Personal Co-location Registry

Paul Vixie paul at vix.com
Thu Mar 18 20:27:51 UTC 2004


> hey paul, why are you blocking mail from 12.129.199.61 and

because at&t's abuse desk ignored me for too long.

> 65.160.228.34?

because sprint's abuse desk ignored me for too long.

i'll give sprint a second chance (i've removed that /16 from my personal
blackhole list and see what happens) but for the at&t one, well, since it
was specific to the /32 you're asking about, i'll ask you to comment.  (i
will send the digest of actual spam and worm text separately, without cc.)

		  SELECT HOST(s.relay) AS relay, s.entered,
			 s.md5, s.body_md5, s.header
		    FROM spam s
		   WHERE relay <<= '12.129.199.61/32'
		ORDER BY entered
		   LIMIT ALL
	
spam: [2003-07-10 08:26:39.962327+00 12.129.199.61]
   lart: {290593   12.129.199.61  source mailer}
spam: [2003-07-10 08:50:51.008956+00 12.129.199.61]
spam: [2003-07-10 08:57:41.572082+00 12.129.199.61]
spam: [2003-07-10 13:30:03.686831+00 12.129.199.61]
spam: [2003-07-10 13:39:04.107757+00 12.129.199.61]
spam: [2003-08-28 21:41:41.811416+00 12.129.199.61]
   lart: {348955   12.129.199.61   relay mailer}
      mail: (0 20030828214249.005FC139F7 at sa.vix.com)
   lart: {348956  208.14.190.163 dropbox bcsales__at__castlenet.com at bigfishreturns.etv.net}
spam: [2003-08-29 15:34:00.652689+00 12.129.199.61]
   lart: {350332   12.129.199.61  source mailer}
   lart: {350333  216.148.222.35 dropbox webmaster at xilinx.com}
spam: [2003-09-05 01:04:42.777235+00 12.129.199.61]
   lart: {363381   12.129.199.61  source mailer}
   lart: {363382   12.129.199.35 dropbox cherte01 at sprintspectrum.com}
spam: [2003-09-05 21:29:03.838056+00 12.129.199.61]
   lart: {365215  216.148.222.35 dropbox emeareg at xilinx.com}
spam: [2003-09-06 00:59:39.596255+00 12.129.199.61]
   lart: {365536   12.129.199.35 dropbox japanreg at xilinx.com}
spam: [2003-09-06 04:04:36.624285+00 12.129.199.61]
   lart: {365809   12.129.199.61  source mailer}
   lart: {365810   12.129.199.35 dropbox webmaster at xilinx.com}
spam: [2003-09-06 04:07:44.388081+00 12.129.199.61]
spam: [2003-09-06 04:08:18.231721+00 12.129.199.61]
   lart: {365814   12.129.199.35 dropbox usreg at xilinx.com}
spam: [2003-09-06 04:27:08.135638+00 12.129.199.61]
   lart: {365837   12.129.199.35 dropbox seareg at xilinx.com}
spam: [2003-09-06 04:33:51.976813+00 12.129.199.61]
spam: [2003-09-06 04:35:28.447975+00 12.129.199.61]
spam: [2003-09-06 04:45:20.465468+00 12.129.199.61]
   lart: {365864   12.129.199.35 dropbox emeareg at xilinx.com}
spam: [2003-09-06 04:47:47.281624+00 12.129.199.61]
spam: [2003-09-06 05:13:26.810686+00 12.129.199.61]
spam: [2003-09-06 05:22:25.002994+00 12.129.199.61]
spam: [2003-09-06 19:54:09.804546+00 12.129.199.61]
spam: [2003-09-06 20:03:01.260814+00 12.129.199.61]
spam: [2003-09-06 20:41:38.7087+00 12.129.199.61]
spam: [2003-09-06 20:44:04.341501+00 12.129.199.61]
spam: [2003-09-06 21:20:53.648449+00 12.129.199.61]
spam: [2003-09-06 21:37:41.394393+00 12.129.199.61]
spam: [2003-09-06 21:45:38.576676+00 12.129.199.61]
spam: [2003-09-06 21:52:19.2665+00 12.129.199.61]
spam: [2003-09-08 03:37:37.819252+00 12.129.199.61]
   lart: {371138   12.129.199.61  source mailer}
   lart: {371139   12.129.199.35 dropbox emeareg at xilinx.com}
spam: [2003-09-08 03:49:09.575325+00 12.129.199.61]
   lart: {371175   12.129.199.35 dropbox webmaster at xilinx.com}
spam: [2003-09-08 04:03:16.811619+00 12.129.199.61]
spam: [2003-09-08 04:24:25.134147+00 12.129.199.61]
spam: [2003-09-08 04:26:02.668921+00 12.129.199.61]
spam: [2003-09-08 05:15:19.904003+00 12.129.199.61]
spam: [2003-09-08 05:38:29.969698+00 12.129.199.61]
spam: [2003-09-08 06:10:28.572489+00 12.129.199.61]
spam: [2003-09-09 10:14:48.017527+00 12.129.199.61]
   lart: {374373   12.129.199.61  source mailer}
   lart: {374374   12.129.199.35 dropbox emeareg at xilinx.com}
spam: [2003-09-09 10:20:14.172661+00 12.129.199.61]
   lart: {374386   12.129.199.35 dropbox seareg at xilinx.com}
spam: [2003-09-09 10:44:44.019525+00 12.129.199.61]
spam: [2003-09-09 10:50:22.386418+00 12.129.199.61]
spam: [2003-09-09 10:54:33.674864+00 12.129.199.61]
spam: [2003-09-09 10:59:05.825751+00 12.129.199.61]
   lart: {374456   12.129.199.35 dropbox usreg at xilinx.com}
spam: [2003-09-09 10:59:19.815601+00 12.129.199.61]
spam: [2003-09-09 23:04:18.181533+00 12.129.199.61]
   lart: {375625     63.161.60.2 dropbox usreg at xilinx.com}
spam: [2003-09-09 23:16:35.420867+00 12.129.199.61]
   lart: {375640     63.161.60.2 dropbox webmaster at xilinx.com}
spam: [2003-09-09 23:53:36.068581+00 12.129.199.61]
   lart: {375702     63.161.60.2 dropbox seareg at xilinx.com}
spam: [2003-09-10 00:00:05.328099+00 12.129.199.61]
   lart: {375713  216.148.222.35 dropbox webmaster at xilinx.com}
spam: [2003-09-10 01:11:49.146127+00 12.129.199.61]
   lart: {375846   12.129.199.35 dropbox webmaster at xilinx.com}
spam: [2003-09-10 01:53:40.213803+00 12.129.199.61]
spam: [2003-09-10 02:14:14.868995+00 12.129.199.61]
spam: [2003-09-10 04:28:56.723826+00 12.129.199.61]
spam: [2003-09-10 05:34:44.532409+00 12.129.199.61]
spam: [2003-09-11 00:17:57.496854+00 12.129.199.61]
   lart: {378083   12.129.199.61  source mailer}
   lart: {378084   12.129.199.35 dropbox seareg at xilinx.com}
spam: [2003-09-11 02:51:29.35351+00 12.129.199.61]
   lart: {378322   12.129.199.35 dropbox japanreg at xilinx.com}
spam: [2003-09-11 03:32:16.930302+00 12.129.199.61]
spam: [2003-09-11 03:36:20.242852+00 12.129.199.61]
spam: [2003-09-28 07:55:23.101775+00 12.129.199.61]
   lart: {418106   12.129.199.61  source mailer}
spam: [2003-10-02 17:13:02.729708+00 12.129.199.61]
   lart: {428543   12.129.199.61   relay mailer}
      mail: (0 20031002171316.B3C721396F at sa.vix.com)
      mail: (1 20031002171316.C34F813971 at sa.vix.com)
   lart: {428544   211.91.135.24 website www.luckyhere2.com}
spam: [2003-10-04 13:07:44.800083+00 12.129.199.61]
   lart: {432893   12.129.199.61  source mailer}
spam: [2003-10-05 13:32:56.058255+00 12.129.199.61]
   lart: {435059   12.129.199.61  source mailer}
   lart: {435060    200.99.17.47 website www.pharma-wholesale.com}
spam: [2003-10-18 17:04:33.25787+00 12.129.199.61]
   lart: {463139   12.129.199.61  source mailer}
   lart: {463140   12.129.199.35 dropbox postmaster at graycary.com}
spam: [2003-12-01 23:58:14.279671+00 12.129.199.61]
   lart: {543756   12.129.199.61   relay mailer}
      mail: (0 20031201235832.1086413976 at sa.vix.com)
   lart: {543757 210.242.201.102 website www.wk.com.tw}
   lart: {543758  204.71.191.237 website member.bcentral.com}
   lart: {543759    202.3.129.10 website www.1111.com.tw}
   lart: {543760   61.220.239.20 website www.wkedu.com.tw}
   lart: {543761    202.1.237.30 website tw.promo.yahoo.com}
spam: [2004-02-02 03:04:06.65177+00 12.129.199.61]
   lart: {714557   12.129.199.61   relay mailer}
      mail: (0 20040202030432.6E88714C4E at sa.vix.com)
   lart: {714558   12.129.199.35 dropbox tracy.c.tretiak at monsanto.com}
spam: [2004-02-07 17:30:25.477859+00 12.129.199.61]
   lart: {725860  65.164.226.230 website apps.heritagecoin.com}
   lart: {725862   204.152.187.1 dropbox dnacu at cix.net}
spam: [2004-03-03 19:56:54.016605+00 12.129.199.61]
   lart: {778478   12.129.199.61   relay mailer}
      mail: (0 20040303195750.AC36414C51 at sa.vix.com)
   lart: {778479  216.148.222.35 dropbox cameron_sturdevant at ziffdavis.com}





More information about the NANOG mailing list