||
| ..it looks more like a "shadow" from a big player(big agency e.g. nsa). Suspects observed more than just "blacklist" .. data lost... and more. It's like a little "shadow" in the wind... move attention-direction or destroy focus and make troubles for a little time scale to ASN. ..I have lost my mails.. bad luck.. now, i save it@home. scam... | ||
| I think this is a "trick" so get access to data, to ASN. When they become in trouble, they are good victims for agencies, criminals, and others. Maybe they need a crash to exploit ASN. | ||
| confirm its a trouble right now this dude, is politicall related? 2 weeks and no solution from the ISPs enterprises with power? | ||
| orga members needed to get the "nospam4life" tattoo on their fat bodies to become accepted into the their dark dungeon when the tattoo is finished then the soontobe-member must sacrifice a random young email system administrator, and bath in his blood...then all are dancing to orgasmic rhythms until the morning comes. then they are collecting money from ISPs that hide and support the spammers. Still works in 2021 | ||
| I started having the same problem and started researching UCEPROTECT. It's unbelievable that this kind of scam is still running, 12 years later. | ||
| 2021.... and this is still true | ||
| Confirm UCEPROTECT is still attempting to extort. Two options when taken to the website: 1. Expressdelist and pay 110 USD with Paypal 2. I do not want to have the option to expressdelist my IP **Option 2 warns you that if you choose this option, you are effectively saying NO forever. My question: How do they truly know this is my IP address I have typed into the webpage and requested that I never had the option to pay them again? How do these clowns have power over e-mail and marking it as spam when they operate in this way? There are plenty of reputable services out there that do not operate this way. | ||
| The person behind this scam enterprise and his whereabouts in Switzerland are known. All necessary info to meet him in Switzerland and finally to bring him to a Swiss (or foreign) court can be found right on this here page. | ||
| Asholes..totaly agree...!!! | ||
| UCEPROTECT is a bunch of SCUMS !!! They were not trying to free the internet from spammer, just trying to make themselves richer. How come just because a small amounts captured make itself justification the right to block all IP's ASN can called rules? This is ridiculous although level 1 clean all of that IP's still blocked, coz "that" stupid thing rules. I got furious to this statement: If you are responsible for IP XXX.XXX.XXX.XXX: You can easily find out which UCEPROTECT-Server flagged your IP and for what reason. To do this, search your mail server's logs at the time displayed above +/- 1 minute for permanent undeliverable outgoing messages. Such undeliverable messages can be recognized by a 5xx error such as '550 No such user' or something similar. In principle each of those permanent unsuccessful delivery attempts could have been the spamtrap that reported your IP to our system. Your IP can also get listed for sending mail to email addresses which are out of service for at least 2 years, therfore we strongly recommend you remove permanently undeliverable email addresses immediatly from any mailing lists if you are sending legitimate newsletters. Reading the rejection texts carefully, it shouldn't be a problem to identify those message and responsible users that have caused your listing in UCEPROTECT Level 1. Everything you need in order to identify the problem should already be in your mail server's logs. We strongly suggest blocking outgoing connections with a destination port of 25 TCP in your firewall for all systems not used as mail relays. This simple measure can effectively prevent infected PCs or laptops circumventing your mail relays to send spam. In most cases sending spam becomes entirely impossible that way, but at least you will then be able to find which of your machines is causing the problem. How can the IP XXX.XXX.XXX.XXX be removed from UCEPROTECT-Level 1? Every IP temporary listed at Level 1 will be removed automatically (and free of charge) as soon as it is no longer a source of abuse for 7 days. Automatic expiration is free of charge, because it does not require manual work. If you don't want to wait for expiration, expedited express delisting of this IP from Level 1 can be optionally available at a charge by using one of the payservicebuttons above. Orders for expedited express delisting are processed by external service providers, therfore it cannot be offered for free. Please also note that express delisting only makes sense after the problem which caused the Level 1 listing is fixed. If the problem is not fixed, it is mostly just a question of time until the IP XXX.XXX.XXX.XXX might end up listed in UCEPROTECT Level 1 again. Seriously??? Even one undeliver message even typo got captured. Awful scheming here!!! | ||
| and again, another one of the greedy german blob's swindle companies, the "swissox ag" is going down the drain www.easymonitoring.ch/handelsregister/swissox-ag-843379 he is not safe anymore lol game over, lautenschlager. | ||
| I find it questionable that his name and home address are called by people here without it is clear that the person actually is related to UCEProtect . The registrant of the brand lives or lived in Cham. So far so good. But where is the proof that this is the same person with the person in Switzerland? Apart from the name, there is no evidence. It is pure speculation. | ||
| He has been wanted by a Swiss court, and this summons is including the current residence: Öffentliche Vorladung - Lautenschlager Dirk, geboren am 30.8.1966, wohnhaft Untere Egg 1163, 9056 Gais, wird aufgefordert, am Montag, 16. März 2015, 14.00 Uhr, im Rathaus, Landsgemeindeplatz 2, 9043 Trogen, zur Verhandlung betreffend Forderung persönlich zu erscheinen. ... Trogen, 10. März 2015 Vermittleramt Kreis 2 This official notification by a Swiss court can be googled. | ||
| Uceprotect's Dirk Lautenschlager is publicly bashing his landlord on youtube now. He rented that mansion from owner Fredy P. in the Swiss town of Erlen and now tries to beat down the monthly rental payments of CHF 5,200 because of a handful of wooden planks behind the house and a flooding of the garage where his Harley got wet feet. It is unclear who opened the water pipe. Find more info on google searching for "20min.ch"+"villenstreit" (as is, en bloc), first result. Use google translate for getting the gist. The second result right after this one is about the total collapse of the IT infrastructure of the Bavarian town of Munich, caused by the "skills" of self-proclaimed "IT expert" Dirk Lautenschlager. No wonder there, as is uceprotect's magic technology "no emails - no spam!". Lauty "won" the public competitive bidding through certain State of Bavaria civil servants doing very shady business with him. | ||
| well i am looking into starting a lawsuith i dont like blackmail of my ip adderess | ||
| True why does this site / person still have a working website should blackmailing etc not be bannand or worse tbh | ||
| They listed our clients mail server. Clients where complaining so we paid money to have them remove it quickly and they never did. The IP fell off after the standard 7 days. Then they blacklisted it again because we disputed the payment with PayPal. Which is clearly extortion and fraud. Does anyone know anyone who will actually do something to shut them down like the German police or government. They need to be stopped. | ||
| First of all I agree with that their delisting-policy (paying for express delisting) is somewhat like not serious. At least the first express delisting should be free of charge. On the other hand: nobody forces the receiving side to use uceprotect lists. Furthermore noone should use a blacklist-setup in a way that only matching one list is enough to reject mail. Such setups on smtp servers are just stupid! I personally use their lists on my servers but only in conjunction with other lists. My setup requires that a sending IP must be at least on three lists in order for the smtp server to reject a mail. | ||
| the brand name "uceprotect" has been pulled off the federal german brand names register! https://register.dpma.de/DPMAregister/marke/register/303245654/DE | ||
| just google on the u.s. google website for "dirk lautenschlager schweiz" and the first article is about him, the unwanted german neighbor in switzerland. recent photo of the grubby bavarian lardass included. if you google for images with the same set of words, the first picture is him again, leading to another article about the same matter. relating to the swiss newspaper, he is - guess what - publicly slandering a swiss house owner on youtube. | ||
| After ucescam killed the City of Munich's offical email communication for days (w w w .golem.de/news/oeffentliche-verwaltung-massiver-mailausfall-bei-der-stadt-muenchen-1412-111083.html), angry local readers finally have gathered public material about the man behind ucescam. Here you find what they found h t t p ://forum.golem.de/kommentare/opensource/e-mail-ausfall-in-muenchen-und-wieder-wars-nicht-limux/marke-uceprotect-r-akte-vernichtet/88634,3989260,3989260,read.html#msg-3989260 leading to a wealth of links, just look for yourself. He was the registrant of the ucescam trademark h t t p s ://register.dpma.de/DPMAregister/marke/register/303245654/DE Lauty does not live in 93413 Cham, Germany anymore where his career as local politician for the right wing Bayernpartei never lifted off. Instead, he now lives in a rented house in Erlen, Switzerland and in permanent quarrel with his landlord Fredy P. Of course, nasty Lauty has been working hard on his reputation as the German foreign body in the otherwise very clean Swiss village of Erlen as can be seen in this article of a Swiss newspaper where he proudly poses for a picture h t t p ://www.20min.ch/schweiz/ostschweiz/story/Villenstreit-geht-per-YouTube-in-naechste-Runde-29470029 In a similar verbal style as he writes on his ucescam websites you find him disgracing his landlord on his youtube channel h t t p s ://www.youtube.com/user/Alptraumvilla/videos He is also owning to "companies" called swissox in Switzerland now w w w .monetas.ch/htm/684/de/Personendaten-Dirk-Lautenschlager-GERMANY-Erlen.htm?ident=CSwlRRG5nUffQ0zfxWv72oxu8ThMEXH%2FMQ5ZiFTmJcw%3D Enjoy! | ||
| Do they have the balls to screw with the North Koreans? | ||
| LOL Now the bavarian scammers have fucked it up big time!!! Their dumb customer (bribery, eh?) City of Munich has a non-functional email system now for four days, thanks to scammermeister Snotz von Wolfshaufen. w w w . derwesten.de/wirtschaft/digital/riesige-e-mail-legt-muenchens-rathaus-tagelang-lahm-id10130559.html Gather, all ye hunters, grab him and his butt buddies, and pay them in kind :D | ||
| Habe diese Liste von einem verärgerten ehemaligen UCEPROTECT associate-> Hier sind einige der UCEPROTECT "Partner" läuft Spam-Fallen. Mail-Server-Admins, werden Sie verstehen, was Sie tun müssen;) Ich kann für mehrere Domänen zu fragen, ob jemand interessiert ist? aalco-metall.de admins.ws alpinsports.at apnq.org bedouintravel.se crossfashion.com freelancewebmarket.com hotel-link.eu ipxnet.com lautenschlager.eu | ||
| They are blocking Yale University! LOL its.yale.edu/system-status/view/isp-currently-blocking-or-limiting-email-originating-yale-80 Someone publish a list of all major ISPs which use that German shitlist. | ||
| Well, this is my little contribution to avoid using those scumbags, scammers from UCEPROTECT: https://www.facebook.com/dontuseUCEprotect We have to explain the world the kind of shit they do and expose them. | ||
| Absolutely we have to pay for removing quickly!!! No way except use another smtp server waiting for some stupid and idiot admin that uses this unuseful spam black list! be aware! | ||
| Fuck off UCEPROTECT... On their page it sounds like mailserver administrators are the only culprits for why mailservers get blacklisted. Have they ever heard of exploits? Or weak (even with password rules) or stolen/fished user passwords? Or customers sending legal newsletters with content you cannot control as a mailserver administrator (technically and by law)? The biggest mistake a serious admin can do is using UCEPROTECT as spam protection... | ||
| At a certain court in Regensburg, Germany there are civil servants personally protecting the uceshit extortionists. It is not unlikely that one of them is the same judge who is protecting that law firm U and C and their porn troll gang. Those are responsible for the current mass extortion of 20,000 citizens (red tube case) in that country. All you need to do white collar crime in Bavaria is to be born there, be a member of the ruling CSU party and be in the same marksmanship club. | ||
| Extortion, no doubt ... They want to stop spam (LOL) ... they want is to get rich I' m from Portugal, and its the first time I ear about this uceprotect gang | ||
| LOL The last one obviously was written by Johann himself. | ||
| While I applaud Uceprotects goal to reduce spam, it is clear to me that is not their primary goal which is making money through extortion. If their primary goal was to reduce spam they would have made the blockage period a more reasonable time such as 24 hours. Since continued abuse results in continued blockage, there is no real need for a 7 day blockage other than to generate revenue. | ||
| @Some happy blacklist user - funny that as this and other pages/blog posts show up on page 1 of SERPs for "uceprotect scam", various comments show up in broken english, almost as if they're posted by some german gay porn gang... the fact that UCEPROTECT has the gall to ask for donations, on top of their regular extortion racket, blows my mind. | ||
| If anyone want to sue them we will help! UCEPROTECT is blocking our business for whole week! Someone infected our computers with some trojan over usb, and we get free of them in 1 hour, but they keep us on blacklist for days and days!!! Our business is almost blocked because we can not recived e mailes and exchange informations about various engineering projects! We succeded to get of evry list but these! This is outrageous and criminal acttivity. I hope they will burn in hell or at least find themselves in some prison! | ||
| Nobody get fooled: This person "Some happy blacklist user" is that revolting Bavarian scammer personally writing. German schoolmaster flogging victims and bystanders, holding egomaniac lectures, as usual. Pretending to be not guilty of anything but his criminal business model still is criminal. Lederhosen Man pretends to work for the American NSA as well LOL | ||
| Dear Aaron, you gave public proof that you didn't understand basic things: There are no people blacklisted by UCEPROTECT, they list IPs, Allocations and ASNs only. The listings are also not done by mistake they are intentional based on logic and pure math. Also no one is asked to pay to be removed, because all listings clearly disappear as soon as the range or ASN does no longer match the listing formula. Therfore the network or ASN owner has just to limit the abuse coming from that net or ASN to fix the listing. That clearly requires people complain to their providers if the netbloch they have an IP inside is listed at UCEPROTECT-Level 2 or the ASN with their IP inside is listed at UCEPROTECT-Level 3. People that don't like spam would have a problem to pay a spam-friendly provider, Spammers on the other side have no problem with spammy providers, they are whining about UCEPROTECT instead. I fully understand your point, and I would probably also be upset if I were in your situation. Anyway life is not always fair. There are lots of good people in a high crime district, but that doesn't mean that I am obligated to shop there. When the bad guys are a sufficient proportion of the community, the effort of determining who are the few non-bad guys (none of whom communicates with me in the first place) isn't worth my while. I guess you understand, what I wanted to say here: The owner of the IP block is responsible; I can and do condemn him if he is negligent or malicious. Rejecting traffic from an IP address within the block does not constitute a condemnation of the user of that address. A DNSBL is not a prosecutor. It provides facts, and it's utility depends only on its predictive power. I don't condemn any IP block. I choose not to receive email from some of them. It's purely a statistical issue. This is a philosophical point. Some folks are just so fed up with ISPs who choose to ignore the spam problem (or play whack-a-mole with IP addresses), that blocking entire netblocks seems to be the only way to make it stop. If the ISP doesn't care that their users are sending spam, why should recipient mail server postmasters care? So in reality you don't have any issue with UCEPROTECT, but you have some serious issues with your ISP. Anyway I appreciate that you are not ignoring the listing and you have chosen to act, even if your actions were clearly not going to chance your situation. But seriously: Would you do this if you wouldn't have been impacted by UCEPROTECT in first place? I guess you would not even be aware of the problem. If you would have done some public pressure to negligent ISPs in your country by contacting magazines and authorities there, then you could be sure that you would no longer have prpblems with blacklists in general not just UCEPROTECT. Giving all those whining Spammers a home doesn't make you look like a good person whatsoever and you can be sure that nothing will change. Have a nice day | ||
| I totally agree with you that UCEProtect is running an extortion service. While it is free and easy to unblock your IP from other RBL/SBL list, ublocking option is not provided in uceprotect web page. We have to join hands and blacklist uceprotect themselves before they do enough damage to businesses across the world. If there is anybody out there who can show us how we can blacklist them it would be great and i would like to be a part of it. | ||
| I love the taste of a spanked spammer in the morning.
You and the Whiners about UCEPROTECT have been identified to be spammers by following checklist, so thank's for playing.
1. Standard Stupid Spammer Statements
=====================================
[ ] Get A Life [X] Net Nazi/Commie [ ] The American Way
[ ] Double Opt-In [ ] Anti-Commerce [ ] God-Given Right
[ ] NANAE Group-Think [ ] Sherman Anti-Trust [ ] Global Opt-Out
[ ] Just Hit Delete [ ] (N.B.) Unix Asshole [X] Internet Terrorist
[ ] Frea Speach [ ] Save The Trees [ ] Anal Retentive
[ ] Federally Recognized Backbone / ISPs are Common Carriers / Net
Neutrality
2. Lame Cliche Excuses for Spamming
===================================
[ ] It's Not Illegal [X] Legitimate Business [X] Hacker-X Did It!
[X] This Is Not Spam! [ ] CAN-SPAM
[ ] "We bought an Opt-In List." [ ] "Most people do not mind spam."
[ ] "You posted to my FFA page."
[X] "${DNSBL} is worse than the spammers!"
[ ] "Most people have cable or ADSL anyway."
[ ] "We honor all opt-outs, really we do!"
[ ] "Spam is just like postal junk mail."
[ ] "Hey now, it's not like we're spamming porn, is it?"
[ ] "I'm just trying to put food on the table for my children."
[X] "It's from an affiliate, and we have no control over them." (Burke)
[ ] "Your address was included by mistake."
[ ] "Hey, I'm paying for my dial-up line!"
[ ] "We chatted on IRC last week and you asked for this URL."
[ ] "It's not a pyramid scheme if you provide a product or service."
[ ] "We don't want to send email to those who don't want it."
[ ] "The complaints are from people who forgot that they opted in."
[ ] "The former owner of our IP block was a spammer."
3. Predefined Spammer Beliefs
=============================
[ ] The Internet Cabal [ ] The Lumber Cartel [X] Secret Organization
[X] "${DNSBL} is worse than the spammers!" [ ] "The lurkers support me
in email!"
[X] "Antispammers are the real net abusers!"
[ ] "Blocklists are a conspiracy of the 'Big ISPs'."
[X] "You're not fighting spam, you want to control The Internet!"
4. At Hominem Attacks
=====================
[ ] " is a whore!"
[ ] " is gay!"
5. Moronic Spelling & Layout
============================
[X] ALL CAPS [ ] 3l1t3 $p3ll1ng [X] NoParagraphBreaks
[ ] no capitals at all [X] No Punctuation [X] Excessive Bangs!!!!!
[ ] gnitsoP poT
[X] Incorrect Apostrophe's... [ ] Missing > before quoted message
6. Additional Random Spammer Stupidity
======================================
[X] Cart00ney Summoned [ ] Bogus Analogy Used [X] Godwin's Law Invoked
[ ] Tried Listwashing
[ ] Anonymous-remailer-using coward [ ] Violating Hormel's trademark
[ ] Accusing an antispammer of being Spamford (e.g. Brad Jessness)
[X] Accusing several antispammers of being the same person
[ ] "I hate spam as much as The Next Guy."
(Editor's notes: Um, except that many people blacklisted by UCEPROTECT are done by mistake, and then asked to pay to be removed. Kind of like me tire booting your car because it was red and I once saw another red car fail to pay for parking, then refusing to unboot you until you paid the fine that you didn't earn. Or something like that. Compounded by the fact that idiot spam filters are configured to use UCEPROTECT.) |
||
| There is no person legally going by the name of Claus von Wolfhausen. The operator of this one-man-basement scam enterprise hiding behind this a.k.a. is Johann Steigenberger, a Bavarian criminal who currently is wanted by federal authorities for coercion, unlawful interrupt of business, violation of communication and privacy laws and a few more felonies. He is under private protection of a few corrupt Bavarian civil servants which could be faceing jail terms for bending the laws in his favor. Meet him in the Alps and make him yodel before you cash in the reward for his capture. | ||
| Hi , I have had enough of UCEPROTECT,Claus von Wolfhausen , Johann Steigenberger, Dirk Lautenschlager and Co. they provide no information about what they are doing, I have put up a comprehensive website at www stop-backscatterer.com to try to help users understand who and what they are dealing with here hope you take the time to take a look.. Cheers Patrick | ||
| Please have a look at he the article "An Educational Kerfuffle in Anti-Spam Land" in the Magill Report at magillreport dot com. They have had the dubious pleasure of meeting the self-appointed enforcer of his own new laws for the internet. Also, word is spreading that this self-styled Global Spam-Sheriff without Portfolio Johann "C. Von W." Steigenberger currently will not travel to Northern America nor anywhere in Europe. In fact, not anywhere at all anymore. It is likely that he does not even want to leave his parents' basement in rural Bavaria either as he seems to expect visitors. There is a good chance they will bring him presents. (Editor's notes: Here's a direct link: http://www.magillreport.com/An-Educational-Kerfuffle-in-Anti-Spam-Land/) |
||
| Everyone scammed by them, make paypal freeze that uceshit "delisting" account, otherwise sue paypal for their accompliceship through laundering illicit money. that bavarian extortion outfit is running dry | ||
| Interesting opinions. The whole lot wouldn't be a problem, if the UCEPROTECT list wasn't used. Really, they provide the list only. They don't block anything. The blocking is done by the ISP. UCEPROTECT may be following questionable practices. But then don't use their list. You are putting the blame on UCEPROTECT. With this you admit, and accept, it is a power ruling over you. To strip them of this power, you need to become more powerful. You people - CEOs, managers and tech-gurus of ISPs - should talk to each other and educate each-other, agree on practices and so forth. You should have an association that sets down a code of practice, publishes technical specifications, how to deal with spam on the server. Then you can separate shite from the cake. | ||
| I urge everyone to send something like this to each sponsor listed on the uceprotect.net site: You are listed as a sponsor of USEPROTECT: www.uceprotect.net/en/index.php?m=11&s=0 This is a less than reputable company. The following sums it up nicely: www.aaroncake.net/misc/showthought.asp?thought=57 I urge you to withdraw support from uceprotect.net immediately. YOUR NAME | ||
| Why doesn't somebody create a BLACK LIST of BLACK LISTERS. Let's take care of this the Bill Gates way!!! (Editor's notes: More to the point, mail server administrators should not blindly trust blacklists because essentially, they are putting their mail in the hands of a third party.) |
||
| Their "unblock" phone number and fax number given as their contact are German premium rate numbers skyrocketing your phone bill. These are legal to use only if the fees are publicly mentioned together with the phone number; which they aren't. Because of this felony, contact the German Federal Net Agency bundesnetzagentur(dot)de which is legally bound to investigate. Demand the names and legal address of the lessee of these numbers for your lawsuit. | ||
| Whine Whine Whine. First LAWSUIT filed gets my participation. Until then I am launching my own attack on them. there's more than one way to fuck scum. | ||
| I don't understand, they public that our ASN, but on the list there are IP blocks of other ISP with other ASN. Few days ago, I wrote them for a explanation but they keep silence. UCEPROTECT is not a confident blacklist. | ||
| UCEProtect are only protecting their pockets with their organised extortion. The changes they make are only going to affect normal users, not the spammers. It is bad enough that the mobile networks have done this. You put your dongle in and have to change your outgoing SMTP server to their one (once you have found it), then when you get back to the office you have to change it back again. This is a rediculas situation as you cannot even use your own authenticated, secure and paid for server becuase they have blocked port 25. The only people affected are my users who don't know and don't want to be changing server settings. The spammers just hook on to your outgoing settings and use it as well, or they use a different port. For UCEProtect to try and force BT and others to do as UCEProtect want is criminal. I hope we can put a stop to them as soon as possible. I have several customers that are blocked by them; they all use static IPs and USEProtect knows that they are not spamming (It even says so on their website) but I have to pay for them to be removed from the blacklist, I don't think so.
Do NOT use UCEProtect as they must have connections to organised crime. I hate spam as much as the next guy but this is much worse than getting the spam, at least I have a choice with spam. UCEProtect have made the decission for you that you are bad because you use an ISP that they don't like. (Editor's notes: I love that ISPs block port 25 on other servers for most users. However, the user needs to have an option to turn it off. 99.9% of people won't know or care, and the 0.1% who need port 25 will turn off the block.) |
||
| Bull dust. The BT servers are misconfigured. I run my own email server and have noticed that email originating from BT has invalid host names in the HELO command. The BT servers also appear to accept emails for delivery and then soft bounce them, which is VERY BAD. I only noticed this because I use the opinion of UCEPROTECT's DNSBL lists as part of the spam filtering on my server. I think you need to get on to BT to fix the configuration of their servers instead of complaining that some people have chosen to block them. | ||
| I have never seen so many spammers screaming because of a blacklist. UCEProtect must do a really good job. (Editor's notes: Unsuccessful troll is unsuccessful.) |
||
| These UCEPROTECT crooks are worse than Hitler, the Nazi’s and spam. It is only a coincidence that they are in Germany. However, the attitude is familiar. They have found a way to prey on the fear of spam and to blackmail and extort money through this fear. UCEPROTECT can only be stopped if people like Gmail and Comcast.net stop blindly using them just because they claim to be an RBL. They are evil. For example, that have over 550,000 ip addresses for softlayer blocked and since each of those could house 2-10 domains; they can block 2 or 3 millions mail servers from these domains. This from about 1700 perceived spam emails. This is very irresponsible for major networks to blindly use a so called self appointed RBL like UCEPROTECT that may be twisted and evil as hell. Why doesn't a major ISP take action, sue them, and report them to the government? They are not protecting their customers or providing the service their customers paid for if they don’t. Black Lists are a unique form of evil. With black lists, we don’t need laws or justice. This is akin to the Salem Witch Trials, and the McCarthy hearings and other practices of injustice throughout history. Out of 70 RBLs UCEprotect is the only one listing softlayer.com containing 550,000 ip addresses. The travesty is that nobody will stand up and stop them. Stand UP and be counted. Don't join in the herd mentality. Voice your contempt to c.v.wolfhausen@spamkiller.uceprotect.net | ||
| Did some investigation and found that your informations about these fucking Net-Nazis are something wrong: There are multiple persons involved: Dirk Oliver Lautenschlager is the owner and CEO of "Lautenschlager Consulting" which runs multiple companies and has also shares of "Admins Websecurity" which made the UCEPROTECT-Software. The UCEPROTECT blacklists are run by a different guy: Johann Steigenberger which is using the Alias Claus von Wolfhausen since 2007 after it became public known that he is also running another shitty blacklist: APEWS. Johann Steigenberger (*1960) seems to live anywhere near Deggendorf (Eastern Bavaria) | ||
| THESE PEOPLE NEED A FUCKIN' SHOTGUN RAMMED UP THEIR ASS AND THE TRIGGER PULLED 20 TIMES!! I am a responsible Sr. Exchange Engineer, and piece of crap ppl like these SCUMBAGS REALLY PISS ME OFF!!! I ever run into them, I will DEVOLVE and take FUCKIN' HEADS!!! Oh, and the People who think these FUCKHEADS are RIGHT???? Burn In Everlasting HELL with THEM, Fuckin' Internet SKINHEADS!!!!! That's RIGHT, I'm MAD AS HELL AND I AM OUT OF PATIENCE FOR SCAMS LIKE THIS......FUCKIN' BURN 'EM!!! | ||
| OK ; all my server also was ip block for long time but no change from 7 day my server still in the list and I was trying to delist it but no way to do Really . I don't pay for them because I know it should beg for money like a thief .they should do like other web spam filter and put donate not do like this thanks for your forum , I search for how to solve and see your forum with other person the same problem | ||
| Claus von Wolfhausen is an alias of Dirk Lautenschlager a.k.a 'Lauty' | ||
| I'm in the same situation like all of you... 1 year of activity and uceprotect is still around, this is sad... by the way I don't know if someone really use their black lists, just find them because I used this tool w w w .mxtoolbox. com/blacklists. aspx and they were the only one blacklist to block my IP. | ||
| My favorite part is the 7 day free delist. I have a server that was listed in the summer of 2008 and to this day it has not been delisted. My favorite part is I decommed this server and the IP it uses over 1 year ago. Thats right folks no email no nothing has been coming from this ip for over 365 days and it is still listed on their site.... and yes I still own the IP, so no, no one else is using this IP for anything. Its just sitting there ... doing nothing.. LOL total extortion at its finest. | ||
| UCE Protect are still blocking a massive range of BT IP addresses - they even have a stupid message on their site about BT when you search. Contrary to what they claim, they are blocking both static and dynamic IP addresses - so are by definition blocking a lot of legit traffic. They even have the cheek to say threats of legal action will lead to a permanent listing. A court is the final decider of what is fair/legal and they are effectively saying their opinion is more important than any court. No way am I giving them any money. Just phoning people now to get them to take UCE protect off their block lists. They are either totally incompetent or a scam. | ||
| They are just like the malware anti spywar malware. Who in the world would actual use there BL lol | ||
| I tried to ask them kindly to releace an IP address for a cleint, now my IP address is blocked!, SO I feel this is not very nice, so I called the German interpol they told me they are too busy to deal with such stuff. I called the local interpol in my country and they told me that this is a hard story to understand. why would some one set up a service to help stop abuse and charege for it and make other charge for it to make sure they are safe IP addresses, ( wait a moment are they the spam gangs who now sell you spam filtering) There are about 105000 providers all over the world. Statistics can also be interpreted this way, that those 200 to 400 providers which get it to end up in Level 3 are responsible for 40 to 50% of the global spam, while almost no real mail came from their ranges. Mail server administrators should never implement blacklists unless they are 100% sure of what they are doing. Misconfiguration can result in all incoming mail being blocked. | ||
| Send your complaints about UCEProtect to: www.bka.de This is in Germany and they are responsible for investigating criminal operations. UCEprotect are a scam. We need to stop them. | ||
| It looks like there are U.S. law suits on the way now, and at least one certain European crime fighter unit has honed in on that band on the run. UCEEXTORT are seen as criminals now. It takes a certain international cooperation of law agencies to get hold of a German, an Austrian and a British national, all of which keep rapidly changing their whereabouts. | ||
| Written here on this forum by the hand of a megalomaniac and supremacist script kid "... Those claiming that are too stupid to be humans and their ears are too small to be pigs ..." Superior humans vs. subhumans, eh, Adolf? It is about time to get rid of this unbearable public nuisance and toy boy Von Wolfhaufen and drive him and his fuhrer Seifenberger (dubbed the Goebbels and Hitler of the web by anti-scam watch) out of their current caves in the Alps right into the arms of their judges. It will be an amusing view from the auditorium when the 'secret organization' will squirm whingeing in the dock while soiling their panties as the judge hands out some extra punishment for having committed their crimes while being members of a criminal organization. They have the RICO act for such in the U.S. and similar laws in other countries. | ||
| Ok, there must be something that can be done about these assholes. who's in charge of regulating spamtraps? uceprotect are extortionist!!! | ||
| read about a working recipe how to handle these misfits on the davesplanet dot net website at the topic "the dumbest blacklist on the planet" | ||
| Uceprotect are really like spammers. They give you info about blocking your mail, after that they want your money. Here is no feedback (like spamcop does), no examples.... So they can do anything, and we should pay... for nothing | ||
| What kind of idiots are you? Instead of closing security gaps you are whining about a blacklist? Shame on you. Providers that have a "few customers spamming" are whining too? Looks like they are effective.Excellent I will install their blacklists on all my servers. Thank you for bringing the UCEProtect Project to my attention guys. | ||
| This week, I had to warn a contact of mine, he and a large part of his providers ip block had landed on the UCE blacklist. It took me little time to find out the are using their blacklist to blackmail others to get de listed. So Blackmail it should be called No more, no less. | ||
| "Any ISP using UCEPROTECT deserves to be closed down. Any email blacklist which charges for removal deserves to be closed down. 7 days is a long time for automated removal but I am happy in the fact that I doubt many are using this almost criminal organization to filter their mail since I have never heard of it until now." I totaly agree. UCEPROTECT "Extortion" MUST STOP!!! Now i just redirect all external organizations that cannot receive our e-mails to UCEPROTECT. Do this gays read RFC's??? | ||
| we also get listed regulary - now almost every week. mostly because their spamtrap addresses are used for sending mails and some of our customers can not be persuaded to not use autoresponders - even if the autoresponder just replied once to a single spamtrap we get listed for a week and shall have to pay 50 € for delisting ? i started local blacklisting some of their spamtrap domains, that are used regulary, but this wont help for long. since for now they again (happened some years ago) listed our ASN as DIALUP, as well as blocking legimitate mail because of that, asking the customer to fill a form so he can deliver to the recipient which the customer unfortunately did not understand (a public german website requiring a german user to fill out an english form to unblock his adress (for 3 month anyway, looked like a workaround to have some people getting mail through^^), send again couple of times - Voila! listed again. and yeah some time ago one of our servers were in a blacklist because 7 ip addresses in a /16 of the isp have sent spam. well, we dont care no more. anyone who is using uceprotect for not getting mail seriously gets what he is looking for. no mail. | ||
| Backscatter is evil. There is no valid RFC that dictate a bounce must be send. Read RFC 5321 wich obsoletes RFC 2821. There was a discussion in nanabl and I can't see any failure in Wolfhausen's logic. groups.google.com/group/news.admin.net-abuse.blocklisting/browse_thread/thread/830a10f1664340d6 | ||
| The UCEPROTECT socalled 'secret' spamtraps, are known to (parts of) the spam community. And they actively use these addresses as forged sender addresses. Now image the scenario sending a bayesian poison pill to user "a" and Cc "gibberish b" at the same server. The one for user "a" gets accepted, and the RFC's dictate a bounce needs to be send for the failed message to user "gibberish b". It lands at the "secret" spamtrap, and pow! yet another innocent mailserver gets listed. Next to bouncing mail from 0.0.0.0/0, using UCEPROTECT is the best way to block ham... Deployers of this RBL need their heads examined. | ||
| Disagree that you didn't do anything wrong. Clearly you've never had your email address forged in a spam run and had to deal with thousands of bounces from misconfigured mail servers around the world. Backscatter is a serious problem and is classified as spam by every antispam service I know of. Backscattering mail servers have also been used to *deliver* spam via bounces and in DoS attacks. cotse.com got hit with a >5 day flood of bounces surpassing 10,000 a second at times - do you know for sure that your box wasn't part of this attack, or others?
If you were unfamiliar with the backscatter problem, I can understand why UCEPROTECT's delisting policy would be disturbing. However, I'm surprised that you, as a responsible mail server admin, haven't read discussion of backscatter somewhere before and checked/fixed your config before it became a problem. "Abuser pays or suffers a little inconvenience for a while" is not unreasonable from where I'm sitting. (Editor's notes: I've been backscattered many times, but RFC states that I must bounce undeliverable mail. CBL was kind enough to send me some sample messages that they used to decide my server was backscattering. It was a combination of once in a lifetime events that caused the issue: a corrupted mail queue, RIM's server bouncing mail oddly, our SMTP filter not handling the corrupted headers correctly and stripping out much of the required info, a spam run bogging down our server. It combined to form bounce messages that, according to CBL, looked like virus traffic. After seeing these messages, I was able to correct the problem. I decommissioned the old broken mail server and set up a new box.) |
||
| What would be less cost-efficient:
a) remove all spammers and abusers from your networks immediatelly
b) protect your networks from spammers for eg. by preventing communication on port 25tcp (and allowing 587 submission)
c) sue UCEPROTECT
d) sue every other DNSBL who dares to blacklist your networks
e) sue every recipient who dares to use such DNSBL
? (Editor's notes: Depends on the situation. In my case, we weren't sending spam, only wrongly bouncing some spam which looked like spam. So we didn't do anything wrong. Sadly, there are some big name providers that abuse blocklists and use them as a primary deciding factor in spam protection. With legitimate blocklists, this isn't as big of an issue. But with a sketchy service like UCEPROTECT, it's a problem.) |
||
| UCEPROTECT could at least be Responsible for proper de-listings - ie free of charge - I mean, seriously, how much effort does it take to remove a listing? Point, click, delete... we're talking a few seconds worth of work, and they want 50 Euros for it? NO WAY. UCEPROTECT will not take away my hard earned. UCEPROTECT belongs in the same basket as the Spammers, as far as I am concerned - I wish they would all F*** OFF! | ||
| How dare UCEPROTECT block my legitimate business which does NOT spam. I have never received spams from my ISP -BT connect- but get loads from AOL which has been 'cleared'! Ceared to do what- send spams without blockage? UCEPROTECT has nothing to do with service & everything to do with extortion. And surely there is a European regulatory body for these criminals. | ||
| Users who feel they have been victimized by this company have the unimpeachable and fully legal right to contact the Federal Criminal Police Office of Germany which is in charge of the matter and is legally bound to immediately investigate on behalf of the state: Bundeskriminalamt 65I73 Wiesbaden/Germany phone: +49 6II 55 O fax: +49 6II 55 I2 I4I email: info(at)bka.de It is advised to send a fax. | ||
| What baffles me most is those that actually lookup UCEshitprotect list for spam prevention. Someone needs to setup a counter website to list the ISPs that use UCEshitprotect and pressure them NOT to look it up. | ||
| How can UCEPROTECT be responsible for how people out there are using their blocklists?
Recommendations are described in detail here:
Level 1: www.uceprotect.net/en/index.php?m=3&s=3
Level 2: www.uceprotect.net/en/index.php?m=3&s=4
Level 3: www.uceprotect.net/en/index.php?m=3&s=5
So if people out there are using Level 3 for blocking, that just proofs they are happy with the results and they do not accept providers too lazy to clean up their mess.
Hey UCEPROTECT even tells you how to not get listed:
www.uceprotect.net/en/index.php?m=4&s=0
If you are an ISP, it is your problem if you are too lazy to read and do what is recommended.
If you are an enduser that is impacted by a Level 2 or Level 3 listing then that is your fault, because YOU have chosen your ISP...
If an provider like AOL (hosting many endusers) can stay such clean that they do not get listed at Level 3 then that proofs, every provider which ends up in Level 3 is clearly in the wrong business.
See AOL at UCEPROTECT:
www.uceprotect.net/en/rblcheck.php?asn=1668
Extortion? Scam?
Those claiming that are too stupid to be humans and their ears are too small to be pigs...
Expiration happens automatically therefore it is free of charge.
Manual removals require that extra employed stuff does manual work 24/7 on requests.
Since YOU do not work for UCEPROTECT free of charge (doing the manual removals), you shouldn't complain about the fact also others are not working free of charge for UCEPROTECT.
You still feel extorted?
Use your listed IP to visit the lookup page and you will find a link which is called "I don't like Expressdelistings".
Click it ... and you will no longer get offered expressdelisting of your IP.
Interesting that you had not the balls to click it, but posting a bullshit story about UCEPROTECT instead...
Yeah we at UCEPROTECT have no problem with spammers like you whining about our listings, that is intended by design.
(Editor's notes: I read all your documentation and even emailed you. No reply. I ended up on a few other blacklists because of the problem I mentioned and they were more then happy to provide me with email help and removals free of charge. They even helped me troubleshoot the issue by sending me the emails they used to determine I was sending mail that looked like spam. You guys are crooks. You can't be responsible for how people use your list but duh, what do you think people do with blacklists? Post them on their bedroom wall and pray to them? No, they use them to filter their email.) |
||
| Now everyone please tell me HOW can one poorly connected user, infected with a single virus, prove that an entire ISP is "BAD" ? He is just getting new dynamic IP every time his poor dialup line disconnects after a timeout. So he is likely to use a lot of address space of a single ISP and put it into Level2 and Level3 very fast. But how that proove, that ISP is ignorant of spammers? How that proove that ISP is tolerating viruses and abuse? That only proves bad quality of dialup line some poor user is using, that's it. After 8 to 24 hours that poor user will be blocked by any ISP because of abuse alerts he generates, but before that the entire ISP (all their users!!!) will be blocked for 7 days. uceprotect is a scam, no more. | ||
| This happened to us, too. They claim it will take at least 4 weeks to clear our name. This is complete crap - and while the US congress, makes ruling after ruling, and puts pressure on international groups, they will not even UNDERSTAND that this is simple extortion. I paid. I am an ass, but I HAVE to get my site free and clear. My question to everyone else - who else can you contact to ask for an audit of their practices? | ||
| I think they should be crazy my ISP 32000 IPs blocked because some dialup users sending about 300 spam in 7 days I think they should sending alert before they blacklisting whole of an ASN. I really agree with closing this useless company at all. | ||
| It can be a real pain to be blacklisted, this is for sure. So far though I have noticed very few false positives with uceprotect. At one point I did use at as a primary blocking RBL at the MTA level, it was removed from this role due to a few false positives from Israel though. The ONLY RBL I trust at the MTA level is Spamhaus which has an almost non existent FP rate. I would also discourage outright blocking via uceprotect honestly, but I do use it as part of my scoring system. I have about a half dozen RBLs that are scored along with several white listing RBLs as well. As for the de-listing fee, several RBLs charge a fee for express de-listing. I would agree that seven days is a long time when it comes to email though, I would rather see them automatically de-list in 48 hours or so. Stopping SPAM is a hard job, part of that is ensuring that you follow every rule possible to ensure that you do not get listed even by accident. Make sure you have SPF records, use the DKIM system (it's fairly easy to setup), make sure your DNS is correct. Ensure you have both forward and reverse resolving the same: mail.example.com ¨ xxx.xxx.xxx.xxx ¨ mail.example.com While I have NEVER had my IPs listed in any RBL I have a cron job setup that checks a dozen or so of the major ones every hour to ensure none of my customers is listed. If they get listed I can start the removal process as quickly as possible | ||
| I totally agree. UCEPROTECT is a scam outfit. I work for an ISP, and we have a few customers that are SPAMMING, but UCEPROTECT doesnt blacklist the offensive IPs, they blackhole the whole netblock or the AS that we use to communicate w/other networks. I HATE UCEPROTECT. THEY ARE SCAMMERS AND SHOULD BE SHUT DOWN. They don't communicate back to us, they dont bother to send email to our abuse email, which can be found looking up our IPs via ARIN.net. | ||
Do you agree? Disagree? Feel free to leave a comment by filling out the form at the bottom of the page. All comments are sent to me for approval, so hostile and pointless comments will be discarded. I will not discard comments that disagree with me, and I will certainly not edit comments. The only reason I am screening them is to keep the goof-balls under control. Email addresses will be hidden. If you wish to remain anonymous, simply enter "anonymous" for both your email and name.
Back To Thoughts Page | Mail Me | Search |