nanog mailing list archives

Re: anti-spam vs network abuse

From: Roger Marquis <marquis () roble com>
Date: Fri, 28 Feb 2003 15:29:24 -0800 (PST)

As a result the ISP must either A) purchase more RAM, faster CPUs,
and additional servers, or B) run the risk of complaints and lost
customer goodwill.  All of this costs time and money.


Looks like both a netscan and a portscan, and clearly not designed
to limit damages to innocent third parties.  Come on njabl.org,
this isn't rocket science.  Turn down that scan rate by a factor
of at least 50, please.

-- 
Roger Marquis
Roble Systems Consulting
http://www.roble.com/


  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:43 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:43 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:40 PST Connection attempt to TCP IP.IP.IP.IP:25 from 209.208.0.15:57753
  15:16:51 PST postfix/smtpd[94021]: connect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94021]: lost connection after CONNECT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94021]: disconnect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94026]: connect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94026]: E3914DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:52 PST postfix/smtpd[94026]: E3914DAD3D: reject: RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest () rr njabl org>: Relay access denied; 
from=<relaytestsend () rt njabl org> to=<relaytest () rr njabl org> proto=ESMTP helo=<rt.njabl.org>
  15:16:53 PST postfix/smtpd[94026]: 71C6ADAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:53 PST postfix/smtpd[94026]: 71C6ADAD3D: reject: RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest () rr njabl org>: Relay access denied; 
from=<relaytestsend () victim com> to=<relaytest () rr njabl org> proto=ESMTP helo=<rt.njabl.org>
  15:16:54 PST postfix/smtpd[94026]: B4DD5DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:54 PST postfix/smtpd[94026]: B4DD5DAD3D: reject: RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest () rr njabl org>: Relay access denied; 
from=<relaytestsend () rt njabl org@victim.com> to=<relaytest () rr njabl org> proto=ESMTP helo=<rt.njabl.org>
  15:16:56 PST postfix/smtpd[94026]: 0492BDAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:56 PST postfix/smtpd[94026]: 0492BDAD3D: reject: RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 504 <relaytestsend>: Sender address rejected: need 
fully-qualified address; from=<relaytestsend> to=<relaytest () rr njabl org> proto=ESMTP helo=<rt.njabl.org>
  15:16:57 PST postfix/smtpd[94026]: 47B66DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:57 PST postfix/smtpd[94026]: 47B66DAD3D: reject: RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 450 <relaytestsend@localhost>: Sender address 
rejected: Domain not found; from=<relaytestsend@localhost> to=<relaytest () rr njabl org> proto=ESMTP 
helo=<rt.njabl.org>
  15:16:58 PST postfix/smtpd[94026]: 8B9C9DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:58 PST postfix/smtpd[94026]: 8B9C9DAD3D: reject: RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest () rr njabl org>: Relay access denied; 
from=<> to=<relaytest () rr njabl org> proto=ESMTP helo=<rt.njabl.org>
  15:16:59 PST postfix/smtpd[94026]: CDA4EDAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:59 PST postfix/smtpd[94026]: CDA4EDAD3D: reject: RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest () rr njabl org>: Relay access denied; 
from=<relaytestsend@[IP.IP.IP.IP]> to=<relaytest () rr njabl org> proto=ESMTP helo=<rt.njabl.org>
  15:17:09 PST postfix/smtpd[94026]: too many errors after RCPT from 
before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:17:09 PST postfix/smtpd[94026]: disconnect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
 ...

Current thread:

Re: anti-spam vs network abuse Roger Marquis (Feb 28)
- <Possible follow-ups>
- Re: anti-spam vs network abuse Richard Irving (Feb 28)
- Re: anti-spam vs network abuse Roger Marquis (Feb 28)