freenet Cityline GmbH - allow their spammers to spam non-stop, ignoring all complaints! Update: 20-May-2005: After dropping them into the access file, there are now daily dictionary attacks from those machines, too! Firewalled! freenet.de, pppool.de, roka.net, roka.de, mcbone.net, freenet-ag.de, [62.104.0.0 - 62.104.255.255], [80.184.0.0 - 80.185.255.255], [194.97.0.0 - 194.97.255.255]: Access denied - Firewalled! === Spam flood from their abuser. My 1st complaint === From: Admin Organization: Private person Subject: [email] Spam flood! [Fwd: Tuerkei in die EU] Date: Sun, 15 May 2005 06:55:50 +0300 User-Agent: KMail/1.7.1 X-KMail-Link-Message: 217983 X-KMail-Link-Type: forward To: abuse-May@2005.dolphinwave.org, spam@uce.gov, nanas@killfile.org, abuse@pppool.de X-Complaints-To: abuse[@]dolphinwave[.]org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200505150655.51155@2005.dolphinwave.org> Status: RO X-Status: RSC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Spammer: G1736.g.pppool.de [80.185.23.54] ---------- Forwarded Message ---------- Received: from edgrux.com (G1736.g.pppool.de [80.185.23.54]) by mail.dolphinwave.org (8.13.1/8.13.1) with SMTP id j4F3TZI6023508; Sun, 15 May 2005 06:29:58 +0300 From: truebluebloodta@aol.com To: server3274@### Date: Sun, 15 May 2005 01:40:20 GMT Subject: Tuerkei in die EU Importance: Normal X-Mailer: Outlook 9.41 X-Priority: 3 (Normal) MIME-Version: 1.0 Message-ID: Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.177; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org X-UID: 831 Content-Length: 799 X-Keywords: GEWALTEXZESS: http://www.spiegel.de/politik/ausland/0,1518,345203,00.html Politiker zerreißt Menschenrechtsbericht: http://www.spiegel.de/politik/ausland/0,1518,325983,00.html Schily = Hitler http://www.spiegel.de/politik/deutschland/0,1518,345929,00.html Schily wehrt sich gegen Hitler-Vergleiche: http://www.spiegel.de/politik/deutschland/0,1518,345749,00.html Sie hat ja wie eine Deutsche gelebt: http://www.spiegel.de/panorama/0,1518,342484,00.html http://www.npd.de/npd_info/deutschland/2005/d0205-31.html Parallelgesellschaften - Feind hoerte mit: http://www.npd.de/npd_info/meldungen/2005/m0305-15.html Sie war unerlaubt spazieren: http://www.taz.de/pt/2004/11/25/a0143.nf/text Tiere an Autobahn geschlachtet: http://forum.gofeminin.de/forum/actu1/__f384_actu1-TuRKEI-NEIN-DANKE.html ------------------------------------------------------- === The spam continues from the same abuser. My 2nd complaint === From: Admin Organization: Private person Subject: [email] Spam flood! [Fwd: Armenian Genocide Plagues Ankara 90 Years On] Date: Sun, 15 May 2005 06:55:52 +0300 User-Agent: KMail/1.7.1 X-KMail-Link-Message: 217981 X-KMail-Link-Type: forward To: abuse-May@2005.dolphinwave.org, spam@uce.gov, nanas@killfile.org, abuse@pppool.de X-Complaints-To: abuse[@]dolphinwave[.]org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200505150655.52583@2005.dolphinwave.org> Status: RO X-Status: RSC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Spammer: G1736.g.pppool.de [80.185.23.54] ---------- Forwarded Message ---------- Received: from htcxph.com (G1736.g.pppool.de [80.185.23.54]) by mail.dolphinwave.org (8.13.1/8.13.1) with SMTP id j4F1LISF020354; Sun, 15 May 2005 04:21:28 +0300 From: OMoreno25@norikomail.com To: ability@### Date: Sun, 15 May 2005 01:16:18 GMT Subject: Armenian Genocide Plagues Ankara 90 Years On Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal MIME-Version: 1.0 Message-ID: <5a3c8b1dfd4a28be723@norikomail.com> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.177; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org Status: R X-UID: 829 Content-Length: 82 X-Keywords: X-Status: NC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Full Article: http://service.spiegel.de/cache/international/0,1518,353274,00.html ------------------------------------------------------- === The same abuser. My 3rd complaint === From: Admin Organization: Private person Subject: [email] Spam flood! [Fwd: Auf Streife durch den Berliner Wedding] Date: Sun, 15 May 2005 06:55:54 +0300 User-Agent: KMail/1.7.1 X-KMail-Link-Message: 217980 X-KMail-Link-Type: forward To: abuse-May@2005.dolphinwave.org, spam@uce.gov, nanas@killfile.org, abuse@pppool.de X-Complaints-To: abuse[@]dolphinwave[.]org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200505150655.54525@2005.dolphinwave.org> Status: RO X-Status: RSC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Spammer: G1736.g.pppool.de [80.185.23.54] ---------- Forwarded Message ---------- Received: from codskid.com (G1736.g.pppool.de [80.185.23.54]) by mail.dolphinwave.org (8.13.1/8.13.1) with SMTP id j4F1Iph7020242; Sun, 15 May 2005 04:19:00 +0300 From: jimb@redhat.com To: mail@### Date: Sun, 15 May 2005 01:16:18 GMT Subject: Auf Streife durch den Berliner Wedding Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal MIME-Version: 1.0 Message-ID: <70b3.80f8eee175a915@redhat.com> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.177; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org X-IMAPbase: 1113180229 831 Status: R X-UID: 828 Content-Length: 129 X-Keywords: X-Status: NC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Lese selbst: http://www.zdf.de/ZDFde/inhalt/7/0,1872,2222503,00.html http://www.libasoli.de/2004/ethnoclans%20spiegel50_04.html ------------------------------------------------------- === And my 4th complaint === From: Admin Organization: Private person Subject: [email] Spam flood (4th)! [Fwd: Dresden 1945] Date: Sun, 15 May 2005 18:21:57 +0300 User-Agent: KMail/1.7.1 X-KMail-Link-Message: 217994 X-KMail-Link-Type: forward To: abuse-May@2005.dolphinwave.org, spam@uce.gov, nanas@killfile.org, abuse@pppool.de X-Complaints-To: abuse[@]dolphinwave[.]org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200505151821.57423@2005.dolphinwave.org> Status: RO X-Status: RSC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: The same G1736.g.pppool.de spammer, 4th spam! ---------- Forwarded Message ---------- Received: from hvlkbu.com (G1736.g.pppool.de [80.185.23.54]) by mail.dolphinwave.org (8.13.1/8.13.1) with SMTP id j4F6dMcv030695; Sun, 15 May 2005 09:39:32 +0300 From: legal@cj.com To: thrills@### Date: Sun, 15 May 2005 06:34:15 GMT Subject: Dresden 1945 Importance: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Message-ID: <47609.849eeef25f51@cj.com> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.177; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org X-IMAPbase: 1113180229 844 Status: R X-UID: 839 Content-Length: 71 X-Keywords: X-Status: NC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Lese selbst: http://www.kommunisten-online.de/blackchanel/dresden3.htm ------------------------------------------------------- === My 5th complaint, intent to block === From: Admin Organization: Private person Subject: [email] Spam flood (5th)! [Fwd: Turkish Tabloid Enrages Germany with Nazi Comparisons] Date: Tue, 17 May 2005 07:17:58 +0300 User-Agent: KMail/1.7.1 X-KMail-Link-Message: 218037 X-KMail-Link-Type: forward To: abuse-May@2005.dolphinwave.org, spam@uce.gov, nanas@killfile.org, abuse@pppool.de, nmc@freenet-ag.de X-Complaints-To: abuse[@]dolphinwave[.]org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200505170717.58592@2005.dolphinwave.org> Status: RO X-Status: RSC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: This is already the FIFTH the same spam from the same pppool.de abuser! ATTN: freenet.de! One more spam from this spammer still being your customer, and your whole IP range will be blocked from accessing my mailservers ever again, and this info will be shared with other admins and public blocklists like SPEWS! ---------- Forwarded Message ---------- Received: from fwnpynp.de (G0248.g.pppool.de [80.185.2.72]) by mail.dolphinwave.org (8.13.1/8.13.1) with SMTP id j4H1cirm004044; Tue, 17 May 2005 04:38:59 +0300 From: forum@onlinekosten.de To: freemail@### Date: Tue, 17 May 2005 01:34:04 UTC Subject: Turkish Tabloid Enrages Germany with Nazi Comparisons Importance: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Message-ID: Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.178; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org Status: R X-UID: 881 Content-Length: 82 X-Keywords: X-Status: NC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Full Article: http://service.spiegel.de/cache/international/0,1518,345889,00.html ------------------------------------------------------- ======= PREVIOUS SPAMS WERE, ALL COMPLAINED TO pppool.de ======= === My 6th complaint, block! === From: Admin Organization: Private person Subject: [email] [BLOCK] freenet.de/pppool.de - spam flood (6th)! [Fwd: Turkish Tabloid Enrages Germany with Nazi Comparisons] Date: Tue, 17 May 2005 15:04:39 +0300 User-Agent: KMail/1.7.1 X-KMail-Link-Message: 218045 X-KMail-Link-Type: forward To: abuse-May@2005.dolphinwave.org, spam@uce.gov, nanas@killfile.org, abuse@pppool.de, abuse@freenet-ag.de, nmc@freenet-ag.de X-Complaints-To: abuse[@]dolphinwave[.]org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200505171504.39315@2005.dolphinwave.org> Status: RO X-Status: RSC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: ATTN: freenet Cityline! For this persistent abuse from your spammers and you ignoring all reports, your whole IP ranges will now be blocked! Enjoy your intranet! ---------- Forwarded Message ---------- Received: from hftukux.com (G0248.g.pppool.de [80.185.2.72]) by mail.dolphinwave.org (8.13.1/8.13.1) with SMTP id j4H5oNs3009097; Tue, 17 May 2005 08:50:31 +0300 From: jirilow@jirilow.com To: reviews@### Date: Tue, 17 May 2005 05:46:52 GMT Subject: Turkish Tabloid Enrages Germany with Nazi Comparisons Importance: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Message-ID: Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.178; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org Status: R X-UID: 888 Content-Length: 82 X-Keywords: X-Status: NC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Full Article: http://service.spiegel.de/cache/international/0,1518,345889,00.html ------------------------------------------------------- ======= PREVIOUS SPAMS WERE, ALL COMPLAINED TO pppool.de ======= === The same spammer spams others, too, forging my e-mail addresses in the === === Return-Path: headers (causing backscatter) === Received: from fe-6a.inet.it (fe-6a.inet.it [213.92.5.111]) by mail.dolphinwave.org (8.13.1/8.13.1) with ESMTP id j4GLFUhm030300 for ; Tue, 17 May 2005 00:15:33 +0300 Message-Id: <200505162115.j4GLFUhm030300@mail.dolphinwave.org> Received: from localhost [127.0.0.1] by fe-6a.inet.it via I-SMTP-5.2.3-520 id 127.0.0.1+uuXCw183KcxDmJVcjljsaY; Mon, 16 May 2005 23:15:30 +0200 From: "I.NET SMTP" To: marketing@### X-Mailer: IFM Report system Date: Mon, 16 May 2005 23:15:30 +0200 Subject: Delivery error report id=::ffff:80.185.30.123+ja60J36UOAp X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.178; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org Status: R X-UID: 875 Content-Length: 2084 X-Keywords: X-Status: NC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: Italiano: Mail completata con errori permanenti per alcuni destinatari. English : Job completed with permanent errors for some recipients. Summary delivery report: Mail ID : ::ffff:80.185.30.123+ja60J36UOAp From : marketing@### Number of recipients : Total : 3 Permanent failures : 3 Succesfully Sent : 0 +----- Detailed report for recipients with permanent error (if any) ---+ To : benita_owenuv@arag.it Status : Fatal error Relay : smtp1.arag.it [213.92.32.70] [opt=0x0000] Messages : remote says : 550 : Recipient address rejected: User unknown in relay recipient table Send time : 0.329 s Start delay : 0.023 s To : wilfredo.law_ni@arag.it Status : Fatal error Relay : smtp1.arag.it [213.92.32.70] [opt=0x0000] Messages : remote says : 550 : Recipient address rejected: User unknown in relay recipient table Send time : 0.329 s Start delay : 0.023 s To : tritter_mf@arag.it Status : Fatal error Relay : smtp1.arag.it [213.92.32.70] [opt=0x0000] Messages : remote says : 550 : Recipient address rejected: User unknown in relay recipient table Send time : 0.329 s Start delay : 0.023 s +----- Detailed report for recipients with succefully sent (if any) ---+ Buon Lavoro. I.NET Mail System ------- Original mail message ---- Return-Path: Received: from g1e7b.g.pppool.de [::ffff:80.185.30.123] by fe-6a.inet.it via I-SMTP-5.2.3-520 id ::ffff:80.185.30.123+ja60J36UOAp; Mon, 16 May 2005 23:15:30 +0200 From: marketing@### To: server@arag.it Date: Mon, 16 May 2005 21:14:47 GMT Subject: Dresden 1945 Importance: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Message-ID: Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" Lese selbst: http://www.kommunisten-online.de/blackchanel/dresden3.htm === And another one === Received: from mailgw1.wm.net (mailgw1.wm.net [194.18.224.214]) by mail.dolphinwave.org (8.13.1/8.13.1) with ESMTP id j4H4I3Tv006999 for ; Tue, 17 May 2005 07:18:07 +0300 Received: from WMSI001556.corp.wmdata.net (wmsi001556.wmdata.se [164.9.238.12]) by mailgw1.wm.net (BorderWare MXtreme Mail Firewall) with ESMTP id 15C6D4232M for ; Tue, 17 May 2005 06:17:57 +0200 (CEST) From: postmaster@wmdata.com To: news@### Date: Tue, 17 May 2005 06:17:57 +0200 MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="9B095B5ADSN=_01C549836C08C1E60003FDFFWMSI001556.corp." X-DSNContext: 335a7efd - 4523 - 00000001 - 80040546 Message-ID: Subject: Delivery Status Notification (Failure) X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-6; AVE: 6.30.0.12; VDF: 6.30.0.178; host: mail.dolphinwave.org) X-Loop: dev.null@dolphinwave.org X-IMAPbase: 1113180229 884 Status: R X-UID: 883 Content-Length: 1694 X-Keywords: X-Status: NC X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: This is a MIME-formatted message. Portions of this message may be unreadable without a MIME-capable mail program. --9B095B5ADSN=_01C549836C08C1E60003FDFFWMSI001556.corp. Content-Type: text/plain; charset=unicode-1-1-utf-7 This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. s.lyon_oj@wmdata.dk --9B095B5ADSN=_01C549836C08C1E60003FDFFWMSI001556.corp. Content-Type: message/delivery-status Reporting-MTA: dns;WMSI001556.corp.wmdata.net Received-From-MTA: dns;mailgw2.wm.net Arrival-Date: Tue, 17 May 2005 06:17:57 +0200 Final-Recipient: rfc822;s.lyon_oj@wmdata.dk Action: failed Status: 5.1.1 --9B095B5ADSN=_01C549836C08C1E60003FDFFWMSI001556.corp. Content-Type: message/rfc822 Received: from mailgw2.wm.net ([164.9.248.242]) by WMSI001556.corp.wmdata.net with Microsoft SMTPSVC(6.0.3790.0); Tue, 17 May 2005 06:17:57 +0200 Received: from juere.org (G0248.g.pppool.de [80.185.2.72]) by mailgw2.wm.net (BorderWare MXtreme Mail Firewall) with SMTP id 592FDFFDX0 for ; Tue, 17 May 2005 06:17:55 +0200 (CEST) From: news@### To: mail-list@wmdata.dk Date: Tue, 17 May 2005 04:15:59 UTC Subject: Armenian Genocide Plagues Ankara 90 Years On Importance: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Message-ID: <7321c8.f810ff7b2c@dolphinwave.org> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" Return-Path: news@### X-OriginalArrivalTime: 17 May 2005 04:17:57.0366 (UTC) FILETIME=[678B2160:01C55A97] Full Article: http://service.spiegel.de/cache/international/0,1518,353274,00.html --9B095B5ADSN=_01C549836C08C1E60003FDFFWMSI001556.corp.--