hey paul, why are you blocking mail from 12.129.199.61 and

because at&t's abuse desk ignored me for too long.

65.160.228.34?

because sprint's abuse desk ignored me for too long. i'll give sprint a second chance (i've removed that /16 from my personal blackhole list and see what happens) but for the at&t one, well, since it was specific to the /32 you're asking about, i'll ask you to comment. (i will send the digest of actual spam and worm text separately, without cc.) SELECT HOST(s.relay) AS relay, s.entered, s.md5, s.body_md5, s.header FROM spam s WHERE relay <<= '12.129.199.61/32' ORDER BY entered LIMIT ALL spam: [2003-07-10 08:26:39.962327+00 12.129.199.61] lart: {290593 12.129.199.61 source mailer} spam: [2003-07-10 08:50:51.008956+00 12.129.199.61] spam: [2003-07-10 08:57:41.572082+00 12.129.199.61] spam: [2003-07-10 13:30:03.686831+00 12.129.199.61] spam: [2003-07-10 13:39:04.107757+00 12.129.199.61] spam: [2003-08-28 21:41:41.811416+00 12.129.199.61] lart: {348955 12.129.199.61 relay mailer} mail: (0 20030828214249.005FC139F7@sa.vix.com) lart: {348956 208.14.190.163 dropbox bcsales__at__castlenet.com@bigfishreturns.etv.net} spam: [2003-08-29 15:34:00.652689+00 12.129.199.61] lart: {350332 12.129.199.61 source mailer} lart: {350333 216.148.222.35 dropbox webmaster@xilinx.com} spam: [2003-09-05 01:04:42.777235+00 12.129.199.61] lart: {363381 12.129.199.61 source mailer} lart: {363382 12.129.199.35 dropbox cherte01@sprintspectrum.com} spam: [2003-09-05 21:29:03.838056+00 12.129.199.61] lart: {365215 216.148.222.35 dropbox emeareg@xilinx.com} spam: [2003-09-06 00:59:39.596255+00 12.129.199.61] lart: {365536 12.129.199.35 dropbox japanreg@xilinx.com} spam: [2003-09-06 04:04:36.624285+00 12.129.199.61] lart: {365809 12.129.199.61 source mailer} lart: {365810 12.129.199.35 dropbox webmaster@xilinx.com} spam: [2003-09-06 04:07:44.388081+00 12.129.199.61] spam: [2003-09-06 04:08:18.231721+00 12.129.199.61] lart: {365814 12.129.199.35 dropbox usreg@xilinx.com} spam: [2003-09-06 04:27:08.135638+00 12.129.199.61] lart: {365837 12.129.199.35 dropbox seareg@xilinx.com} spam: [2003-09-06 04:33:51.976813+00 12.129.199.61] spam: [2003-09-06 04:35:28.447975+00 12.129.199.61] spam: [2003-09-06 04:45:20.465468+00 12.129.199.61] lart: {365864 12.129.199.35 dropbox emeareg@xilinx.com} spam: [2003-09-06 04:47:47.281624+00 12.129.199.61] spam: [2003-09-06 05:13:26.810686+00 12.129.199.61] spam: [2003-09-06 05:22:25.002994+00 12.129.199.61] spam: [2003-09-06 19:54:09.804546+00 12.129.199.61] spam: [2003-09-06 20:03:01.260814+00 12.129.199.61] spam: [2003-09-06 20:41:38.7087+00 12.129.199.61] spam: [2003-09-06 20:44:04.341501+00 12.129.199.61] spam: [2003-09-06 21:20:53.648449+00 12.129.199.61] spam: [2003-09-06 21:37:41.394393+00 12.129.199.61] spam: [2003-09-06 21:45:38.576676+00 12.129.199.61] spam: [2003-09-06 21:52:19.2665+00 12.129.199.61] spam: [2003-09-08 03:37:37.819252+00 12.129.199.61] lart: {371138 12.129.199.61 source mailer} lart: {371139 12.129.199.35 dropbox emeareg@xilinx.com} spam: [2003-09-08 03:49:09.575325+00 12.129.199.61] lart: {371175 12.129.199.35 dropbox webmaster@xilinx.com} spam: [2003-09-08 04:03:16.811619+00 12.129.199.61] spam: [2003-09-08 04:24:25.134147+00 12.129.199.61] spam: [2003-09-08 04:26:02.668921+00 12.129.199.61] spam: [2003-09-08 05:15:19.904003+00 12.129.199.61] spam: [2003-09-08 05:38:29.969698+00 12.129.199.61] spam: [2003-09-08 06:10:28.572489+00 12.129.199.61] spam: [2003-09-09 10:14:48.017527+00 12.129.199.61] lart: {374373 12.129.199.61 source mailer} lart: {374374 12.129.199.35 dropbox emeareg@xilinx.com} spam: [2003-09-09 10:20:14.172661+00 12.129.199.61] lart: {374386 12.129.199.35 dropbox seareg@xilinx.com} spam: [2003-09-09 10:44:44.019525+00 12.129.199.61] spam: [2003-09-09 10:50:22.386418+00 12.129.199.61] spam: [2003-09-09 10:54:33.674864+00 12.129.199.61] spam: [2003-09-09 10:59:05.825751+00 12.129.199.61] lart: {374456 12.129.199.35 dropbox usreg@xilinx.com} spam: [2003-09-09 10:59:19.815601+00 12.129.199.61] spam: [2003-09-09 23:04:18.181533+00 12.129.199.61] lart: {375625 63.161.60.2 dropbox usreg@xilinx.com} spam: [2003-09-09 23:16:35.420867+00 12.129.199.61] lart: {375640 63.161.60.2 dropbox webmaster@xilinx.com} spam: [2003-09-09 23:53:36.068581+00 12.129.199.61] lart: {375702 63.161.60.2 dropbox seareg@xilinx.com} spam: [2003-09-10 00:00:05.328099+00 12.129.199.61] lart: {375713 216.148.222.35 dropbox webmaster@xilinx.com} spam: [2003-09-10 01:11:49.146127+00 12.129.199.61] lart: {375846 12.129.199.35 dropbox webmaster@xilinx.com} spam: [2003-09-10 01:53:40.213803+00 12.129.199.61] spam: [2003-09-10 02:14:14.868995+00 12.129.199.61] spam: [2003-09-10 04:28:56.723826+00 12.129.199.61] spam: [2003-09-10 05:34:44.532409+00 12.129.199.61] spam: [2003-09-11 00:17:57.496854+00 12.129.199.61] lart: {378083 12.129.199.61 source mailer} lart: {378084 12.129.199.35 dropbox seareg@xilinx.com} spam: [2003-09-11 02:51:29.35351+00 12.129.199.61] lart: {378322 12.129.199.35 dropbox japanreg@xilinx.com} spam: [2003-09-11 03:32:16.930302+00 12.129.199.61] spam: [2003-09-11 03:36:20.242852+00 12.129.199.61] spam: [2003-09-28 07:55:23.101775+00 12.129.199.61] lart: {418106 12.129.199.61 source mailer} spam: [2003-10-02 17:13:02.729708+00 12.129.199.61] lart: {428543 12.129.199.61 relay mailer} mail: (0 20031002171316.B3C721396F@sa.vix.com) mail: (1 20031002171316.C34F813971@sa.vix.com) lart: {428544 211.91.135.24 website www.luckyhere2.com} spam: [2003-10-04 13:07:44.800083+00 12.129.199.61] lart: {432893 12.129.199.61 source mailer} spam: [2003-10-05 13:32:56.058255+00 12.129.199.61] lart: {435059 12.129.199.61 source mailer} lart: {435060 200.99.17.47 website www.pharma-wholesale.com} spam: [2003-10-18 17:04:33.25787+00 12.129.199.61] lart: {463139 12.129.199.61 source mailer} lart: {463140 12.129.199.35 dropbox postmaster@graycary.com} spam: [2003-12-01 23:58:14.279671+00 12.129.199.61] lart: {543756 12.129.199.61 relay mailer} mail: (0 20031201235832.1086413976@sa.vix.com) lart: {543757 210.242.201.102 website www.wk.com.tw} lart: {543758 204.71.191.237 website member.bcentral.com} lart: {543759 202.3.129.10 website www.1111.com.tw} lart: {543760 61.220.239.20 website www.wkedu.com.tw} lart: {543761 202.1.237.30 website tw.promo.yahoo.com} spam: [2004-02-02 03:04:06.65177+00 12.129.199.61] lart: {714557 12.129.199.61 relay mailer} mail: (0 20040202030432.6E88714C4E@sa.vix.com) lart: {714558 12.129.199.35 dropbox tracy.c.tretiak@monsanto.com} spam: [2004-02-07 17:30:25.477859+00 12.129.199.61] lart: {725860 65.164.226.230 website apps.heritagecoin.com} lart: {725862 204.152.187.1 dropbox dnacu@cix.net} spam: [2004-03-03 19:56:54.016605+00 12.129.199.61] lart: {778478 12.129.199.61 relay mailer} mail: (0 20040303195750.AC36414C51@sa.vix.com) lart: {778479 216.148.222.35 dropbox cameron_sturdevant@ziffdavis.com}