Editorial Atlantida allows their servers to be used by spammers and e-mail bombers repeatedly, not answering on complaints! [200.68.208.0 - 200.68.208.255]: Access denied! === My 1st complaint === Message-Id: <200201141757.g0EHvCv01636@mail.dolphinwave.org> Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse-2002@dolphinwave.org Organization: Private person To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, merelles@metrored.com.ar, abuse@metrored.com.ar, postmaster@metrored.com.ar, laura@virtucomnetworks.com, ivitor@tonews.com, postmaster@towebs.com, postmaster@dnspoint.net, dns@itcdeltacom.com, abuse-noverbose@uu.net, rwdavis@gilesent.com, postmaster@deltacom.net, msoffredi@atlantida.com.ar, postmaster@atlantida.com.ar, postmaster@n2bb.com Subject: [email] Spam flood (Usenet harvest)! [Fwd: =?iso-8859-1?q?Aqu=ED?= estamos!!!] Date: Mon, 14 Jan 2002 19:57:11 +0200 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-PGP-key: 0xAAE2A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Spam on my e-mail address, harvested from the news.admin.net-abuse.sightings Usenet forum, and used for spam complaints only! More delivery attempts on my other Usenet-only e-mail addresses were logged by my mailserver (below). Please, terminate spammer's accounts as soon as possible! Thanks! ======= Spammer: [200.68.208.91] Editorial Atlantida IP block [200.68.208.0 - 200.68.208.255]. Abused open relays: =================== 66-0-11-210.deltacom.net [66.0.11.210] 66-0-1-242.deltacom.net [66.0.1.242] 66-0-110-116.deltacom.net [66.0.110.116] mail.n2bb.com [66.0.13.10] All are in the ITC^Deltacom IP block [66.0.0.0 - 66.0.111.255]. Mail from: Produccion@elcarajo.net Collects replies to: webmaster@elcarajo.net Spamvertised web page: http://www.elcarajo.net [200.49.75.24] (host-024.towebs.com) Registrant: Claudio Martinez Dr. Luis Belaustegui 636 Capital Federal, Buenos Aires 1416 AR Domain Name: ELCARAJO.NET Sponsoring Reseller; for Technical Support with respect to this domain contact: ToWebs Hosting / Virtucom Networks SA, laura@virtucomnetworks.com 5411-4393-0999 http://www.towebs.com Administrative Contact: Martinez, Claudio lachi@uol.com.ar Dr. Luis Belaustegui 636 Capital Federal, Buenos Aires 1416 AR 4754-2727 Technical Contact: Jury, Laura laura@virtucomnetworks.com Viamonte 454 5° of. 9 Capital Federal, Buenos Aires 1053 AR 5411-4311-0097 Billing Contact: Martinez, Claudio lachi@uol.com.ar Dr. Luis Belaustegui 636 Capital Federal, Buenos Aires 1416 AR 4754-2727 Record last updated on 03-Dec-2001. Record expires on 03-Apr-2002. Record Created on 03-Apr-2001. Domain servers in listed order: NS1.DNSPOINT.NET 200.49.75.3 NS2.DNSPOINT.NET 200.49.75.4 NS3.DNSPOINT.NET 200.49.75.9 MetroRED Telecomunicaciones IP block [200.49.64.0 - 200.49.95.255]. Upstream: MetroRED (plaR02-npcR06-02373.metrored.net.ar). Nameserver: DNSPOINT.NET ---------- Forwarded Message ---------- Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHAHb22022 for ; Sun, 13 Jan 2002 19:10:25 +0200 Message-Id: <200201131710.g0DHAHb22022@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD69K; Sun, 13 Jan 2002 12:09:54 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:11:39 -0300 Status: R X-Status: N Perdon por la demora... pero estabamos de mudanza, asi que ya estamos otra vez conectados... Ahora para algunos que de seguro estaban esperando algo nuevo... Si para ustedes Nuestros integrantes. Nueva Boquita Mensual http://www.elcarajo.net/boquita_mensual/inicio.htm Nuevo Potro del Mes http://www.elcarajo.net/potro_mensual/inicio.htm Algunas Boquitas recomendadas... http://www.elcarajo.net/girls/frutamadura/delfina/delfina.htm http://www.elcarajo.net/girls/signos/piscis/claudia/claudia.htm Boquitas Pintas Nuevas... http://www.elcarajo.net/girls/sin_rostro/liz/liz.htm http://www.elcarajo.net/girls/sin_rostro/celeste/celeste.htm http://www.elcarajo.net/girls/sin_rostro/aldana/aldana.htm a estas Masajistas las Recomendaron algunos usuarios... Esperamos mas recomendaciones. http://www.elcarajo.net/especiales/masajistas/gisella/gisella.htm http://www.elcarajo.net/especiales/masajistas/celeste/celeste.htm http://www.elcarajo.net/especiales/masajista01/masajista.htm (Zona CaraHOT) http://www.elcarajo.net/especiales/misamishimada/mizami.htm y si siempre estan, nuestras Chicas Traviesas. http://www.elcarajo.net/especiales/cris/cris.htm http://www.elcarajo.net/especiales/traviesas/ivana/ivana.htm http://www.elcarajo.net/especiales/traviesas/byby/byby.htm No se olviden de Visitar El CaraHOT que cada vez esta mas a full... ahora con un nuevo video de 3.5Mb de una Rubiecita que se banca todo... y algunas famosas... http://www.elcarajo.net/logito/logito.html Que lo disfruten y Buen Viaje...!!! Lachi webmaster@elcarajo.net ICQ Nº 75972208 ------------------------------------------------------- ======= OTHER SPAMMING ATTEMPTS (GMT+0200) ======= Jan 13 19:29:47 orca sendmail[22089]: g0DHTlb22089: ... User unknown Jan 13 19:29:48 orca sendmail[22089]: g0DHTlb22089: from=, size=2198, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-1-242.deltacom.net [66.0.1.242] Jan 13 19:30:14 orca sendmail[22095]: g0DHUEb22095: ... User unknown Jan 13 19:30:15 orca sendmail[22095]: g0DHUEb22095: from=, size=2207, class=0, nrcpts=0, bodytype=8BITMIME, proto=ESMTP, daemon=Daemon0, relay=66-0-110-116.deltacom.net [66.0.110.116] Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: ... User unknown Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: from=, size=2187, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-210.deltacom.net [66.0.11.210] Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: ... User unknown Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=mail.n2bb.com [66.0.13.10] === My 2nd complaint === Message-Id: <200201141803.g0EI3Bv01703@mail.dolphinwave.org> Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse-2002@dolphinwave.org Organization: Private person To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, merelles@metrored.com.ar, abuse@metrored.com.ar, postmaster@metrored.com.ar, laura@virtucomnetworks.com, ivitor@tonews.com, postmaster@towebs.com, postmaster@dnspoint.net, dns@itcdeltacom.com, abuse-noverbose@uu.net, rwdavis@gilesent.com, postmaster@deltacom.net, msoffredi@atlantida.com.ar, postmaster@atlantida.com.ar Subject: [email] Spam flood (Usenet harvest)! [Fwd: =?iso-8859-1?q?Aqu=ED?= estamos!!!] Date: Mon, 14 Jan 2002 20:03:10 +0200 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-PGP-key: 0xAAE2A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Procmail: Yes X-Loop: dev.null@dolphinwave.org More the same spam from the elcarajo.net spammers! Now it's hit my e-mail address, exposed to the Usenet only ONCE, in news.admin.net-abuse.sightings forum, and was harvested from there! Spammer: [200.68.208.91] Editorial Atlantida IP block [200.68.208.0 - 200.68.208.255]. Abused open relay: 66-0-16-52.deltacom.net [66.0.16.52] Mail from: Produccion@elcarajo.net Collects replies to: webmaster@elcarajo.net Spamvertised web page: http://www.elcarajo.net [200.49.75.24] (host-024.towebs.com) Registrant: Claudio Martinez Dr. Luis Belaustegui 636 Capital Federal, Buenos Aires 1416 AR Domain Name: ELCARAJO.NET Sponsoring Reseller; for Technical Support with respect to this domain contact: ToWebs Hosting / Virtucom Networks SA, laura@virtucomnetworks.com 5411-4393-0999 http://www.towebs.com Administrative Contact: Martinez, Claudio lachi@uol.com.ar Dr. Luis Belaustegui 636 Capital Federal, Buenos Aires 1416 AR 4754-2727 Technical Contact: Jury, Laura laura@virtucomnetworks.com Viamonte 454 5° of. 9 Capital Federal, Buenos Aires 1053 AR 5411-4311-0097 Billing Contact: Martinez, Claudio lachi@uol.com.ar Dr. Luis Belaustegui 636 Capital Federal, Buenos Aires 1416 AR 4754-2727 Record last updated on 03-Dec-2001. Record expires on 03-Apr-2002. Record Created on 03-Apr-2001. Domain servers in listed order: NS1.DNSPOINT.NET 200.49.75.3 NS2.DNSPOINT.NET 200.49.75.4 NS3.DNSPOINT.NET 200.49.75.9 MetroRED Telecomunicaciones IP block [200.49.64.0 - 200.49.95.255]. Upstream: MetroRED (plaR02-npcR06-02373.metrored.net.ar). Nameserver: DNSPOINT.NET ---------- Forwarded Message ---------- Received: from TMTMAIL.themoneytreeinc.com (66-0-16-52.deltacom.net [66.0.16.52]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHPHb22061 for <###>; Sun, 13 Jan 2002 19:25:18 +0200 Message-Id: <200201131725.g0DHPHb22061@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by TMTMAIL.themoneytreeinc.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id CJQ80AAR; Sun, 13 Jan 2002 12:13:42 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:26:29 -0300 Status: R X-Status: N Perdon por la demora... pero estabamos de mudanza, asi que ya estamos otra vez conectados... Ahora para algunos que de seguro estaban esperando algo nuevo... Si para ustedes Nuestros integrantes. Nueva Boquita Mensual http://www.elcarajo.net/boquita_mensual/inicio.htm Nuevo Potro del Mes http://www.elcarajo.net/potro_mensual/inicio.htm Algunas Boquitas recomendadas... http://www.elcarajo.net/girls/frutamadura/delfina/delfina.htm http://www.elcarajo.net/girls/signos/piscis/claudia/claudia.htm Boquitas Pintas Nuevas... http://www.elcarajo.net/girls/sin_rostro/liz/liz.htm http://www.elcarajo.net/girls/sin_rostro/celeste/celeste.htm http://www.elcarajo.net/girls/sin_rostro/aldana/aldana.htm a estas Masajistas las Recomendaron algunos usuarios... Esperamos mas recomendaciones. http://www.elcarajo.net/especiales/masajistas/gisella/gisella.htm http://www.elcarajo.net/especiales/masajistas/celeste/celeste.htm http://www.elcarajo.net/especiales/masajista01/masajista.htm (Zona CaraHOT) http://www.elcarajo.net/especiales/misamishimada/mizami.htm y si siempre estan, nuestras Chicas Traviesas. http://www.elcarajo.net/especiales/cris/cris.htm http://www.elcarajo.net/especiales/traviesas/ivana/ivana.htm http://www.elcarajo.net/especiales/traviesas/byby/byby.htm No se olviden de Visitar El CaraHOT que cada vez esta mas a full... ahora con un nuevo video de 3.5Mb de una Rubiecita que se banca todo... y algunas famosas... http://www.elcarajo.net/logito/logito.html Que lo disfruten y Buen Viaje...!!! Lachi webmaster@elcarajo.net ICQ Nº 75972208 ------------------------------------------------------- ======= PREVIOUS SPAM HEADERS ======= Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHAHb22022 for ; Sun, 13 Jan 2002 19:10:25 +0200 Message-Id: <200201131710.g0DHAHb22022@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD69K; Sun, 13 Jan 2002 12:09:54 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:11:39 -0300 Status: R X-Status: N ======= OTHER SPAMMING ATTEMPTS (GMT+0200) ======= Jan 13 19:29:47 orca sendmail[22089]: g0DHTlb22089: ... User unknown Jan 13 19:29:48 orca sendmail[22089]: g0DHTlb22089: from=, size=2198, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-1-242.deltacom.net [66.0.1.242] Jan 13 19:30:14 orca sendmail[22095]: g0DHUEb22095: ... User unknown Jan 13 19:30:15 orca sendmail[22095]: g0DHUEb22095: from=, size=2207, class=0, nrcpts=0, bodytype=8BITMIME, proto=ESMTP, daemon=Daemon0, relay=66-0-110-116.deltacom.net [66.0.110.116] Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: ... User unknown Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: from=, size=2187, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-210.deltacom.net [66.0.11.210] Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: ... User unknown Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=mail.n2bb.com [66.0.13.10] === Now there was a spam-flood. My 3rd complaint === Message-Id: <200201150133.g0F1XNv04951@mail.dolphinwave.org> Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse-2002@dolphinwave.org Organization: Private person Subject: [email] Spam flood, repeating spammer! [Fwd: Re: =?iso-8859-1?q?Env=EDeme?= =?iso-8859-1?q?=20Informaci=F3n=5D?= Date: Tue, 15 Jan 2002 03:33:24 +0200 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-PGP-key: 0xAAE2A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, g_caivano@crm.com.ar, postmaster@movi.com.ar, msoffredi@atlantida.com.ar, postmaster@atlantida.com.ar, dns@itcdeltacom.com, abuse-noverbose@uu.net, rwdavis@gilesent.com, postmaster@deltacom.net, Yahoo Abuse , abuse@mail.com, postmaster@telcel.net.ve, abuse@telcel.net.ve, abuse@geocities.com X-Procmail: Yes X-Loop: dev.null@dolphinwave.org Spam flood from the repeating spammer on my e-mail addresses, used for spam complaints only, and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please, terminate spammer's accounts as soon as possible! Thanks! ======= ATTN: deltacom.net! If you wouldn't close your open relays that are spread all around your IP space, your whole 66.0.0.0/16 IP range will be blocked from accessing my mailservers ever again! Spammer: [200.68.208.171] Editorial Atlantida IP block [200.68.208.0 - 200.68.208.255] which is in the Movicom BellSouth IP range [200.68.192.0 - 200.68.223.255]. Abused open relay (yet another one in deltacom.net IP space): 66-0-45-130.deltacom.net [66.0.45.130] Other deltacom.net open relays, abused by the same spammer in the last day: 66-0-11-210.deltacom.net [66.0.11.210] 66-0-1-242.deltacom.net [66.0.1.242] 66-0-110-116.deltacom.net [66.0.110.116] 66-0-16-52.deltacom.net [66.0.16.52] mail.n2bb.com [66.0.13.10] 66-0-67-74.deltacom.net [66.0.67.74] 66-0-26-10.deltacom.net [66.0.26.10] 66-0-11-61.deltacom.net [66.0.11.61] Mail from: hoegerdevenez@yahoo.com Collects replies to: hoeger@iname.com, hoeger@telcel.net.ve Spamvertised web page: http://www.geocities.com/hoeger.rm/HOEGER.html ---------- Forwarded Message ---------- Received: from gateway.precision-int.com (66-0-45-130.deltacom.net [66.0.45.130]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0EKaxv03183 for <###>; Mon, 14 Jan 2002 22:37:00 +0200 Message-Id: <200201142037.g0EKaxv03183@mail.dolphinwave.org> Received: from 200.68.208.171 by gateway.precision-int.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.0.1460.8) id CH1YHCZA; Mon, 14 Jan 2002 14:36:33 -0600 From: HOEGER To: "Hoeger"<> Subject: Re: Envíeme Información X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 14 Jan 2002 17:38:30 -0300 Status: R X-Status: N HOEGER de Venezuela C.A. Nuestros Servicios... Diseño, elaboración y reproducción de material publicitario, didáctico, divulgativo y de entretenimiento. Diseño, instalación, venta y mantenimiento de sistemas y redes informáticas, tanto sistemas integrales como de cualquiera de sus partes; propios o de terceros. Elaboración, compilación y reproducción de creaciones intelectuales o autorizadas, en medios análogos o digitales, de Datos y/o Audio (Discos Compactos, Cassettes y otros medios de transporte y almacenamiento). Recopilación, análisis y procesamiento de datos e información, así como la implementación de los procesos, instrumentos y mecanismos que implique. Prestación de servicios y asesoría; control de servicios a instituciones y empresas; Servicios de Fax y Fotocopiadora. Dictado de Cursos Educativos Formales y Especiales relacionados con la computación y cualesquiera otra actividad de lícito comercio afín o conexo al objeto principal. http://www.geocities.com/hoeger.rm/HOEGER.html hoeger@iname.com o hoeger@telcel.net.ve ------------------------------------------------------- ======= PREVIOUS SPAMS HEADERS ======= Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHAHb22022 for ; Sun, 13 Jan 2002 19:10:25 +0200 Message-Id: <200201131710.g0DHAHb22022@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD69K; Sun, 13 Jan 2002 12:09:54 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:11:39 -0300 Status: R X-Status: N Received: from TMTMAIL.themoneytreeinc.com (66-0-16-52.deltacom.net [66.0.16.52]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHPHb22061 for <###>; Sun, 13 Jan 2002 19:25:18 +0200 Message-Id: <200201131725.g0DHPHb22061@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by TMTMAIL.themoneytreeinc.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id CJQ80AAR; Sun, 13 Jan 2002 12:13:42 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:26:29 -0300 Status: R X-Status: N ======= OTHER SPAMMING ATTEMPTS (GMT+0200) ======= Jan 13 19:29:47 orca sendmail[22089]: g0DHTlb22089: ... User unknown Jan 13 19:29:48 orca sendmail[22089]: g0DHTlb22089: from=, size=2198, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-1-242.deltacom.net [66.0.1.242] Jan 13 19:30:14 orca sendmail[22095]: g0DHUEb22095: ... User unknown Jan 13 19:30:15 orca sendmail[22095]: g0DHUEb22095: from=, size=2207, class=0, nrcpts=0, bodytype=8BITMIME, proto=ESMTP, daemon=Daemon0, relay=66-0-110-116.deltacom.net [66.0.110.116] Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: ... User unknown Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: from=, size=2187, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-210.deltacom.net [66.0.11.210] Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: ... User unknown Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=mail.n2bb.com [66.0.13.10] === My 4th complains === Message-Id: <200201150140.g0F1e8v05028@mail.dolphinwave.org> Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse-2002@dolphinwave.org Organization: Private person To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, g_caivano@crm.com.ar, postmaster@movi.com.ar, msoffredi@atlantida.com.ar, postmaster@atlantida.com.ar, dns@itcdeltacom.com, abuse-noverbose@uu.net, rwdavis@gilesent.com, postmaster@deltacom.net, Yahoo Abuse , abuse@mail.com, postmaster@telcel.net.ve, abuse@telcel.net.ve, abuse@geocities.com Subject: [email] Spam flood, repeating spammer! [Fwd: Re: =?iso-8859-1?q?Env=EDeme?= =?iso-8859-1?q?=20Informaci=F3n=5D?= Date: Tue, 15 Jan 2002 03:40:10 +0200 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-PGP-key: 0xAAE2A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Procmail: Yes X-Loop: dev.null@dolphinwave.org Spam flood from the repeating spammer on my e-mail addresses, used for spam complaints only, and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please, terminate spammer's accounts as soon as possible! Thanks! ======= ATTN: deltacom.net! If you wouldn't close your open relays that are spread all around your IP space, your whole 66.0.0.0/16 IP range will be blocked from accessing my mailservers ever again! Spammer: [200.68.208.171] Editorial Atlantida IP block [200.68.208.0 - 200.68.208.255] which is in the Movicom BellSouth IP range [200.68.192.0 - 200.68.223.255]. Abused open relay (yet another one in deltacom.net IP space): 66-0-11-210.deltacom.net [66.0.11.210] Other deltacom.net open relays, abused by the same spammer in the last day: 66-0-11-210.deltacom.net [66.0.11.210] 66-0-1-242.deltacom.net [66.0.1.242] 66-0-110-116.deltacom.net [66.0.110.116] 66-0-16-52.deltacom.net [66.0.16.52] mail.n2bb.com [66.0.13.10] 66-0-67-74.deltacom.net [66.0.67.74] 66-0-26-10.deltacom.net [66.0.26.10] 66-0-11-61.deltacom.net [66.0.11.61] 66-0-41-162.deltacom.net [66.0.41.162] Mail from: hoegerdevenez@yahoo.com Collects replies to: hoeger@iname.com, hoeger@telcel.net.ve Spamvertised web page: http://www.geocities.com/hoeger.rm/HOEGER.html ---------- Forwarded Message ---------- Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0EKm1v03256 for ; Mon, 14 Jan 2002 22:48:03 +0200 Message-Id: <200201142048.g0EKm1v03256@mail.dolphinwave.org> Received: from ku (200.68.208.171 [200.68.208.171]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD82X; Mon, 14 Jan 2002 15:47:45 -0500 From: HOEGER To: "Hoeger"<> Subject: Re: Envíeme Información X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 14 Jan 2002 17:49:41 -0300 Status: R X-Status: N HOEGER de Venezuela C.A. Nuestros Servicios... Diseño, elaboración y reproducción de material publicitario, didáctico, divulgativo y de entretenimiento. Diseño, instalación, venta y mantenimiento de sistemas y redes informáticas, tanto sistemas integrales como de cualquiera de sus partes; propios o de terceros. Elaboración, compilación y reproducción de creaciones intelectuales o autorizadas, en medios análogos o digitales, de Datos y/o Audio (Discos Compactos, Cassettes y otros medios de transporte y almacenamiento). Recopilación, análisis y procesamiento de datos e información, así como la implementación de los procesos, instrumentos y mecanismos que implique. Prestación de servicios y asesoría; control de servicios a instituciones y empresas; Servicios de Fax y Fotocopiadora. Dictado de Cursos Educativos Formales y Especiales relacionados con la computación y cualesquiera otra actividad de lícito comercio afín o conexo al objeto principal. http://www.geocities.com/hoeger.rm/HOEGER.html hoeger@iname.com o hoeger@telcel.net.ve ------------------------------------------------------- ======= PREVIOUS SPAMS HEADERS ======= Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHAHb22022 for ; Sun, 13 Jan 2002 19:10:25 +0200 Message-Id: <200201131710.g0DHAHb22022@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD69K; Sun, 13 Jan 2002 12:09:54 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:11:39 -0300 Status: R X-Status: N Received: from TMTMAIL.themoneytreeinc.com (66-0-16-52.deltacom.net [66.0.16.52]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHPHb22061 for <###>; Sun, 13 Jan 2002 19:25:18 +0200 Message-Id: <200201131725.g0DHPHb22061@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by TMTMAIL.themoneytreeinc.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id CJQ80AAR; Sun, 13 Jan 2002 12:13:42 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:26:29 -0300 Status: R X-Status: N Received: from gateway.precision-int.com (66-0-45-130.deltacom.net [66.0.45.130]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0EKaxv03183 for <###>; Mon, 14 Jan 2002 22:37:00 +0200 Message-Id: <200201142037.g0EKaxv03183@mail.dolphinwave.org> Received: from 200.68.208.171 by gateway.precision-int.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.0.1460.8) id CH1YHCZA; Mon, 14 Jan 2002 14:36:33 -0600 From: HOEGER To: "Hoeger"<> Subject: Re: Envíeme Información X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 14 Jan 2002 17:38:30 -0300 Status: R X-Status: N ======= OTHER SPAMMING ATTEMPTS (GMT+0200) ======= Jan 13 19:29:47 orca sendmail[22089]: g0DHTlb22089: ... User unknown Jan 13 19:29:48 orca sendmail[22089]: g0DHTlb22089: from=, size=2198, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-1-242.deltacom.net [66.0.1.242] Jan 13 19:30:14 orca sendmail[22095]: g0DHUEb22095: ... User unknown Jan 13 19:30:15 orca sendmail[22095]: g0DHUEb22095: from=, size=2207, class=0, nrcpts=0, bodytype=8BITMIME, proto=ESMTP, daemon=Daemon0, relay=66-0-110-116.deltacom.net [66.0.110.116] Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: ... User unknown Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: from=, size=2187, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-210.deltacom.net [66.0.11.210] Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: ... User unknown Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=mail.n2bb.com [66.0.13.10] Jan 14 22:41:13 orca sendmail[3249]: g0EKfBv03249: ... User unknown Jan 14 22:41:14 orca sendmail[3249]: g0EKfBv03249: from=, size=1499, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-61.deltacom.net [66.0.11.61] Jan 14 22:48:26 orca sendmail[3274]: g0EKmPv03274: ... User unknown Jan 14 22:48:28 orca sendmail[3274]: g0EKmPv03274: from=, size=1515, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-67-74.deltacom.net [66.0.67.74] Jan 14 22:53:06 orca sendmail[3315]: g0EKr1v03315: ... User unknown Jan 14 22:53:08 orca sendmail[3315]: g0EKr1v03315: from=, size=1499, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-61.deltacom.net [66.0.11.61] Jan 14 22:55:50 orca sendmail[3368]: g0EKtnv03368: ... User unknown Jan 14 22:55:52 orca sendmail[3368]: g0EKtnv03368: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-41-162.deltacom.net [66.0.41.162] === My 5th complaint === Message-Id: <200201150142.g0F1gvv05053@mail.dolphinwave.org> Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse-2002@dolphinwave.org Organization: Private person To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, g_caivano@crm.com.ar, postmaster@movi.com.ar, msoffredi@atlantida.com.ar, postmaster@atlantida.com.ar, dns@itcdeltacom.com, abuse-noverbose@uu.net, rwdavis@gilesent.com, postmaster@deltacom.net, Yahoo Abuse , abuse@mail.com, postmaster@telcel.net.ve, abuse@telcel.net.ve, abuse@geocities.com Subject: [email] Spam flood, repeating spammer (deltacom.net open relays)! [Fwd: Re: =?iso-8859-1?q?Env=EDeme?= =?iso-8859-1?q?=20Informaci=F3n=5D?= Date: Tue, 15 Jan 2002 03:42:58 +0200 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-PGP-key: 0xAAE2A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Procmail: Yes X-Loop: dev.null@dolphinwave.org Spam flood from the repeating spammer on my e-mail addresses, used for spam complaints only, and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please, terminate spammer's accounts as soon as possible! Thanks! ======= ATTN: deltacom.net! If you wouldn't close your open relays that are spread all around your IP space, your whole 66.0.0.0/16 IP range will be blocked from accessing my mailservers ever again! Spammer: [200.68.208.171] Editorial Atlantida IP block [200.68.208.0 - 200.68.208.255] which is in the Movicom BellSouth IP range [200.68.192.0 - 200.68.223.255]. Abused open relay (yet another one in deltacom.net IP space): 66-0-11-210.deltacom.net [66.0.11.210] Other deltacom.net open relays, abused by the same spammer in the last day: 66-0-11-210.deltacom.net [66.0.11.210] 66-0-45-130.deltacom.net [66.0.45.130] 66-0-1-242.deltacom.net [66.0.1.242] 66-0-110-116.deltacom.net [66.0.110.116] 66-0-16-52.deltacom.net [66.0.16.52] mail.n2bb.com [66.0.13.10] 66-0-67-74.deltacom.net [66.0.67.74] 66-0-26-10.deltacom.net [66.0.26.10] 66-0-11-61.deltacom.net [66.0.11.61] 66-0-41-162.deltacom.net [66.0.41.162] Mail from: hoegerdevenez@yahoo.com Collects replies to: hoeger@iname.com, hoeger@telcel.net.ve Spamvertised web page: http://www.geocities.com/hoeger.rm/HOEGER.html ---------- Forwarded Message ---------- Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0EKqVv03295 for ; Mon, 14 Jan 2002 22:52:32 +0200 Message-Id: <200201142052.g0EKqVv03295@mail.dolphinwave.org> Received: from ku (200.68.208.171 [200.68.208.171]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD8JG; Mon, 14 Jan 2002 15:52:17 -0500 From: HOEGER To: "Hoeger"<> Subject: Re: Envíeme Información X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 14 Jan 2002 17:54:13 -0300 Status: R X-Status: N HOEGER de Venezuela C.A. Nuestros Servicios... Diseño, elaboración y reproducción de material publicitario, didáctico, divulgativo y de entretenimiento. Diseño, instalación, venta y mantenimiento de sistemas y redes informáticas, tanto sistemas integrales como de cualquiera de sus partes; propios o de terceros. Elaboración, compilación y reproducción de creaciones intelectuales o autorizadas, en medios análogos o digitales, de Datos y/o Audio (Discos Compactos, Cassettes y otros medios de transporte y almacenamiento). Recopilación, análisis y procesamiento de datos e información, así como la implementación de los procesos, instrumentos y mecanismos que implique. Prestación de servicios y asesoría; control de servicios a instituciones y empresas; Servicios de Fax y Fotocopiadora. Dictado de Cursos Educativos Formales y Especiales relacionados con la computación y cualesquiera otra actividad de lícito comercio afín o conexo al objeto principal. http://www.geocities.com/hoeger.rm/HOEGER.html hoeger@iname.com o hoeger@telcel.net.ve ------------------------------------------------------- ======= PREVIOUS SPAMS HEADERS ======= Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHAHb22022 for ; Sun, 13 Jan 2002 19:10:25 +0200 Message-Id: <200201131710.g0DHAHb22022@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD69K; Sun, 13 Jan 2002 12:09:54 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:11:39 -0300 Status: R X-Status: N Received: from TMTMAIL.themoneytreeinc.com (66-0-16-52.deltacom.net [66.0.16.52]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0DHPHb22061 for <###>; Sun, 13 Jan 2002 19:25:18 +0200 Message-Id: <200201131725.g0DHPHb22061@mail.dolphinwave.org> Received: from elcarajo (200.68.208.91 [200.68.208.91]) by TMTMAIL.themoneytreeinc.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id CJQ80AAR; Sun, 13 Jan 2002 12:13:42 -0500 From: Produccion / ElCarajo To: ""<> Subject: Aquí estamos!!! X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sun, 13 Jan 2002 14:26:29 -0300 Status: R X-Status: N Received: from gateway.precision-int.com (66-0-45-130.deltacom.net [66.0.45.130]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0EKaxv03183 for <###>; Mon, 14 Jan 2002 22:37:00 +0200 Message-Id: <200201142037.g0EKaxv03183@mail.dolphinwave.org> Received: from 200.68.208.171 by gateway.precision-int.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.0.1460.8) id CH1YHCZA; Mon, 14 Jan 2002 14:36:33 -0600 From: HOEGER To: "Hoeger"<> Subject: Re: Envíeme Información X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 14 Jan 2002 17:38:30 -0300 Status: R X-Status: N Received: from ice.idsi.com (66-0-11-210.deltacom.net [66.0.11.210]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id g0EKm1v03256 for ; Mon, 14 Jan 2002 22:48:03 +0200 Message-Id: <200201142048.g0EKm1v03256@mail.dolphinwave.org> Received: from ku (200.68.208.171 [200.68.208.171]) by ice.idsi.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id ZX1CD82X; Mon, 14 Jan 2002 15:47:45 -0500 From: HOEGER To: "Hoeger"<> Subject: Re: Envíeme Información X-Mailer: Microsoft Outlook Express 4.72.3110.5 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Mon, 14 Jan 2002 17:49:41 -0300 Status: R X-Status: N ======= OTHER SPAMMING ATTEMPTS (GMT+0200) ======= Jan 13 19:29:47 orca sendmail[22089]: g0DHTlb22089: ... User unknown Jan 13 19:29:48 orca sendmail[22089]: g0DHTlb22089: from=, size=2198, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-1-242.deltacom.net [66.0.1.242] Jan 13 19:30:14 orca sendmail[22095]: g0DHUEb22095: ... User unknown Jan 13 19:30:15 orca sendmail[22095]: g0DHUEb22095: from=, size=2207, class=0, nrcpts=0, bodytype=8BITMIME, proto=ESMTP, daemon=Daemon0, relay=66-0-110-116.deltacom.net [66.0.110.116] Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: ... User unknown Jan 13 19:30:20 orca sendmail[22097]: g0DHUHb22097: from=, size=2187, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-210.deltacom.net [66.0.11.210] Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: ... User unknown Jan 13 19:33:50 orca sendmail[22102]: g0DHXib22102: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=mail.n2bb.com [66.0.13.10] Jan 14 22:41:13 orca sendmail[3249]: g0EKfBv03249: ... User unknown Jan 14 22:41:14 orca sendmail[3249]: g0EKfBv03249: from=, size=1499, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-61.deltacom.net [66.0.11.61] Jan 14 22:48:26 orca sendmail[3274]: g0EKmPv03274: ... User unknown Jan 14 22:48:28 orca sendmail[3274]: g0EKmPv03274: from=, size=1515, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-67-74.deltacom.net [66.0.67.74] Jan 14 22:53:06 orca sendmail[3315]: g0EKr1v03315: ... User unknown Jan 14 22:53:08 orca sendmail[3315]: g0EKr1v03315: from=, size=1499, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-11-61.deltacom.net [66.0.11.61] Jan 14 22:55:50 orca sendmail[3368]: g0EKtnv03368: ... User unknown Jan 14 22:55:52 orca sendmail[3368]: g0EKtnv03368: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=66-0-41-162.deltacom.net [66.0.41.162] === Other peope report e-mail bombing coming from their servers, too === From: Maximiliano Kolus Newsgroups: news.admin.net-abuse.email Subject: mailbomb from arrobashop Date: Tue, 22 Jan 2002 21:27:08 -0300 Message-ID: Organization: TLH X-Newsreader: MicroPlanet Gravity v2.30 X-YourBase: Are Belong To Us Lines: 47 Path: uni-berlin.de!fu-berlin.de!news.mailgate.org!news-spur1.maxwell.syr.edu!neXref: uni-berlin.de news.admin.net-abuse.email:1581420 Hello! I have over 300 copies of this. This mailbomb came from atlantida.com.ar (wich is now giving free access). This is not the first mailbomb or spam from arrobashop using this ISP and so far no complaint has been answered. The last one i sent stated that i will block their class C if they decide to do nothing. The Reply-To: contacto@transdatos.com.ar means that the spammer is reading nanas (and probably nanae) and got upset when he found that the transdatos addresses (yes, there're many!) were munged. Why do i think it's arrobashop? * spews listing of 200.32.3.0/24, this started when the listing became effective. sorry, but this WILL NOT work, you'll not be removed from spews this way. * some arrobashop customers were advertised from atlantida's dialups. * another mailbomb has the name of one arrobashop staffer. Received: from mx2.arnet.com.ar ([200.45.0.3]) by mail2.arnet.com.ar with Microsoft SMTPSVC(5.5.1877.677.67); Tue, 22 Jan 2002 18:47:56 -0300 Received: from server_1.netbci.com ([66.0.97.198]) by mx2.arnet.com.ar with Microsoft SMTPSVC(5.5.1877.357.35); Tue, 22 Jan 2002 18:47:56 -0300 Received: from batelco.com.bh (200.68.208.39 [200.68.208.39]) by server_ 1.netbci.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id CHL9NZRL; Tue, 22 Jan 2002 15:47:56 -0600 Reply-To: contacto@transdatos.com.ar From: "*del_ete_d*" To: "*dele_ted*" CC: mkolus@atomico.com.ar Subject: %,d_(ipHfTCTQcg}]:RWF\ha/=:;uli{Vx6aR0RkaB@Dhh <:(/B\S>Lg/iF Date: 22 Jan 2002 18:47:56 -0300 -- Maximiliano Kolus