Repeating spamming attempts from the CHINANET Hunan province network, and they ignore complaints, allowing the spamming to continue. hnpta.net.cn, [218.75.128.0 - 218.77.127.255]: Access denied! === 1st spamming attempt, my complaint === Content-Type: text/plain; charset="us-ascii" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Yahoo-Mail Abuse" , abuse@hotmail.com, postmaster@wanadoo.fr, abuse@wanadoo.fr, weitj@cndata.com, hostmaster@ns.chinanet.cn.net, liul@hndcb.hnpta.net.cn, anti-spam@ns.chinanet.cn.net, huyu@china-netcom.com, postmaster@china-netcom.com Subject: [email] Massive spamming attempts (Usenet harvest: findadate*)! Date: Fri, 30 Aug 2002 14:45:16 +0300 User-Agent: KMail/1.4.1 X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200208301445.16018@2002.dolphinwave.org> Status: RO X-Status: S Today my mailserver has rejected multiple delivery attempts on my e-mail addresses used on the Usenet newsgroups news.admin.net-abuse.email and alt.animals.dolphins from May through August of this year only, and harvested from there (usenet-jun+aad@2002..., usenet-aug+nanae@2002, etc - tagged)! The spammer's harvesting program made a screw and removed the "+" tag from my e-mail addresses, making them all undeliverable. Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your spammers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer (abused open relays/proxies): ===================================== ABoulogne-106-1-2-31.abo.wanadoo.fr: [80.11.103.31] - Aug 30 07:00:52-07:01:34 (GMT+0300) [80.11.103.31] - Aug 30 07:01:51-07:02:07 (GMT+0300) CHINANET-HN: [218.76.246.130] - Aug 30 11:37:39-11:37:44 (GMT+0300) SH-CHINA-NETCOM: [210.22.92.83] - Aug 30 11:41:52-11:41:55 (GMT+0300) [210.22.92.83] - Aug 30 11:41:55-11:41:59 (GMT+0300) Mail from: ========== findadatehere31523320p41@yahoo.com findatonight1577111v56@yahoo.com findadatehere31524601q75@yahoo.com findadatefortonight33360166s10@hotmail.com ======= Sendmail logs (GMT+0300) ======= Aug 30 07:00:52 orca sendmail[14310]: g7U40mX14310: ... User unknown Aug 30 07:00:55 orca sendmail[14310]: g7U40mX14310: ... User unknown Aug 30 07:00:59 orca sendmail[14310]: g7U40mX14310: ... User unknown Aug 30 07:01:01 orca sendmail[14310]: g7U40mX14310: ... User unknown Aug 30 07:01:05 orca sendmail[14310]: g7U40mX14310: ... User unknown Aug 30 07:01:34 orca sendmail[14310]: g7U40mX14310: lost input channel from IDENT:nobody@ABoulogne-106-1-2-31.abo.wanadoo.fr [80.11.103.31] to Daemon0 after data -- Aug 30 07:01:51 orca sendmail[14344]: g7U41mX14344: ... User unknown Aug 30 07:01:53 orca sendmail[14344]: g7U41mX14344: ... User unknown Aug 30 07:01:57 orca sendmail[14344]: g7U41mX14344: ... User unknown Aug 30 07:01:59 orca sendmail[14344]: g7U41mX14344: ... User unknown Aug 30 07:02:01 orca sendmail[14344]: g7U41mX14344: ... User unknown Aug 30 07:02:07 orca sendmail[14344]: g7U41mX14344: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=Daemon0, relay=IDENT:nobody@ABoulogne-106-1-2-31.abo.wanadoo.fr [80.11.103.31] -- Aug 30 11:37:39 orca sendmail[15328]: g7U8bbX15328: ... User unknown Aug 30 11:37:44 orca sendmail[15328]: g7U8bbX15328: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=Daemon0, relay=[218.76.246.130] -- Aug 30 11:41:52 orca sendmail[15346]: g7U8foX15346: ... User unknown Aug 30 11:41:53 orca sendmail[15345]: g7U8fnX15345: ... User unknown Aug 30 11:41:53 orca sendmail[15346]: g7U8foX15346: ... User unknown Aug 30 11:41:54 orca sendmail[15345]: g7U8fnX15345: ... User unknown Aug 30 11:41:55 orca sendmail[15345]: g7U8fnX15345: ... User unknown Aug 30 11:41:55 orca sendmail[15346]: g7U8foX15346: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=Daemon0, relay=[210.22.92.83] -- Aug 30 11:41:55 orca sendmail[15345]: g7U8fnX15345: ... User unknown Aug 30 11:41:56 orca sendmail[15345]: g7U8fnX15345: ... User unknown Aug 30 11:41:59 orca sendmail[15345]: g7U8fnX15345: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=Daemon0, relay=[210.22.92.83] === And another spamming attempt was logged from the same spammer again === === Sendmail logs (GMT+0300) === Aug 30 19:30:55 orca sendmail[19066]: g7UGUrX19066: ... User unknown Aug 30 19:30:58 orca sendmail[19066]: g7UGUrX19066: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=Daemon0, relay=[218.76.241.15]