🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ch.admin
Article #6165

[BLOCK] 62.2.197.64/28 - Adressverifikationen von Cablecom-IPs

#6165
From: Florian L. Klein
Date: Thu, 25 Dec 2003 13:33
147 lines
8643 bytes
Seit etwa zwei Wochen schlagen bei mir st�ndig
Adressverifikationsversuche auf, die von den Cablecom-IPs 62.2.197.66
bis 62.2.197.72 kommen. Eine Mail an abuse@cablecom.ch vor ein paar
Tagen h�tte ich mir offenbar im Nachhinein schenken k�nnen - die
Zugriffe haben sich daraufhin n�mlich nicht im Geringsten ver�ndert. Von
einer Antwort ganz zu schweigen.

Gibt es �berhaupt nichtspammende Kunden bei Cablecom, oder gibt es einen
sonstigen Grund, von Cablecom-IPs Mail anzunehmen? Ich sehe allm�hlich
keinen mehr.

Die hier unkenntlich gemachten Empf�ngeradressen stammen offenbar von
Adress-CDs und bestehen aus wild geratenen Localparts, die an meine
(Sub-)Domains angeh�ngt wurden.

--- grep 62.2.197 /var/log/mail.log
[...]
Dec 25 10:42:43 enya postfix/smtpd[8144]:
  warning: 62.2.197.66: address not listed for hostname www.c3000.ch
Dec 25 10:42:43 enya postfix/smtpd[8144]:
  connect from unknown[62.2.197.66]
Dec 25 10:42:43 enya postfix/smtpd[8144]: 3414D16DB:
  client=unknown[62.2.197.66]
Dec 25 10:42:43 enya postfix/smtpd[8144]: 3414D16DB:
  reject: RCPT from unknown[62.2.197.66]: 550 Service unavailable;
  Client host [62.2.197.66] blocked using spamfriendly.bl.docsnyder.de;
  E-mail harvesting - please collect addresses from
  http://rcpt.de/forum/archive/bl; from=<verify@testmail.com>
  to=<localpart@mydomain> proto=SMTP helo=<localhost>
Dec 25 10:42:53 enya postfix/smtpd[8144]: 3414D16DB:
  reject: RCPT from unknown[62.2.197.66]: 550 Service unavailable;
  Client host [62.2.197.66] blocked using spamfriendly.bl.docsnyder.de;
  E-mail harvesting - please collect addresses from
  http://rcpt.de/forum/archive/bl; from=<verify@testmail.com>
  to=<localpart@mydomain> proto=SMTP helo=<localhost>
[...]
Dec 25 10:44:14 enya postfix/smtpd[8144]: 3414D16DB:
  reject: RCPT from unknown[62.2.197.66]: 550 Service unavailable;
  Client host [62.2.197.66] blocked using spamfriendly.bl.docsnyder.de;
  E-mail harvesting - please collect addresses from
  http://rcpt.de/forum/archive/bl; from=<verify@testmail.com>
  to=<localpart@mydomain> proto=SMTP helo=<localhost>
Dec 25 10:44:34 enya postfix/smtpd[8144]: too many errors after RCPT
  from unknown[62.2.197.66]
Dec 25 10:44:34 enya postfix/smtpd[8144]: disconnect from
  unknown[62.2.197.66]
Dec 25 11:45:54 enya postfix/smtpd[9264]: connect from
  62-2-197-68.webcom.cablecom.ch[62.2.197.68]
Dec 25 11:45:54 enya postfix/smtpd[9264]: E1995446:
  client=62-2-197-68.webcom.cablecom.ch[62.2.197.68]
Dec 25 11:45:57 enya postfix/smtpd[9264]: E1995446:
  reject: RCPT from 62-2-197-68.webcom.cablecom.ch[62.2.197.68]:
  550 Service unavailable; Client host [62.2.197.68] blocked using
  spamfriendly.bl.docsnyder.de; E-mail harvesting - please collect
  addresses from http://rcpt.de/forum/archive/bl;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<62-2-197-68.webcom.cablecom.ch>
Dec 25 11:46:07 enya postfix/smtpd[9264]: E1995446:
  reject: RCPT from 62-2-197-68.webcom.cablecom.ch[62.2.197.68]:
  550 Service unavailable; Client host [62.2.197.68] blocked using
  spamfriendly.bl.docsnyder.de; E-mail harvesting - please collect
  addresses from http://rcpt.de/forum/archive/bl;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<62-2-197-68.webcom.cablecom.ch>
[...]
Dec 25 11:47:27 enya postfix/smtpd[9264]: E1995446:
  reject: RCPT from 62-2-197-68.webcom.cablecom.ch[62.2.197.68]:
  550 Service unavailable; Client host [62.2.197.68] blocked using
  spamfriendly.bl.docsnyder.de; E-mail harvesting - please collect
  addresses from http://rcpt.de/forum/archive/bl;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<62-2-197-68.webcom.cablecom.ch>
Dec 25 11:47:47 enya postfix/smtpd[9264]: too many errors after RCPT
  from 62-2-197-68.webcom.cablecom.ch[62.2.197.68]
Dec 25 11:47:47 enya postfix/smtpd[9264]: disconnect from
  62-2-197-68.webcom.cablecom.ch[62.2.197.68]
Dec 25 13:53:09 enya postfix/smtpd[11931]: connect from
  62-2-197-72.webcom.cablecom.ch[62.2.197.72]
Dec 25 13:53:09 enya postfix/smtpd[11931]: B5467446:
  client=62-2-197-72.webcom.cablecom.ch[62.2.197.72]
Dec 25 13:53:10 enya postfix/smtpd[11931]: B5467446:
  reject: RCPT from 62-2-197-72.webcom.cablecom.ch[62.2.197.72]:
  550 Service unavailable; Client host [62.2.197.72] blocked using
  spamfriendly.bl.docsnyder.de; E-mail harvesting - please collect
  addresses from http://rcpt.de/forum/archive/bl;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<localhost>
Dec 25 13:53:20 enya postfix/smtpd[11931]: B5467446:
  reject: RCPT from 62-2-197-72.webcom.cablecom.ch[62.2.197.72]:
  550 Service unavailable; Client host [62.2.197.72] blocked using
  spamfriendly.bl.docsnyder.de; E-mail harvesting - please collect
  addresses from http://rcpt.de/forum/archive/bl;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<localhost>
[...]
Dec 25 13:54:40 enya postfix/smtpd[11931]: B5467446:
  reject: RCPT from 62-2-197-72.webcom.cablecom.ch[62.2.197.72]:
  550 Service unavailable; Client host [62.2.197.72] blocked using
  spamfriendly.bl.docsnyder.de; E-mail harvesting - please collect
  addresses from http://rcpt.de/forum/archive/bl;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<localhost>
Dec 25 13:55:00 enya postfix/smtpd[11931]: too many errors after RCPT
  from 62-2-197-72.webcom.cablecom.ch[62.2.197.72]
Dec 25 13:55:00 enya postfix/smtpd[11931]: disconnect from
  62-2-197-72.webcom.cablecom.ch[62.2.197.72]
Dec 25 13:58:05 enya postfix/smtpd[11998]: connect from
  62-2-197-67.webcom.cablecom.ch[62.2.197.67]
Dec 25 13:58:05 enya postfix/smtpd[11998]: E9DE7446:
  client=62-2-197-67.webcom.cablecom.ch[62.2.197.67]
Dec 25 13:58:06 enya postfix/smtpd[11998]: E9DE7446:
  reject: RCPT from 62-2-197-67.webcom.cablecom.ch[62.2.197.67]:
  550 Service unavailable; Client host [62.2.197.67] blocked using
  list.dsbl.org; http://dsbl.org/listing?ip=62.2.197.67;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<your-first-way[at]bluewin.ch>
Dec 25 13:58:16 enya postfix/smtpd[11998]: E9DE7446:
  reject: RCPT from 62-2-197-67.webcom.cablecom.ch[62.2.197.67]:
  550 Service unavailable; Client host [62.2.197.67] blocked using
  list.dsbl.org; http://dsbl.org/listing?ip=62.2.197.67;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<your-first-way[at]bluewin.ch>
[...]
Dec 25 13:59:36 enya postfix/smtpd[11998]: E9DE7446:
  reject: RCPT from 62-2-197-67.webcom.cablecom.ch[62.2.197.67]:
  550 Service unavailable; Client host [62.2.197.67] blocked using
  list.dsbl.org; http://dsbl.org/listing?ip=62.2.197.67;
  from=<verify@testmail.com> to=<localpart@mydomain> proto=SMTP
  helo=<your-first-way[at]bluewin.ch>
Dec 25 13:59:56 enya postfix/smtpd[11998]: too many errors after RCPT
  from 62-2-197-67.webcom.cablecom.ch[62.2.197.67]
Dec 25 13:59:56 enya postfix/smtpd[11998]: disconnect from
  62-2-197-67.webcom.cablecom.ch[62.2.197.67]
[...]
---

So geht das hier seit etwa zwei Wochen, mehrmals pro Stunde.

/.
DocSnyder.

-- 
Friss, Spammer: <webmaster@greatweight.biz> <support@greatweight.biz>
<info@greatweight.biz> <sales@greatweight.biz> <order@greatweight.biz>
<office@greatweight.biz> <remove@greatweight.biz> <mail@greatweight.biz>
<news@greatweight.biz> <ads@greatweight.biz> <buy@greatweight.biz>
Technical Details
Message-ID: <fi5rb1-t5o.ln1@news.home.docsnyder.de>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!newsfeed01.sul.t-online.de!newsmm00.sul.t-online.com!t-online.de!news.t-online.com!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII
X-Google-Thread: 11008d,595af212574015da,start
X-Google-Attributes: gid11008d,public
X-Google-ArrivalTime: 2003-12-25 05:34:12 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!newsfeed01.sul.t-online.de!newsmm00.sul.t-online.com!t-online.de!news.t-online.com!not-for-mail
From: "Florian L. Klein" <u_cha_f@expires-200312.docsnyder.de>
Newsgroups: ch.admin
Subject: [BLOCK] 62.2.197.64/28 - Adressverifikationen von Cablecom-IPs
Date: Thu, 25 Dec 2003 14:33:37 +0100
Organization: http://docsnyder.de/
Lines: 147
Message-ID: <fi5rb1-t5o.ln1@news.home.docsnyder.de>
Reply-To: u_cha_r@expires-200312.docsnyder.de
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: 8bit
X-Trace: news.t-online.com 1072359226 06 3005 RKArG3COA7q73xJ 031225 13:33:46
X-Complaints-To: usenet-abuse@t-online.de
X-ID: VIx3GqZaYeRBxsnLjqt6EYG5FOk8YsS+TZjrCAevq-F8J60jC1ZHcg
Summary: Please spam <order@greatweight.biz>
Keywords: Spam order@greatweight.biz
User-Agent: tin/1.7.2-20031104 ("Eriskay") (UNIX) (Linux/2.4.23-sensors2.8.1 (i586))