[anti-abuse-wg] abuse-contact is not going to fly unless we get all the legitimate players adopting it first

Suresh Ramasubramanian wrote:

Hi Suresh,

in fact chello is one of the biggest ISPs in the RIPE region
that deliberately have no working abuse contacts.
We have about 15 reports daily to them, here some proof that
they are ALL not working.

Apr 19 21:04:36 service sendmail[13239]: q3JJ3Z0P013224: 
to=<abuse at chello.pl>, ctladdr=<root at service.berlin5.powerweb.de> (0/0), 
delay=00:01:01, xdelay=00:01:00, mailer=esmtp, pri=30606, 
relay=smtp.chello.pl. [213.46.255.2], dsn=4.0.0, stat=Deferred: 
Connection timed out with smtp.chello.pl.

Apr 21 14:31:26 service sendmail[19644]: q3LCVQ0O019644: 
to=<noreply at upcnet.ro>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, 
pri=32566, relay=mgate.chello.at. [213.46.255.2], dsn=5.1.1, stat=User 
unknown

Apr  9 17:23:55 service sendmail[20651]: q39FNr0P020643: 
to=<abuse at chello.ie>, ctladdr=<root at service.berlin5.powerweb.de> (0/0), 
delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=30603, 
relay=chello.ie, dsn=5.1.2, stat=Host unknown (Name server: chello.ie: 
no data known)

Apr 11 19:24:28 service sendmail[28775]: q3BHNQ0P028733: 
to=<abuse at chello.fr>, ctladdr=<root at service.berlin5.powerweb.de> (0/0), 
delay=00:01:01, xdelay=00:01:00, mailer=esmtp, pri=30607, 
relay=chello.fr. [216.8.179.25], dsn=4.0.0, stat=Deferred: Connection 
timed out with chello.fr.

Apr  4 22:03:49 service sendmail[7941]: q34K3l0P007914: 
to=<abuse at chello.sk>, ctladdr=<root at service.berlin5.powerweb.de> (0/0), 
delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=30605, 
relay=mail.chello.sk. [213.46.255.2], dsn=5.1.1, stat=User unknown

BTW: asking the maintainer did surely never help ...


Kind regards, Frank

> Like this for example - yes, not a formally defined abuse contact
> field, but they are so insistent that they should only receive spam
> reports at abuse at chello.pl
>
> Unfortunately - that address doesn't exist.  If someone from Chello
> could please contact me about nigerians who keep abusing what is
> likely an open proxy at 89.70.30.128 I'd be obliged
>
> --srs (postmaster at lotuslive.com / AS27477 IBM Lotuslive)
>
>    abuse at chello.pl
>      SMTP error from remote mail server after RCPT TO:<abuse at chello.pl>:
>      host smtp.upcpoczta.pl [213.46.255.2]: 550 5.1.1<abuse at chello.pl>
> unknown recipient rejected
>
>
> route:          89.70.0.0/16
> descr:          UPC.pl
> origin:         AS9141
> remarks:        Any abuse activities including, but not limited to spamming,
> remarks:        hacking and intrusion attempts coming from chello.pl address
> remarks:        space shall be reported ONLY to:
> remarks:
> remarks:        abuse at chello.pl
> remarks:
> remarks:        Any reports sent to any other e-mail addresses may be treated
> remarks:        as SPAM itself and followed by legal actions
> remarks:        against originator
> mnt-by:         AS6830-MNT
> source:         RIPE # Filtered
>
>
>
>


-- 

Mit freundlichen Gruessen,
--
PHADE Software - PowerWeb                       http://www.powerweb.de
Inh. Dipl.-Inform. Frank Gadegast             mailto:frank at powerweb.de
Schinkelstrasse 17                                fon: +49 33200 52920
14558 Nuthetal OT Rehbruecke, Germany             fax: +49 33200 52921
======================================================================