Is this normal internet behavior?

Discussion in 'Computer Security' started by Bluuuue Rajah, Jul 9, 2009.

  1. I'm stlowly starting to zero in on my stalker, but I've noticed that the
    "Path" line in his headers are not always the same. Am I correct in
    assuming that this just represents the normal internet behavior of messages
    taking different paths to their destination, or could it also mean that
    he's using more than one newsfeed, to cover his trail?
     
    Bluuuue Rajah, Jul 9, 2009
    #1
    1. Advertising

  2. Bluuuue Rajah

    FrozenNorth Guest

    Bluuuue Rajah wrote:
    > I'm stlowly starting to zero in on my stalker, but I've noticed that the
    > "Path" line in his headers are not always the same. Am I correct in
    > assuming that this just represents the normal internet behavior of messages
    > taking different paths to their destination, or could it also mean that
    > he's using more than one newsfeed, to cover his trail?


    They read right to left, unless it is preloaded with fake info.
    But generally yes, different messages can take different routes, depends
    upon peering arrangements each server has.

    --
    Froz...
     
    FrozenNorth, Jul 9, 2009
    #2
    1. Advertising

  3. Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    of<Xns9C42CC4BB69DAlkajehoriuasldfjknak@207.115.17.102>:

    >
    > I'm stlowly starting to zero in on my stalker, but I've noticed that

    the
    > "Path" line in his headers are not always the same.


    If they use Tor, you're screw'd. (this assumes you do not have a BBF at
    NSA)
    If they preload the path, you're screw'd. (time to make a BFF at NSA?)


    Am I correct in
    > assuming that this just represents the normal internet behavior of

    messages
    > taking different paths to their destination, or could it also mean

    that
    > he's using more than one newsfeed, to cover his trail?
    >


    Moiltiple accounts iz teh norm for us SMAPPERZ, d00d.

    HTH
    HAND

    ^_^

    --
    http://www.youtube.com/watch?v=COaoYqkpkUA
    cageprisoners.com|www.snuhwolf.9f.com|www.eyeonpalin.org
    _____ ____ ____ __ /\_/\ __ _ ______ _____
    / __/ |/ / / / / // // . . \\ \ |\ | / __ \ \ \ __\
    _\ \/ / /_/ / _ / \ / \ \| \| \ \_\ \ \__\ _\
    /___/_/|_/\____/_//_/ \_@_/ \__|\__|\____/\____\_\
     
    §ñühw¤£f, Jul 9, 2009
    #3
  4. §ñühw¤£f <> wrote in
    news:h34sij$2g7$-september.org:

    > Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    > of<Xns9C42CC4BB69DAlkajehoriuasldfjknak@207.115.17.102>:
    >
    >>
    >> I'm stlowly starting to zero in on my stalker, but I've noticed that

    > the
    >> "Path" line in his headers are not always the same.

    >
    > If they use Tor, you're screw'd. (this assumes you do not have a BBF
    > at NSA)
    > If they preload the path, you're screw'd. (time to make a BFF at NSA?)
    >
    >
    > Am I correct in
    >> assuming that this just represents the normal internet behavior of

    > messages
    >> taking different paths to their destination, or could it also mean

    > that
    >> he's using more than one newsfeed, to cover his trail?

    >
    > Moiltiple accounts iz teh norm for us SMAPPERZ, d00d.


    Don't flatter him. He's not one of you. If he were, he wouldn't be
    leaving a trail. If he were preloading his header, I'd expect him to
    spit in my face by putting a snide message into it. :p~
     
    Bluuuue Rajah, Jul 9, 2009
    #4
  5. richard <> wrote in
    news::

    > On Thu, 09 Jul 2009 00:04:48 GMT, Bluuuue Rajah <Bluuuuue@Rajah.>
    > wrote:
    >
    >>I'm stlowly starting to zero in on my stalker, but I've noticed that
    >>the "Path" line in his headers are not always the same. Am I correct
    >>in assuming that this just represents the normal internet behavior of
    >>messages taking different paths to their destination, or could it also
    >>mean that he's using more than one newsfeed, to cover his trail?

    >
    > The path line merely reflects which servers the message went through
    > to get to you.
    > Your server is listed first, his is last.
    >
    > I've known people to have dozens of news accounts.


    After I posted that, I noticed that his path header changes depending on
    the groups he cross-posts to. I have to gather more data to sort that
    out. Fotunately, he won't shut up. I think I'll bait him a little bit,
    to get him to produce data faster for me. Thankfully, he's easily
    baited. :[~
     
    Bluuuue Rajah, Jul 9, 2009
    #5
  6. Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    of<Xns9C43C11AD52AElkajehoriuasldfjknak@207.115.17.102>:

    >§ñühw¤£f <> wrote in
    >news:h34sij$2g7$-september.org:
    >
    >> Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    >> of<Xns9C42CC4BB69DAlkajehoriuasldfjknak@207.115.17.102>:
    >>
    >>>
    >>> I'm stlowly starting to zero in on my stalker, but I've noticed

    that
    >> the
    >>> "Path" line in his headers are not always the same.

    >>
    >> If they use Tor, you're screw'd. (this assumes you do not have a BBF
    >> at NSA)
    >> If they preload the path, you're screw'd. (time to make a BFF at

    NSA?)
    >>
    >>
    >> Am I correct in
    >>> assuming that this just represents the normal internet behavior of

    >> messages
    >>> taking different paths to their destination, or could it also mean

    >> that
    >>> he's using more than one newsfeed, to cover his trail?

    >>
    >> Moiltiple accounts iz teh norm for us SMAPPERZ, d00d.

    >
    >Don't flatter him. He's not one of you. If he were, he wouldn't be
    >leaving a trail. If he were preloading his header, I'd expect him

    to
    >spit in my face by putting a snide message into it. :p~
    >

    Post his path header then. Lets have a go at it :)


    --
    http://www.youtube.com/watch?v=COaoYqkpkUA
    cageprisoners.com|www.snuhwolf.9f.com|www.eyeonpalin.org
    _____ ____ ____ __ /\_/\ __ _ ______ _____
    / __/ |/ / / / / // // . . \\ \ |\ | / __ \ \ \ __\
    _\ \/ / /_/ / _ / \ / \ \| \| \ \_\ \ \__\ _\
    /___/_/|_/\____/_//_/ \_@_/ \__|\__|\____/\____\_\
     
    §ñühw¤£f, Jul 10, 2009
    #6
  7. §ñühw¤£f <> wrote in
    news:h37lfc$3p8$-september.org:

    > Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    > of<Xns9C43C11AD52AElkajehoriuasldfjknak@207.115.17.102>:
    >
    >>§ñühw¤£f <> wrote in
    >>news:h34sij$2g7$-september.org:
    >>
    >>> Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    >>> of<Xns9C42CC4BB69DAlkajehoriuasldfjknak@207.115.17.102>:
    >>>
    >>>>
    >>>> I'm stlowly starting to zero in on my stalker, but I've noticed

    > that
    >>> the
    >>>> "Path" line in his headers are not always the same.
    >>>
    >>> If they use Tor, you're screw'd. (this assumes you do not have a BBF
    >>> at NSA)
    >>> If they preload the path, you're screw'd. (time to make a BFF at

    > NSA?)
    >>>
    >>>
    >>> Am I correct in
    >>>> assuming that this just represents the normal internet behavior of
    >>> messages
    >>>> taking different paths to their destination, or could it also mean
    >>> that
    >>>> he's using more than one newsfeed, to cover his trail?
    >>>
    >>> Moiltiple accounts iz teh norm for us SMAPPERZ, d00d.

    >>
    >>Don't flatter him. He's not one of you. If he were, he wouldn't be
    >>leaving a trail. If he were preloading his header, I'd expect him

    > to
    >>spit in my face by putting a snide message into it. :p~

    >
    > Post his path header then. Lets have a go at it :)


    flpi142.ffdc.sbc.com!nlpi062.nbdc.sbc.com!prodigy.com!
    nlpi057.nbdc.sbc.com!prodigy.net!news.glorb.com!news2.glorb.com!news-in-
    01.newsfeed.easynews.com!easynews!core-easynews-01!easynews.com!en-nntp-
    04.dc1.easynews.com.POSTED!not-for-mail
     
    Bluuuue Rajah, Jul 11, 2009
    #7
  8. Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    of<Xns9C4534A906723lkajehoriuasldfjknak@207.115.17.102>:

    >§ñühw¤£f <> wrote in
    >news:h37lfc$3p8$-september.org:
    >
    >> Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    >> of<Xns9C43C11AD52AElkajehoriuasldfjknak@207.115.17.102>:
    >>
    >>>§ñühw¤£f <> wrote in
    >>>news:h34sij$2g7$-september.org:
    >>>
    >>>> Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    >>>> of<Xns9C42CC4BB69DAlkajehoriuasldfjknak@207.115.17.102>:
    >>>>
    >>>>>
    >>>>> I'm stlowly starting to zero in on my stalker, but I've noticed

    >> that
    >>>> the
    >>>>> "Path" line in his headers are not always the same.
    >>>>
    >>>> If they use Tor, you're screw'd. (this assumes you do not have a

    BBF
    >>>> at NSA)
    >>>> If they preload the path, you're screw'd. (time to make a BFF at

    >> NSA?)
    >>>>
    >>>>
    >>>> Am I correct in
    >>>>> assuming that this just represents the normal internet behavior

    of
    >>>> messages
    >>>>> taking different paths to their destination, or could it also

    mean
    >>>> that
    >>>>> he's using more than one newsfeed, to cover his trail?
    >>>>
    >>>> Moiltiple accounts iz teh norm for us SMAPPERZ, d00d.
    >>>
    >>>Don't flatter him. He's not one of you. If he were, he wouldn't be
    >>>leaving a trail. If he were preloading his header, I'd expect him

    >> to
    >>>spit in my face by putting a snide message into it. :p~

    >>
    >> Post his path header then. Lets have a go at it :)

    >
    >flpi142.ffdc.sbc.com!nlpi062.nbdc.sbc.com!prodigy.com!
    >nlpi057.nbdc.sbc.com!prodigy.net!news.glorb.com!news2.glorb.com!news-

    in-
    >01.newsfeed.easynews.com!easynews!core-easynews-01!easynews.com!en-

    nntp-
    >04.dc1.easynews.com.POSTED!not-for-mail



    Hes poasting from easynews. You'll have to complain to them...

    IP Whois Results:

    Connecting to whois.arin.net...

    Datability Software Systems, Inc. DSS1 (NET-140-99-0-0-1) 
                                      140.99.0.0 - 140.99.255.255
    Puregig, Inc. DERU-PUREGIG1 (NET-140-99-96-0-1) 
                                      140.99.96.0 - 140.99.99.255
    Easynews, Inc. PUREGIG-EASYNEWS-1 (NET-140-99-99-0-1) 
                                      140.99.99.0 - 140.99.99.255

    <shrugs>


    --
    http://www.youtube.com/watch?v=COaoYqkpkUA
    cageprisoners.com|www.snuhwolf.9f.com|www.eyeonpalin.org
    _____ ____ ____ __ /\_/\ __ _ ______ _____
    / __/ |/ / / / / // // . . \\ \ |\ | / __ \ \ \ __\
    _\ \/ / /_/ / _ / \ / \ \| \| \ \_\ \ \__\ _\
    /___/_/|_/\____/_//_/ \_@_/ \__|\__|\____/\____\_\
     
    §ñühw¤£f, Jul 11, 2009
    #8
  9. §ñühw¤£f <> wrote in
    news:h3a6mg$ni6$-september.org:

    > Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    > of<Xns9C4534A906723lkajehoriuasldfjknak@207.115.17.102>:
    >
    >>§ñühw¤£f <> wrote in
    >>news:h37lfc$3p8$-september.org:
    >>
    >>> Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    >>> of<Xns9C43C11AD52AElkajehoriuasldfjknak@207.115.17.102>:
    >>>
    >>>>§ñühw¤£f <> wrote in
    >>>>news:h34sij$2g7$-september.org:
    >>>>
    >>>>> Bluuuue Rajah <Bluuuuue@Rajah.> pinched out a steaming pile
    >>>>> of<Xns9C42CC4BB69DAlkajehoriuasldfjknak@207.115.17.102>:
    >>>>>
    >>>>>>
    >>>>>> I'm stlowly starting to zero in on my stalker, but I've noticed
    >>> that
    >>>>> the
    >>>>>> "Path" line in his headers are not always the same.
    >>>>>
    >>>>> If they use Tor, you're screw'd. (this assumes you do not have a

    > BBF
    >>>>> at NSA)
    >>>>> If they preload the path, you're screw'd. (time to make a BFF at
    >>> NSA?)
    >>>>>
    >>>>>
    >>>>> Am I correct in
    >>>>>> assuming that this just represents the normal internet behavior

    > of
    >>>>> messages
    >>>>>> taking different paths to their destination, or could it also

    > mean
    >>>>> that
    >>>>>> he's using more than one newsfeed, to cover his trail?
    >>>>>
    >>>>> Moiltiple accounts iz teh norm for us SMAPPERZ, d00d.
    >>>>
    >>>>Don't flatter him. He's not one of you. If he were, he wouldn't be
    >>>>leaving a trail. If he were preloading his header, I'd expect him
    >>> to
    >>>>spit in my face by putting a snide message into it. :p~
    >>>
    >>> Post his path header then. Lets have a go at it :)

    >>
    >>flpi142.ffdc.sbc.com!nlpi062.nbdc.sbc.com!prodigy.com!
    >>nlpi057.nbdc.sbc.com!prodigy.net!news.glorb.com!news2.glorb.com!news-

    > in-
    >>01.newsfeed.easynews.com!easynews!core-easynews-01!easynews.com!en-

    > nntp-
    >>04.dc1.easynews.com.POSTED!not-for-mail

    >
    >
    > Hes poasting from easynews. You'll have to complain to them...
    >
    > IP Whois Results:
    >
    > Connecting to whois.arin.net...
    >
    > Datability Software Systems, Inc. DSS1 (NET-140-99-0-0-1) 
    >                                   140.99.0.0 - 140.99.255.255
    > Puregig, Inc. DERU-PUREGIG1 (NET-140-99-96-0-1) 
    >                                   140.99.96.0 - 140.99.99.255
    > Easynews, Inc. PUREGIG-EASYNEWS-1 (NET-140-99-99-0-1) 
    >                                   140.99.99.0 - 140.99.99.255
    >
    > <shrugs>


    I tried complaining once. Useless. <shrug>
     
    Bluuuue Rajah, Jul 11, 2009
    #9
  10. Bluuuue Rajah

    Mike Easter Guest

    Bluuuue Rajah wrote:
    >>> nntp-04.dc1.easynews.com.POSTED!not-for-mail


    >> Hes poasting from easynews. You'll have to complain to them...


    > I tried complaining once.


    You tried complaining about *what*?

    Easynews has TOS/AUP against spam and illegal activity.

    What are you claiming someone is doing against the tos/aup?

    https://www.easynews.com/agreement.phtml EasyNews' Terms of Service
    (TOS) and Acceptable Use Policy (AUP) Agreement

    Easynews doesn't care if you don't like someone.


    --
    Mike Easter
     
    Mike Easter, Jul 11, 2009
    #10
  11. Mike Easter wrote:
    > Bluuuue Rajah wrote:
    >>>> nntp-04.dc1.easynews.com.POSTED!not-for-mail

    >
    >>> Hes poasting from easynews. You'll have to complain to them...

    >
    >> I tried complaining once.

    >
    > You tried complaining about *what*?
    >
    > Easynews has TOS/AUP against spam and illegal activity.
    >
    > What are you claiming someone is doing against the tos/aup?
    >
    > https://www.easynews.com/agreement.phtml EasyNews' Terms of Service
    > (TOS) and Acceptable Use Policy (AUP) Agreement
    >
    > Easynews doesn't care if you don't like someone.
    >
    >

    Thank goodness for that :)
     
    Rev Turd Frederıcks, Jul 12, 2009
    #11
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. mszablocky

    Question about behavior of View Available Networks window

    mszablocky, Jul 24, 2005, in forum: Wireless Networking
    Replies:
    4
    Views:
    2,534
  2. Robert Gordon
    Replies:
    0
    Views:
    513
    Robert Gordon
    Aug 25, 2005
  3. Replies:
    2
    Views:
    382
  4. Bluuuue Rajah

    Is this normal internet behavior?

    Bluuuue Rajah, Jul 9, 2009, in forum: Computer Support
    Replies:
    12
    Views:
    564
    Rev Turd Frederıcks
    Jul 12, 2009
  5. Replies:
    3
    Views:
    390
    Robert Baer
    Jun 7, 2013
Loading...

Share This Page