Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > NZ Computing > spam, help wanted

Reply
Thread Tools

spam, help wanted

 
 
Alan C
Guest
Posts: n/a
 
      07-21-2003
Can someone please tell me where this rubbish is originating.
How do I stop it? my address is in - from - to - return

From: jenny smith <>
To: <>
Return-Path: <>
Delivered-To:
Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
with SMTP; 21 Jul 2003 08:39:27 -0000
Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
19eWCd-0002Zq-00 for <>; Mon, 21 Jul 2003
20:39:27 +1200
Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
(Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
20:39:27 +1200
Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
Date: Fri, 18 Jul 2003 17:40:30 -0600
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
Message-Id: <E19eWCc-0007hE->
Delivery-Date: Mon, 21 Jul 2003 21:18:40
X-Account: Ihug
Subject: hey...
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Status: U

Thanks
Alan





 
Reply With Quote
 
 
 
 
Enkidu
Guest
Posts: n/a
 
      07-21-2003

It comes from 220.85.25.203, which doesn't reverse resolve, but
appears to be a Korean address.

Cheers,

Cliff

On Mon, 21 Jul 2003 09:27:03 GMT, Alan C <> wrote:

>Can someone please tell me where this rubbish is originating.
>How do I stop it? my address is in - from - to - return
>
>From: jenny smith <>
>To: <>
>Return-Path: <>
>Delivered-To:
>Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
>Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
> with SMTP; 21 Jul 2003 08:39:27 -0000
>Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> 19eWCd-0002Zq-00 for <>; Mon, 21 Jul 2003
> 20:39:27 +1200
>Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
> (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> 20:39:27 +1200
>Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
>Date: Fri, 18 Jul 2003 17:40:30 -0600
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2600.0000
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
>Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
>Message-Id: <E19eWCc-0007hE->
>Delivery-Date: Mon, 21 Jul 2003 21:18:40
>X-Account: Ihug
>Subject: hey...
>Mime-Version: 1.0
>Content-Type: text/html; charset="iso-8859-1"
>Content-Transfer-Encoding: quoted-printable
>Status: U
>
>Thanks
>Alan
>
>
>
>


--

Signed and sealed with Great Seal of the Executive
Council of the Internet, by The Master of The Net.
 
Reply With Quote
 
 
 
 
Who is this
Guest
Posts: n/a
 
      07-21-2003
In article <>,
Alan C <> wrote:

> From: jenny smith <>
> To: <>
> Return-Path: <>
> Delivered-To:
> Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
> Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
> with SMTP; 21 Jul 2003 08:39:27 -0000
> Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> 19eWCd-0002Zq-00 for <>; Mon, 21 Jul 2003
> 20:39:27 +1200
> Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
> (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> 20:39:27 +1200
> Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> Date: Fri, 18 Jul 2003 17:40:30 -0600
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> Message-Id: <E19eWCc-0007hE->
> Delivery-Date: Mon, 21 Jul 2003 21:18:40
> X-Account: Ihug
> Subject: hey...
> Mime-Version: 1.0
> Content-Type: text/html; charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> Status: U


Spamcop report as follows:

Tracking message source: 220.85.25.203:
Cached masters for 220.85.25.203: support# postmaster# abuse#
Yum, this spam is fresh!
220.85.25.203 not listed in dnsbl.njabl.org
220.85.25.203 not listed in dnsbl.njabl.org
220.85.25.203 not listed in proxies.blackholes.easynet.nl
220.85.25.203 not listed in dnsbl.sorbs.net
220.85.25.203 not listed in relays.ordb.org.
220.85.25.203 not listed in query.bondedsender.org

Would send message source reports to:

Re: 220.85.25.203 (Administrator of network where email originates)

support#
postmaster#
abuse#



Note, now you are on the korean spam lists you will never get off it,
kornet is a spam haven, I get anything up to 20-30 spams a day from them.
You note the devnull in the address, that is an indication by spamcop
that their reports are ignored and its a waste of time complaining.

This is the reason you should NEVER, I repeat NEVER buy anything from a
spammer. This spammer has already forged headers, so the reality is they
will eaily LIE to you again, they have already shown that they and the
crap they sell are dishonest.
My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
that spam HURTS their economy and then maybe they will look at making it
illegal.
 
Reply With Quote
 
Steve
Guest
Posts: n/a
 
      07-21-2003
Enkidu allegedly said:

> It comes from 220.85.25.203, which doesn't reverse resolve, but
> appears to be a Korean address.
>
> Cheers,
>
> Cliff


My mail server refuses to accept any mail at all from any identifiable
Korean IP address that has ever sent me spam.

That kills most of it.

--
Steve

 
Reply With Quote
 
The Flash
Guest
Posts: n/a
 
      07-21-2003
But if you telnet to 220.85.25.123 you can play with some ones jetdirect
printserver in seoul korea.

(password not set)

"Enkidu" <> wrote in message
news:...
>
> It comes from 220.85.25.203, which doesn't reverse resolve, but
> appears to be a Korean address.
>
> Cheers,
>
> Cliff
>
> On Mon, 21 Jul 2003 09:27:03 GMT, Alan C <> wrote:
>
> >Can someone please tell me where this rubbish is originating.
> >How do I stop it? my address is in - from - to - return
> >
> >From: jenny smith <>
> >To: <>
> >Return-Path: <>
> >Delivered-To:
> >Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
> >Received: from scanner1.ihug.co.nz (203.109.254.21) by

baldrick.ihug.co.nz
> > with SMTP; 21 Jul 2003 08:39:27 -0000
> >Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> > scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> > 19eWCd-0002Zq-00 for <>; Mon, 21 Jul 2003
> > 20:39:27 +1200
> >Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with

esmtp
> > (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> > 20:39:27 +1200
> >Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> > MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> >Date: Fri, 18 Jul 2003 17:40:30 -0600
> >X-MSMail-Priority: Normal
> >X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> >Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> >Message-Id: <E19eWCc-0007hE->
> >Delivery-Date: Mon, 21 Jul 2003 21:18:40
> >X-Account: Ihug
> >Subject: hey...
> >Mime-Version: 1.0
> >Content-Type: text/html; charset="iso-8859-1"
> >Content-Transfer-Encoding: quoted-printable
> >Status: U
> >
> >Thanks
> >Alan
> >
> >
> >
> >

>
> --
>
> Signed and sealed with Great Seal of the Executive
> Council of the Internet, by The Master of The Net.



 
Reply With Quote
 
Alan
Guest
Posts: n/a
 
      07-21-2003
On Mon, 21 Jul 2003 21:54:59 +1200, Who is this <> wrote:
> In article <>,
> Alan C <> wrote:
>
> > From: jenny smith <>
> > To: <>
> > Return-Path: <>
> > Delivered-To:
> > Received: (qmail 14599 invoked from network); 21 Jul 2003 08:39:27 -0000
> > Received: from scanner1.ihug.co.nz (203.109.254.21) by baldrick.ihug.co.nz
> > with SMTP; 21 Jul 2003 08:39:27 -0000
> > Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> > scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> > 19eWCd-0002Zq-00 for <>; Mon, 21 Jul 2003
> > 20:39:27 +1200
> > Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with esmtp
> > (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> > 20:39:27 +1200
> > Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> > MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> > Date: Fri, 18 Jul 2003 17:40:30 -0600
> > X-MSMail-Priority: Normal
> > X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> > Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> > Message-Id: <E19eWCc-0007hE->
> > Delivery-Date: Mon, 21 Jul 2003 21:18:40
> > X-Account: Ihug
> > Subject: hey...
> > Mime-Version: 1.0
> > Content-Type: text/html; charset="iso-8859-1"
> > Content-Transfer-Encoding: quoted-printable
> > Status: U

>
> Spamcop report as follows:
>
> Tracking message source: 220.85.25.203:
> Cached masters for 220.85.25.203: support#

postmaster# abuse#

> Yum, this spam is fresh!
> 220.85.25.203 not listed in dnsbl.njabl.org
> 220.85.25.203 not listed in dnsbl.njabl.org
> 220.85.25.203 not listed in proxies.blackholes.easynet.nl
> 220.85.25.203 not listed in dnsbl.sorbs.net
> 220.85.25.203 not listed in relays.ordb.org.
> 220.85.25.203 not listed in query.bondedsender.org
>
> Would send message source reports to:
>
> Re: 220.85.25.203 (Administrator of network where email originates)
>
> support#
> postmaster#
> abuse#
>
>
>
> Note, now you are on the korean spam lists you will never get off it,
> kornet is a spam haven, I get anything up to 20-30 spams a day from them.
> You note the devnull in the address, that is an indication by spamcop
> that their reports are ignored and its a waste of time complaining.
>
> This is the reason you should NEVER, I repeat NEVER buy anything from a
> spammer. This spammer has already forged headers, so the reality is they
> will eaily LIE to you again, they have already shown that they and the
> crap they sell are dishonest.
> My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
> that spam HURTS their economy and then maybe they will look at making it
> illegal.


Thanks to all for the advice.
Having never purchased anything at all, where do they find my address?
More to the point how do I block it all? There are up to 5-6 different subjects every day

Regards
A



 
Reply With Quote
 
Allistar
Guest
Posts: n/a
 
      07-21-2003
Alan wrote:

> On Mon, 21 Jul 2003 21:54:59 +1200, Who is this <> wrote:
>> In article <>,
>> Alan C <> wrote:


[snip]

>> Note, now you are on the korean spam lists you will never get off it,
>> kornet is a spam haven, I get anything up to 20-30 spams a day from them.
>> You note the devnull in the address, that is an indication by spamcop
>> that their reports are ignored and its a waste of time complaining.
>>
>> This is the reason you should NEVER, I repeat NEVER buy anything from a
>> spammer. This spammer has already forged headers, so the reality is they
>> will eaily LIE to you again, they have already shown that they and the
>> crap they sell are dishonest.
>> My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
>> that spam HURTS their economy and then maybe they will look at making it
>> illegal.

>
> Thanks to all for the advice.
> Having never purchased anything at all, where do they find my address?
> More to the point how do I block it all? There are up to 5-6 different
> subjects every day


You seem to be using a valid email address in these newsgroup postings. That
is where they get it from, with applications that search postings looking
for email addresses. I think that is one of the main ways to end up on
their lists.

Allistar.


 
Reply With Quote
 
Foo
Guest
Posts: n/a
 
      07-21-2003
There is a good programme - Cloudmark which eliminates a lot of spam - of
course you will still get the spam, it justs fans a lot of it into a spam
folder.

check out http://www.cloudmark.com

Cheers

Foo

"Alan" <> wrote in message
news:...
> On Mon, 21 Jul 2003 21:54:59 +1200, Who is this <> wrote:
> > In article <>,
> > Alan C <> wrote:
> >
> > > From: jenny smith <>
> > > To: <>
> > > Return-Path: <>
> > > Delivered-To:
> > > Received: (qmail 14599 invoked from network); 21 Jul 2003

08:39:27 -0000
> > > Received: from scanner1.ihug.co.nz (203.109.254.21) by

baldrick.ihug.co.nz
> > > with SMTP; 21 Jul 2003 08:39:27 -0000
> > > Received: from localhost ([127.0.0.1] helo=grunt2.ihug.co.nz) by
> > > scanner1.ihug.co.nz with esmtp (Exim 3.12 #1 (Debian)) id
> > > 19eWCd-0002Zq-00 for <>; Mon, 21 Jul

2003
> > > 20:39:27 +1200
> > > Received: from (ihug.co.nz) [220.85.25.203] by grunt2.ihug.co.nz with

esmtp
> > > (Exim 3.35 #1 (Debian)) id 19eWCc-0007hE-00; Mon, 21 Jul 2003
> > > 20:39:27 +1200
> > > Received: from MISS-SSONG [220.85.25.203] by ihug.co.nz with
> > > MailMXPro(2195.5290); Fri, 18 Jul 2003 17:40:30 -0600
> > > Date: Fri, 18 Jul 2003 17:40:30 -0600
> > > X-MSMail-Priority: Normal
> > > X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
> > > Abuse-Tracking: <WVd4amFHRkFhV2gxWnk1amJ5NXVlZz09>
> > > Message-Id: <E19eWCc-0007hE->
> > > Delivery-Date: Mon, 21 Jul 2003 21:18:40
> > > X-Account: Ihug
> > > Subject: hey...
> > > Mime-Version: 1.0
> > > Content-Type: text/html; charset="iso-8859-1"
> > > Content-Transfer-Encoding: quoted-printable
> > > Status: U

> >
> > Spamcop report as follows:
> >
> > Tracking message source: 220.85.25.203:
> > Cached masters for 220.85.25.203: support#

> postmaster#

abuse#
>
> > Yum, this spam is fresh!
> > 220.85.25.203 not listed in dnsbl.njabl.org
> > 220.85.25.203 not listed in dnsbl.njabl.org
> > 220.85.25.203 not listed in proxies.blackholes.easynet.nl
> > 220.85.25.203 not listed in dnsbl.sorbs.net
> > 220.85.25.203 not listed in relays.ordb.org.
> > 220.85.25.203 not listed in query.bondedsender.org
> >
> > Would send message source reports to:
> >
> > Re: 220.85.25.203 (Administrator of network where email originates)
> >
> > support#
> > postmaster#
> > abuse#
> >
> >
> >
> > Note, now you are on the korean spam lists you will never get off it,
> > kornet is a spam haven, I get anything up to 20-30 spams a day from

them.
> > You note the devnull in the address, that is an indication by spamcop
> > that their reports are ignored and its a waste of time complaining.
> >
> > This is the reason you should NEVER, I repeat NEVER buy anything from a
> > spammer. This spammer has already forged headers, so the reality is they
> > will eaily LIE to you again, they have already shown that they and the
> > crap they sell are dishonest.
> > My response is to STOP BUYING ANYTHING MADE IN KOREA, show the wankers
> > that spam HURTS their economy and then maybe they will look at making it
> > illegal.

>
> Thanks to all for the advice.
> Having never purchased anything at all, where do they find my address?
> More to the point how do I block it all? There are up to 5-6 different

subjects every day
>
> Regards
> A
>
>
>



 
Reply With Quote
 
Peter Murray
Guest
Posts: n/a
 
      07-21-2003

"T.N.O." <> wrote in message
news: om...
> "The Flash" wrote
> > But if you telnet to 220.85.25.123 you can play with some ones jetdirect
> > printserver in seoul korea.
> >
> > (password not set)

>
> It is for an HP LJ 5000 Series
> http://220.85.25.123/
> Been up for almost 42 days too.


Does it belong to a spammer? Can you print to it?


 
Reply With Quote
 
forensic analysis
Guest
Posts: n/a
 
      07-21-2003

"Alan" <> wrote in message
news:...

> Thanks to all for the advice.
> Having never purchased anything at all, where do they find my address?
> More to the point how do I block it all? There are up to 5-6 different

subjects every day

You could try SpamPal (www.spampal.org).

It's a small program that acts as an intermediary between your email client
and ISP. Basically, it checks the source of the emails against DNSBL
listings, and tags those emails that deemed spam.

Once installed, you can configure your client to "Delete from Server" any
offending emails, so you won't even has to waste time and bandwidth
downloading them.

Some ISP's charge for a similar service to this program, but this is FREE.


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
WANTED: AT desktop cases, wanted for sculpture. Brett NZ Computing 0 09-09-2004 07:14 AM
HELP WANTED HELP WANTED HELP WANTED Harvey ASP .Net 1 07-16-2004 01:12 PM
HELP WANTED HELP WANTED HELP WANTED Harvey ASP .Net 0 07-16-2004 10:00 AM
Excel help wanted Richard Coulthard Microsoft Certification 1 03-06-2004 03:25 AM
Re: Cisco 837 Combination Public and Private Addresses - Help Wanted Erik Tamminga Cisco 0 07-25-2003 11:53 AM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57