No Grasp of Your Reality

Andrew Bain is a Spammer

Many of you have probably been receiving email from a Mr. Andrew Bain. Whether or not I agree with his theological views, his methods of spamming his recipients is clearly undesireable.

If my research is correct, Mr. Bain’s ISP is a company called “The Planet” out of Texas. I’ve posted the research at the bottom of this post, but if any of you recipients would like to comment to his ISP about Mr. Bain’s email practices, you can reach them at “abuse@theplanet.com”

UPDATE: It looks as though “The Planet” is reselling bandwidth to the real host of Mr. Bain… Quadra Hosting. This makes sense, as Quadra is an Australian Company, and Mr. Bain is in Sydney. Anyway, they have their own contact page where you can report abuse.

Here is a dig on Mr. Bain’s domain name, godisnoliar.com.


talbrech@gandolf ~ $ dig www.godnoliar.com

;; global options: printcmd
;; Got answer:
;; ->>HEADER< <- opcode: QUERY, status: NOERROR, id: 34854 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.godnoliar.com. IN A ;; ANSWER SECTION: www.godnoliar.com. 86306 IN A 69.93.171.234 ;; Query time: 3 msec ;; SERVER: 192.168.2.10#53(192.168.2.10) ;; WHEN: Fri Jun 3 13:40:55 2005 ;; MSG SIZE rcvd: 51

Following is a truncated traceroute from my box to Mr. Bain's webserver IP address:


talbrech@gandolf ~ $ tracepath www.godnoliar.com
1: 192.168.2.5 (192.168.2.5) 0.197ms pmtu 1500
1: smoothwall (192.168.2.10) 5.169ms
2: no reply
3: ge-2-1-ur02.coatesville.pa.panjde.comcast.net (68.86.216.145) 15.193ms
4: te-9-1-ur01.coatesville.pa.panjde.comcast.net (68.86.209.73) asymm 3 15.521ms
5: po80-ar01.coatesville.pa.panjde.comcast.net (68.86.209.69) asymm 4 15.377ms
6: po90-ar01.wallingford.pa.panjde.comcast.net (68.86.208.37) asymm 5 15.100ms
7: po90-ar01.401nbroadst.pa.panjde.comcast.net (68.86.208.29) asymm 6 17.642ms
8: 68.86.211.14 (68.86.211.14) asymm 9 19.549ms
9: 12.119.53.49 (12.119.53.49) asymm 12 20.230ms
10: tbr2-p012401.phlpa.ip.att.net (12.123.137.49) asymm 12 23.643ms
11: tbr1-cl9.wswdc.ip.att.net (12.122.2.85) asymm 13 26.330ms
12: tbr1-cl4.sl9mo.ip.att.net (12.122.10.30) asymm 14 42.447ms
13: tbr2-cl2.sl9mo.ip.att.net (12.122.9.142) asymm 14 45.615ms
14: tbr2-cl6.dlstx.ip.att.net (12.122.10.90) asymm 15 57.952ms
15: gar1-p370.dlrtx.ip.att.net (12.123.196.97) 54.542ms
16: 12.119.136.14 (12.119.136.14) asymm 17 55.542ms
17: dist-vlan32.dsr3-2.dllstx3.theplanet.com (70.85.127.62) 54.908ms
18: dist-vlan21.dsr1-1.dllstx2.theplanet.com (70.85.127.67) 54.544ms
19: car2-1-v2.dllstx2.theplanet.com (12.96.160.45) 58.150ms
20: win2.sansolo.com (69.93.171.234) 60.701ms reached

Also one to his mailserver IP address:


talbrech@gandolf ~ $ tracepath 67.19.160.66
1: 192.168.2.5 (192.168.2.5) 0.231ms pmtu 1500
1: smoothwall (192.168.2.10) 8.461ms
2: no reply
3: ge-2-1-ur02.coatesville.pa.panjde.comcast.net (68.86.216.145) 119.440ms
4: te-9-1-ur01.coatesville.pa.panjde.comcast.net (68.86.209.73) asymm 3 23.044ms
5: po80-ar01.coatesville.pa.panjde.comcast.net (68.86.209.69) asymm 4 18.351ms
6: po90-ar01.wallingford.pa.panjde.comcast.net (68.86.208.37) asymm 5 22.968ms
7: po90-ar01.401nbroadst.pa.panjde.comcast.net (68.86.208.29) asymm 6 21.824ms
8: 68.86.211.14 (68.86.211.14) asymm 9 27.446ms
9: 12.119.53.49 (12.119.53.49) asymm 12 27.166ms
10: tbr2-p012401.phlpa.ip.att.net (12.123.137.49) asymm 12 26.977ms
11: tbr1-cl9.wswdc.ip.att.net (12.122.2.85) asymm 13 27.575ms
12: tbr1-cl4.sl9mo.ip.att.net (12.122.10.30) asymm 14 48.754ms
13: tbr2-cl2.sl9mo.ip.att.net (12.122.9.142) asymm 14 46.756ms
14: tbr2-cl6.dlstx.ip.att.net (12.122.10.90) asymm 15 60.862ms
15: gar1-p370.dlrtx.ip.att.net (12.123.196.97) 54.319ms
16: 12.119.136.14 (12.119.136.14) asymm 17 56.154ms
17: dist-vlan31.dsr3-1.dllstx3.theplanet.com (70.85.127.29) 56.847ms
18: dist-vlan-42.dsr2-2.dllstx4.theplanet.com (70.85.127.91) 77.597ms
19: gig1-0-1.sm-car6-11.dllstx4.theplanet.com (67.19.255.42) 79.817ms
20: mail2.sansolo.com (67.19.160.66) 60.453ms reached

Tom Albrecht

4 responses to “Andrew Bain is a Spammer”

  1. The whois site provides the following information:

    [whois.enom.com]

    Registration Service Provided By: Net Quadrant
    Contact: domains@netquadrant.com
    Visit: http://www.quadrahosting.com.au/contact.html

    Domain name: godnoliar.com

    Registrant Contact:

    Andrew C. Bain (andrewchristopherbain@bigpond.com)
    0404045465
    Fax:
    PO BOX 192
    LANE COVE, NSW 1595
    AU

    Administrative Contact:

    Andrew C. Bain (andrewchristopherbain@bigpond.com)
    0404045465
    Fax:
    PO BOX 192
    LANE COVE, NSW 1595
    AU

    Technical Contact:
    Quadra Hosting Australia
    Systems Administrator (administrator@quadrahosting.com.au)
    +61.1300766288
    Fax: none
    ABN: 25 105 430 644
    PO BOX 10475
    Southport BC, NA 4215
    AU

    Billing Contact:
    Quadra Hosting Australia
    Systems Administrator (administrator@quadrahosting.com.au)
    +61.1300766288
    Fax: none
    ABN: 25 105 430 644
    PO BOX 10475
    Southport BC, NA 4215
    AU

    Status: Locked

    Name Servers:
    ns3.quadrahosting.com
    ns4.quadrahosting.com
    ns5.quadrahosting.com

    Creation date: 26 Feb 2005 00:07:05
    Expiration date: 26 Feb 2006 00:07:05

  3. Mr Andrew Bain does not seem to be a “professional” spammer. He simply did a CC to various people, not trying to disguise or cover up what he is doing.

    We have informed Mr Andrew Bain about this as spamming clearly violates Quadra Hosting’s acceptable use policy. He has then stated that he will stop sending unsolicited emails.

    For now we take this as innocent ignorance, and not deliberate use of our service to send out spam. However, if we receive any further, substantiated complaints about this particular customer, we will suspend his account immediately.

    For a copy of our acceptable use policy, please see http://www.quadrahosting.com.au/policies/aup.html

    We thank you for those who have reported this to us directly.

  4. I really appreciate Quadra Hosting looking into this issue. It’s good to know that there are companies out there that are taking responsibility.

    I’m also glad they didn’t take the heavy-handed approach and cut off Mr. Bain. I hope their warning will be sufficient.