101 reasons not to use your real email addy in nz newsgroups
 

Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
<red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]


Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
<red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]

regards

Thing

Re: 101 reasons not to use your real email addy in nz newsgroups
 

thing wrote:
> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]

> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]

101? I only see 2 :)

--
Dave Hall
http://www.dave.net.nz
http://www.karyn.net.nz

Re: 101 reasons not to use your real email addy in nz newsgroups
 

Dave - Dave.net.nz wrote:
> thing wrote:
>
>> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
>> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>
>
>> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
>> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>
>
> 101? I only see 2 :)
>

I can post more logs if you want....

:P

regards

Thing

Re: 101 reasons not to use your real email addy in nz newsgroups
 

thing wrote:
> Dave - Dave.net.nz wrote:
>
>> thing wrote:
>>
>>> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
>>> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>
>>
>>
>>> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
>>> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>
>>
>>
>> 101? I only see 2 :)
>>
>
> I can post more logs if you want....
>
> :P
>
> regards
>
> Thing
>

Registrant:
Western Horizon Technologies
5513 Azure Ridge Drive
Las Vegas, NV 89130
US

Registrar: DOTSTER
Domain Name: LIZARDHILL.COM
Created on: 31-AUG-99
Expires on: 31-AUG-05
Last Updated on: 25-JUL-03

Administrative, Technical Contact:
O'Neil, Don admin@whtech.com
Western Horizon Technologies
5513 Azure Ridge Drive
Las Vegas, NV 89130
US
702-645-6004


Domain servers in listed order:
NS1.LIZARDHILL.COM
NS2.LIZARDHILL.COM

Wonder if the site has been hacked or if its a spammer site.....

regards

thing

Re: 101 reasons not to use your real email addy in nz newsgroups
 

On Fri, 29 Oct 2004 06:50:58 +1300, thing
<red.is.nutty.as.afruitcake@thing.dyndns.org> wrote:

>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
><red.is.nutty.as.afruitcake@thing.dyndns.org>.. . User unknown
>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>
>
>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
><red.is.nutty.as.afruitcake@thing.dyndns.org>.. . User unknown
>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]

Excuse my ignorance, but what do the logs show? Is this somebody
trying to attack your computer, or to spam you? If your email address
was munged, how did you get the log - is thing.dyndns.org a real
domain?

Re: 101 reasons not to use your real email addy in nz newsgroups
 

Sue Bilstein wrote:
> On Fri, 29 Oct 2004 06:50:58 +1300, thing
> <red.is.nutty.as.afruitcake@thing.dyndns.org> wrote:
>
>
>>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>><red.is.nutty.as.afruitcake@thing.dyndns.org>. .. User unknown
>>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>
>>
>>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>><red.is.nutty.as.afruitcake@thing.dyndns.org>. .. User unknown
>>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>
>
> Excuse my ignorance, but what do the logs show? Is this somebody
> trying to attack your computer, or to spam you? If your email address
> was munged, how did you get the log - is thing.dyndns.org a real
> domain?

try doing a nslookup on thing.dyndns.org

Non-authoritative answer:
Name: thing.dyndns.org
Address: 203.96.144.72

Although the domain has no MX records so mail servers should not be
sending to it anyway. The logs simply show someone trying to deliver an
email to that address, not much to it really, obviously the person is
running the server or has access to the logs.

Regards,
Stuart

Re: 101 reasons not to use your real email addy in nz newsgroups
 

Sue Bilstein wrote:
> On Fri, 29 Oct 2004 06:50:58 +1300, thing
> <red.is.nutty.as.afruitcake@thing.dyndns.org> wrote:
>
>
>>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>><red.is.nutty.as.afruitcake@thing.dyndns.org>. .. User unknown
>>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>
>>
>>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>><red.is.nutty.as.afruitcake@thing.dyndns.org>. .. User unknown
>>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>
>
> Excuse my ignorance, but what do the logs show? Is this somebody
> trying to attack your computer, or to spam you?

Yes, spamming me based on an user@address only used in nz.comp,
nz.politics or nz.general.

If your email address
> was munged, how did you get the log - is thing.dyndns.org a real
> domain?

yes, but the user does not exist, so it bounces back as a non-existant
user. That is a sample from my mail server logs, I set it as a spam trap.

regards

Thing

Re: 101 reasons not to use your real email addy in nz newsgroups
 

Hmmm wrote:
> Sue Bilstein wrote:
>
>> On Fri, 29 Oct 2004 06:50:58 +1300, thing
>> <red.is.nutty.as.afruitcake@thing.dyndns.org> wrote:
>>
>>
>>> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
>>> Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>>
>>>
>>> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>> <red.is.nutty.as.afruitcake@thing.dyndns.org>... User unknown
>>> Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>> from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>> daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>
>>
>>
>> Excuse my ignorance, but what do the logs show? Is this somebody
>> trying to attack your computer, or to spam you? If your email address
>> was munged, how did you get the log - is thing.dyndns.org a real
>> domain?
>
>
> try doing a nslookup on thing.dyndns.org
>
> Non-authoritative answer:
> Name: thing.dyndns.org
> Address: 203.96.144.72
>
> Although the domain has no MX records so mail servers should not be
> sending to it anyway. The logs simply show someone trying to deliver an
> email to that address, not much to it really, obviously the person is
> running the server or has access to the logs.
>
> Regards,
> Stuart
>
>

Yes, email has worked fine for 5 years, it has a wildcard setting in
DNS, seems to work fine. Interesting how quickly it picked up the email
address out of the NZ news groups.

regards

Thing

Re: 101 reasons not to use your real email addy in nz newsgroups
 

Sue Bilstein <sue_bilstein@yahoop.com> wrote in message news:<svr2o0tnl2lmrvctn3makb5m8bmt47athq@4ax.com>. ..
> On Fri, 29 Oct 2004 06:50:58 +1300, thing
> <red.is.nutty.as.afruitcake@thing.dyndns.org> wrote:
>
> >Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
> ><red.is.nutty.as.afruitcake@thing.dyndns.org>.. . User unknown
> >Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
> >from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
> >daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
> >
> >
> >Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
> ><red.is.nutty.as.afruitcake@thing.dyndns.org>.. . User unknown
> >Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
> >from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
> >daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>
> Excuse my ignorance, but what do the logs show? Is this somebody
> trying to attack your computer, or to spam you? If your email address
> was munged, how did you get the log - is thing.dyndns.org a real
> domain?

By the look of it some-one was doing a port scan and filled his firewall log..

Re: 101 reasons not to use your real email addy in nz newsgroups
 

George wrote:
> Sue Bilstein <sue_bilstein@yahoop.com> wrote in message news:<svr2o0tnl2lmrvctn3makb5m8bmt47athq@4ax.com>. ..
>
>>On Fri, 29 Oct 2004 06:50:58 +1300, thing
>><red.is.nutty.as.afruitcake@thing.dyndns.org> wrote:
>>
>>
>>>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>><red.is.nutty.as.afruitcake@thing.dyndns.org>.. . User unknown
>>>Oct 29 06:30:17 katrina sm-mta[3246]: i9SHUGPO003246:
>>>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>>
>>>
>>>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>><red.is.nutty.as.afruitcake@thing.dyndns.org>.. . User unknown
>>>Oct 29 06:41:04 katrina sm-mta[3277]: i9SHf3PO003277:
>>>from=<root@lizardhill.com>, size=0, class=0, nrcpts=0, proto=SMTP,
>>>daemon=MTA, relay=bigbird.whtech.com [64.125.72.2]
>>
>>Excuse my ignorance, but what do the logs show? Is this somebody
>>trying to attack your computer, or to spam you? If your email address
>>was munged, how did you get the log - is thing.dyndns.org a real
>>domain?
>
>
> By the look of it some-one was doing a port scan and filled his firewall log..


no,

"katrina sm-mta", mta is a email server. Someone has been sending me
spam with a false account/user ID only posted in NZ. groups. I was
trying to warn people off using a real account/user name, I should have
been more clear when showing an example.....

I have another even older one ms"at"thing.dyndns.org is also now picking
up spam but only recently, so it looks like someone did some google
searching in September, pre-1st Oct anyway as that is how far my logs go
back, but I only started using red.is.nutty recently.

regards

Thing