Velocity Reviews

Velocity Reviews (http://www.velocityreviews.com/forums/index.php)
-   NZ Computing (http://www.velocityreviews.com/forums/f47-nz-computing.html)
-   -   spam, help wanted (http://www.velocityreviews.com/forums/t566659-spam-help-wanted.html)

Alan C 07-21-2003 09:27 AM

spam, help wanted
 
Can someone please tell me where this rubbish is originating.
How do I stop it? my address is in - from - to - return

From: jenny smith <xxxha@ihug.co.nz>
To: <xxxha@ihug.co.nz>
Return-Path: <xxxha@ihug.co.nz>
Delivered-To: xxxha@backend.pop.ihug.co.nz
Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
with SMTP; 21 Jul 2003 08:39:27 -0000
Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
19eWCd-0002Zq-00 for <xxxha@scanner.ihug.co.nz>; Mon, 21 Jul 2003
20:39:27 +1200
Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
(Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
20:39:27 +1200
Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
Date: Fri, 18 Jul 2003 17:40:30 -0600
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
Message-Id: <E19eWCc-0007hE-00@grunt2.ihug.co.nz>
Delivery-Date: Mon, 21 Jul 2003 21:18:40
X-Account: Ihug
Subject: hey...
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Status: U

Thanks
Alan






Enkidu 07-21-2003 09:49 AM

Re: spam, help wanted
 

It comes from 220.85.25.203, which doesn't reverse resolve, but
appears to be a Korean address.

Cheers,

Cliff

On Mon, 21 Jul 2003 09:27:03 GMT, Alan C <cats@free.net.nz> wrote:

>Can someone please tell me where this rubbish is originating.
>How do I stop it? my address is in - from - to - return
>
>From: jenny smith <xxxha@ihug.co.nz>
>To: <xxxha@ihug.co.nz>
>Return-Path: <xxxha@ihug.co.nz>
>Delivered-To: xxxha@backend.pop.ihug.co.nz
>Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
>Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
> with SMTP; 21 Jul 2003 08:39:27 -0000
>Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> 19eWCd-0002Zq-00 for <xxxha@scanner.ihug.co.nz>; Mon, 21 Jul 2003
> 20:39:27 +1200
>Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
> (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> 20:39:27 +1200
>Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
>Date: Fri, 18 Jul 2003 17:40:30 -0600
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2600.0000
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
>Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
>Message-Id: <E19eWCc-0007hE-00@grunt2.ihug.co.nz>
>Delivery-Date: Mon, 21 Jul 2003 21:18:40
>X-Account: Ihug
>Subject: hey...
>Mime-Version: 1.0
>Content-Type: text/html; charset="iso-8859-1"
>Content-Transfer-Encoding: quoted-printable
>Status: U
>
>Thanks
>Alan
>
>
>
>


--

Signed and sealed with Great Seal of the Executive
Council of the Internet, by The Master of The Net.

Who is this 07-21-2003 09:54 AM

Re: spam, help wanted
 
In article <1103_1058779623@news.akl.ihug.co.nz>,
Alan C <cats@free.net.nz> wrote:

> From: jenny smith <xxxha@ihug.co.nz>
> To: <xxxha@ihug.co.nz>
> Return-Path: <xxxha@ihug.co.nz>
> Delivered-To: xxxha@backend.pop.ihug.co.nz
> Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
> Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
> with SMTP; 21 Jul 2003 08:39:27 -0000
> Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> 19eWCd-0002Zq-00 for <xxxha@scanner.ihug.co.nz>; Mon, 21 Jul 2003
> 20:39:27 +1200
> Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
> (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> 20:39:27 +1200
> Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> Date: Fri, 18 Jul 2003 17:40:30 -0600
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> Message-Id: <E19eWCc-0007hE-00@grunt2.ihug.co.nz>
> Delivery-Date: Mon, 21 Jul 2003 21:18:40
> X-Account: Ihug
> Subject: hey...
> Mime-Version: 1.0
> Content-Type: text/html; charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> Status: U


Spamcop report as follows:

Tracking message source: 220.85.25.203:
Cached masters for 220.85.25.203: support#kornet.net@devnull.spamcop.net postmaster#kornet.net@devnull.spamcop.net abuse#kornet.net@devnull.spamcop.net spamrelay@certcc.or.kr
Yum, this spam is fresh!
220.85.25.203 not listed in dnsbl.njabl.org
220.85.25.203 not listed in dnsbl.njabl.org
220.85.25.203 not listed in proxies.blackholes.easynet.nl
220.85.25.203 not listed in dnsbl.sorbs.net
220.85.25.203 not listed in relays.ordb.org.
220.85.25.203 not listed in query.bondedsender.org

Would send message source reports to:

Re: 220.85.25.203 (Administrator of network where email originates)

support#kornet.net@devnull.spamcop.net
postmaster#kornet.net@devnull.spamcop.net
abuse#kornet.net@devnull.spamcop.net
spamrelay@certcc.or.kr


Note, now you are on the korean spam lists you will never get off it,
kornet is a spam haven, I get anything up to 20-30 spams a day from them.
You note the devnull in the address, that is an indication by spamcop
that their reports are ignored and its a waste of time complaining.

This is the reason you should NEVER, I repeat NEVER buy anything from a
spammer. This spammer has already forged headers, so the reality is they
will eaily LIE to you again, they have already shown that they and the
crap they sell are dishonest.
My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
that spam HURTS their economy and then maybe they will look at making it
illegal.

Steve 07-21-2003 10:38 AM

Re: spam, help wanted
 
Enkidu allegedly said:

> It comes from 220.85.25.203, which doesn't reverse resolve, but
> appears to be a Korean address.
>
> Cheers,
>
> Cliff


My mail server refuses to accept any mail at all from any identifiable
Korean IP address that has ever sent me spam.

That kills most of it.

--
Steve


The Flash 07-21-2003 12:19 PM

Re: spam, help wanted
 
But if you telnet to 220.85.25.123 you can play with some ones jetdirect
printserver in seoul korea.

(password not set)

"Enkidu" <enkidu@cliffp.com> wrote in message
news:nndnhvon49hrcogiev1k4auc1rp15lr6hh@4ax.com...
>
> It comes from 220.85.25.203, which doesn't reverse resolve, but
> appears to be a Korean address.
>
> Cheers,
>
> Cliff
>
> On Mon, 21 Jul 2003 09:27:03 GMT, Alan C <cats@free.net.nz> wrote:
>
> >Can someone please tell me where this rubbish is originating.
> >How do I stop it? my address is in - from - to - return
> >
> >From: jenny smith <xxxha@ihug.co.nz>
> >To: <xxxha@ihug.co.nz>
> >Return-Path: <xxxha@ihug.co.nz>
> >Delivered-To: xxxha@backend.pop.ihug.co.nz
> >Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
> >Received: from scanner1.ihug.co.nz (203.109.254.21) by

baldrick.ihug.co.nz
> > with SMTP; 21 Jul 2003 08:39:27 -0000
> >Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> > scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> > 19eWCd-0002Zq-00 for <xxxha@scanner.ihug.co.nz>; Mon, 21 Jul 2003
> > 20:39:27 +1200
> >Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with

esmtp
> > (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> > 20:39:27 +1200
> >Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> > MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> >Date: Fri, 18 Jul 2003 17:40:30 -0600
> >X-MSMail-Priority: Normal
> >X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> >Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> >Message-Id: <E19eWCc-0007hE-00@grunt2.ihug.co.nz>
> >Delivery-Date: Mon, 21 Jul 2003 21:18:40
> >X-Account: Ihug
> >Subject: hey...
> >Mime-Version: 1.0
> >Content-Type: text/html; charset="iso-8859-1"
> >Content-Transfer-Encoding: quoted-printable
> >Status: U
> >
> >Thanks
> >Alan
> >
> >
> >
> >

>
> --
>
> Signed and sealed with Great Seal of the Executive
> Council of the Internet, by The Master of The Net.




Alan 07-21-2003 09:08 PM

Re: spam, help wanted
 
On Mon, 21 Jul 2003 21:54:59 +1200, Who is this <who@is.this> wrote:
> In article <1103_1058779623@news.akl.ihug.co.nz>,
> Alan C <cats@free.net.nz> wrote:
>
> > From: jenny smith <xxxha@ihug.co.nz>
> > To: <xxxha@ihug.co.nz>
> > Return-Path: <xxxha@ihug.co.nz>
> > Delivered-To: xxxha@backend.pop.ihug.co.nz
> > Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
> > Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
> > with SMTP; 21 Jul 2003 08:39:27 -0000
> > Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> > scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> > 19eWCd-0002Zq-00 for <xxxha@scanner.ihug.co.nz>; Mon, 21 Jul 2003
> > 20:39:27 +1200
> > Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
> > (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> > 20:39:27 +1200
> > Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> > MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> > Date: Fri, 18 Jul 2003 17:40:30 -0600
> > X-MSMail-Priority: Normal
> > X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> > Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> > Message-Id: <E19eWCc-0007hE-00@grunt2.ihug.co.nz>
> > Delivery-Date: Mon, 21 Jul 2003 21:18:40
> > X-Account: Ihug
> > Subject: hey...
> > Mime-Version: 1.0
> > Content-Type: text/html; charset="iso-8859-1"
> > Content-Transfer-Encoding: quoted-printable
> > Status: U

>
> Spamcop report as follows:
>
> Tracking message source: 220.85.25.203:
> Cached masters for 220.85.25.203: support#kornet.net@devnull.spamcop.net

postmaster#kornet.net@devnull.spamcop.net abuse#kornet.net@devnull.spamcop.net
spamrelay@certcc.or.kr
> Yum, this spam is fresh!
> 220.85.25.203 not listed in dnsbl.njabl.org
> 220.85.25.203 not listed in dnsbl.njabl.org
> 220.85.25.203 not listed in proxies.blackholes.easynet.nl
> 220.85.25.203 not listed in dnsbl.sorbs.net
> 220.85.25.203 not listed in relays.ordb.org.
> 220.85.25.203 not listed in query.bondedsender.org
>
> Would send message source reports to:
>
> Re: 220.85.25.203 (Administrator of network where email originates)
>
> support#kornet.net@devnull.spamcop.net
> postmaster#kornet.net@devnull.spamcop.net
> abuse#kornet.net@devnull.spamcop.net
> spamrelay@certcc.or.kr
>
>
> Note, now you are on the korean spam lists you will never get off it,
> kornet is a spam haven, I get anything up to 20-30 spams a day from them.
> You note the devnull in the address, that is an indication by spamcop
> that their reports are ignored and its a waste of time complaining.
>
> This is the reason you should NEVER, I repeat NEVER buy anything from a
> spammer. This spammer has already forged headers, so the reality is they
> will eaily LIE to you again, they have already shown that they and the
> crap they sell are dishonest.
> My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
> that spam HURTS their economy and then maybe they will look at making it
> illegal.


Thanks to all for the advice.
Having never purchased anything at all, where do they find my address?
More to the point how do I block it all? There are up to 5-6 different subjects every day

Regards
A




Allistar 07-21-2003 09:52 PM

Re: spam, help wanted
 
Alan wrote:

> On Mon, 21 Jul 2003 21:54:59 +1200, Who is this <who@is.this> wrote:
>> In article <1103_1058779623@news.akl.ihug.co.nz>,
>> Alan C <cats@free.net.nz> wrote:


[snip]

>> Note, now you are on the korean spam lists you will never get off it,
>> kornet is a spam haven, I get anything up to 20-30 spams a day from them.
>> You note the devnull in the address, that is an indication by spamcop
>> that their reports are ignored and its a waste of time complaining.
>>
>> This is the reason you should NEVER, I repeat NEVER buy anything from a
>> spammer. This spammer has already forged headers, so the reality is they
>> will eaily LIE to you again, they have already shown that they and the
>> crap they sell are dishonest.
>> My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
>> that spam HURTS their economy and then maybe they will look at making it
>> illegal.

>
> Thanks to all for the advice.
> Having never purchased anything at all, where do they find my address?
> More to the point how do I block it all? There are up to 5-6 different
> subjects every day


You seem to be using a valid email address in these newsgroup postings. That
is where they get it from, with applications that search postings looking
for email addresses. I think that is one of the main ways to end up on
their lists.

Allistar.



Foo 07-21-2003 09:59 PM

Re: spam, help wanted
 
There is a good programme - Cloudmark which eliminates a lot of spam - of
course you will still get the spam, it justs fans a lot of it into a spam
folder.

check out http://www.cloudmark.com

Cheers

Foo

"Alan" <alcha@ihug.co.nz> wrote in message
news:1103_1058821739@news.akl.ihug.co.nz...
> On Mon, 21 Jul 2003 21:54:59 +1200, Who is this <who@is.this> wrote:
> > In article <1103_1058779623@news.akl.ihug.co.nz>,
> > Alan C <cats@free.net.nz> wrote:
> >
> > > From: jenny smith <xxxha@ihug.co.nz>
> > > To: <xxxha@ihug.co.nz>
> > > Return-Path: <xxxha@ihug.co.nz>
> > > Delivered-To: xxxha@backend.pop.ihug.co.nz
> > > Received: (qmail 14599 invoked from network); 21 Jul 2003

08:39:27 -0000
> > > Received: from scanner1.ihug.co.nz (203.109.254.21) by

baldrick.ihug.co.nz
> > > with SMTP; 21 Jul 2003 08:39:27 -0000
> > > Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> > > scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> > > 19eWCd-0002Zq-00 for <xxxha@scanner.ihug.co.nz>; Mon, 21 Jul

2003
> > > 20:39:27 +1200
> > > Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with

esmtp
> > > (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> > > 20:39:27 +1200
> > > Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> > > MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> > > Date: Fri, 18 Jul 2003 17:40:30 -0600
> > > X-MSMail-Priority: Normal
> > > X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> > > Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> > > Message-Id: <E19eWCc-0007hE-00@grunt2.ihug.co.nz>
> > > Delivery-Date: Mon, 21 Jul 2003 21:18:40
> > > X-Account: Ihug
> > > Subject: hey...
> > > Mime-Version: 1.0
> > > Content-Type: text/html; charset="iso-8859-1"
> > > Content-Transfer-Encoding: quoted-printable
> > > Status: U

> >
> > Spamcop report as follows:
> >
> > Tracking message source: 220.85.25.203:
> > Cached masters for 220.85.25.203: support#kornet.net@devnull.spamcop.net

> postmaster#kornet.net@devnull.spamcop.net

abuse#kornet.net@devnull.spamcop.net
> spamrelay@certcc.or.kr
> > Yum, this spam is fresh!
> > 220.85.25.203 not listed in dnsbl.njabl.org
> > 220.85.25.203 not listed in dnsbl.njabl.org
> > 220.85.25.203 not listed in proxies.blackholes.easynet.nl
> > 220.85.25.203 not listed in dnsbl.sorbs.net
> > 220.85.25.203 not listed in relays.ordb.org.
> > 220.85.25.203 not listed in query.bondedsender.org
> >
> > Would send message source reports to:
> >
> > Re: 220.85.25.203 (Administrator of network where email originates)
> >
> > support#kornet.net@devnull.spamcop.net
> > postmaster#kornet.net@devnull.spamcop.net
> > abuse#kornet.net@devnull.spamcop.net
> > spamrelay@certcc.or.kr
> >
> >
> > Note, now you are on the korean spam lists you will never get off it,
> > kornet is a spam haven, I get anything up to 20-30 spams a day from

them.
> > You note the devnull in the address, that is an indication by spamcop
> > that their reports are ignored and its a waste of time complaining.
> >
> > This is the reason you should NEVER, I repeat NEVER buy anything from a
> > spammer. This spammer has already forged headers, so the reality is they
> > will eaily LIE to you again, they have already shown that they and the
> > crap they sell are dishonest.
> > My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
> > that spam HURTS their economy and then maybe they will look at making it
> > illegal.

>
> Thanks to all for the advice.
> Having never purchased anything at all, where do they find my address?
> More to the point how do I block it all? There are up to 5-6 different

subjects every day
>
> Regards
> A
>
>
>




Peter Murray 07-21-2003 11:28 PM

Re: spam, help wanted
 

"T.N.O." <nntp@dave.net.nz> wrote in message
news:76948dfb.0307211517.6d8ce1fc@posting.google.c om...
> "The Flash" wrote
> > But if you telnet to 220.85.25.123 you can play with some ones jetdirect
> > printserver in seoul korea.
> >
> > (password not set)

>
> It is for an HP LJ 5000 Series
> http://220.85.25.123/
> Been up for almost 42 days too.


Does it belong to a spammer? Can you print to it?



forensic analysis 07-21-2003 11:29 PM

Re: spam, help wanted
 

"Alan" <alcha@ihug.co.nz> wrote in message
news:1103_1058821739@news.akl.ihug.co.nz...

> Thanks to all for the advice.
> Having never purchased anything at all, where do they find my address?
> More to the point how do I block it all? There are up to 5-6 different

subjects every day

You could try SpamPal (www.spampal.org).

It's a small program that acts as an intermediary between your email client
and ISP. Basically, it checks the source of the emails against DNSBL
listings, and tags those emails that deemed spam.

Once installed, you can configure your client to "Delete from Server" any
offending emails, so you won't even has to waste time and bandwidth
downloading them.

Some ISP's charge for a similar service to this program, but this is FREE.




All times are GMT. The time now is 04:39 PM.

Powered by vBulletin®. Copyright ©2000 - 2014, vBulletin Solutions, Inc.
SEO by vBSEO ©2010, Crawlability, Inc.