"Anonymous" <Anonym...@domain.invalid> wrote in message <news:asGQc.942$5E4.870@newssvr29.news.prodigy.com>... > "Anonymous" <Anonym...@domain.invalid> wrote in message > news:dsFQc.934$GF4.909@newssvr29.news.prodigy.com... > > If anyone finds any Russian Spam Gang spam in their Inbox, or comes > across > > one of their websites, post here, so we can compile a complete list of > > their domains. We'll try to get as many of them shut down as possible.
> > The ones we can't get shut down, we'll drop into the SpamVampire, and > > hammer the hell out of.
> You know what's amazing? I'm hitting spamvertised websites hosted out of > China and Brazil, but I keep seeing a BellSouth IP address showing up in my > IDS/IRS... hmmm... spammy is trying to figure out who's costing them so > much, perhaps? BellSouth is out of Florida.
> It's adsl-80-85-61.asm.bellsouth.net, IP address 65.80.85.61.
You do know that BellSouth offers service in more states than just Florida, don't you Mr. Anonymous, "I know so much about the Internet, spammers and fighting spam, but I don't know what SPEWS S2134 means."
> Hey, spammy, I don't care where you host your websites, if you spam our > domain, I'm hitting them and getting them borked. If you think you can stop > me, think again... you've become a major cost of doing business, so now I > am YOUR cost of doing business. And I'm not going away until you do. Get > used to it, like we've all had to get used to putting up with your spew.
> You stop spamming our domain, I'll stop hitting your spamvertised websites. > That's the deal. No negotiations.
Have you no shame, Bob, following up your own post in NANAE. Are you *sure* that you aren't a spammer involved in a pissing contest with some Florida spammers/competitors. If you were a true spam fighter you wouldn't offer to stop hitting spammy's spamvertised websites once he stopped spamming your domain.
What is your domain anyway? It shouldn't be a problem mentioning it if spammy already knows what it is. You keep referring to "we" and if you have partners in this one lone website. Do you perhaps have a frog in your pocket?
You are posting from,
NNTP-Posting-Host: 63.207.207.234
Pac Bell Internet Services PBI-NET-7 (NET-63-192-0-0-1) 63.192.0.0 - 63.207.255.255
STAN FISHER SBCIS-100531-182148 (NET-63-207-207-232-1) 63.207.207.232 - 63.207.207.239
So, Stan, why do you also go by the name of Bob and what do you need 8 IP's for if you only have one website?
CustName: STAN FISHER Address: 303 Second Street City: San Francisco StateProv: CA PostalCode: 94107 Country: US RegDate: 2000-06-01 Updated: 2000-06-01
Hmm, you've had this /29 for four years and you've just started posting in NANAE sounding like either a tenured regular or a tenured spammer. Bob, did you hijack this IP block from Stan?
Your posting IP resolves to 151.164.243.21
60 ms 70 ms 84 ms 64.200.89.70 washdc5lcx1-pos11-0.wcg.net. 245 UNITED STATES 11 61 ms 70 ms 79 ms 64.200.95.114 washdc5lcx1-sbc-pos.wcg.net. 244 UNITED STATES Unix: 23:39:44. 26 12 60 ms 69 ms 79 ms 151.164.191.137 bb2-p2-0.hrndva.sbcglobal.net. 243 UNITED STATES Unix: 23:39:44.214 13 68 ms 75 ms 85 ms 151.164.243.21 bb1-p6-0.hrndva.sbcglobal.net. 242 UNITED STATES Unix: 23:39:45.267
Registrant: none>>>>>>>>>>>>>>>>>>>>>>>>>>ATTN: DIRECTNIC.COM 1516 Horrell Ave Mckinleyville, CA 95519 US
Domain Name: THEANSWERTO.COM
Monteforte, Patrick &amp; Tracy gtp...@northcoast.com 1516 Horrell Ave Mckinleyville, CA 95519 US 707-840-9517
Registration Service Provider: Intercosmos Media Group Inc. dba directNIC.com, supp...@directnic.com 504 679 5173 http://www.directnic.com
Record last updated on 20-Mar-2002. Record expires on 02-Sep-2002. Record Created on 02-Sep-2000.
:::: NEW REGISTRATION ::::
Registration Service Provided By: WTPowers Contact: doma...@wtpowers.com
Domain name- theanswerto.com
Nameservers- NS3.PLUGIT.COM NS4.PLUGIT.COM
Start of registration- Sat Sep 02 2000 00:41:28 Registered through- Thu Sep 02 2004 00:41:28
Registrant Contact- WTPowers Patrick Monteforte (p...@wtpowers.com) +1.7078409517 FAX- +1.7078399559 2617 Northbaink RD PO Box 2490 Mckinleyville, CA 95519 US
Administrative Contact- WTPowers Patrick Monteforte (p...@wtpowers.com) +1.7078409517 FAX- +1.7078399559 2617 Northbaink RD PO Box 2490 Mckinleyville, CA 95519 US
Billing Contact- WTPowers Patrick Monteforte (p...@wtpowers.com) +1.7078409517 FAX- +1.7078399559 2617 Northbaink RD PO Box 2490 Mckinleyville, CA 95519 US
Technical Contact- WTPowers Patrick Monteforte (p...@wtpowers.com) +1.7078409517 FAX- +1.7078399559 2617 Northbaink RD PO Box 2490 Mckinleyville, CA 95519 US
Say, Bob, aren't you that "phool" who claims to be new here?
> Ok, I'm new here, so I'm not familiar with the language, and these may be > dumb questions, but I'll ask anyway... What is S2134? Is it the tracking >number for a particular SPEWS-blocked spammer? Where do I find these?
Say what? You're new here? Oh, really!
If you are new here then why do you know so much about whois, LARTing, dig, reporting chains, etc.?
Let's have a look and see if it's you and examine some of the cr@p you have been spewing in NANAE the last few days. Seems you have been having a bit of a go with the good folks in NANAE.
It would appear that you know a great deal about spammers and fighting spam for someone who claims to be new here, "don'tja," Bob?
:: Re: How Millionaire gets 20,000 visitors a day
> Big deal, I've never spent a dime on advertising either, my website's been > as high as around 2000, and I didn't spam to get there. I'm also ranked #12 > for our second-best search term and #21 for our best search term on Google. > It's called website optimization and creating content people want to read. > Get a life and a clue.
:: Re: repost Morely if UUNET is Bad then WHY are you WORSE???
> Man, you'd be amazed at how many people are using the email address of > 'anonym...@domain.invalid'. No wonder I get so much spam... I've got > Sanford Wallace AND Scott Richter right in my Inbox!
Why would someone as "clued" as you use such an address then, hmm, Bob?
Say, Bob, didn't you say that 100% of your spam in the last month was from that Russian spam gang? Make up your mind, Bob!
:: Re: webrider.ru - Russian Spam Gang
> Yes, but he's not getting those addresses out of the blue, > or from his Contacts list, he's getting them (I would assume, > since this is how I do it) from doing WHOIS and abuse.net > lookups on the URL and IP address of the abusing domain. > If those addresses are listed there, then I'd say LART away.
Interesting, Bob, you know all of this but you don't know that S2134 refers to a SPEWS record number. Total cr@p, Bob, just more and more pure 100% prime government inspected bullsh!t from you.
:: Re: Reveal who is behind SPEWS
> The reason I hate spammers is because my dear departed > mother was raped by a spam gang. I guess all those penis > enlargement, viagra and porn ads they were sending finally > got to be too much for them to bear, and they grabbed > the nearest moving object to vent their frustrations on, > which happened to be my mother, God rest her poor > over-humped soul. > She expired giving birth to me, the unholy product of > the evil seed of a thousand spammers, risen from the > very bowels of hell itself to wreak vengeance upon the > spammers of the world in revenge for my dear departed > mother.
That's about the same kind of believable cr@p you have been spewing here in NANAE the last few days. Why, Bob, why are you acting like such a "phool" claiming to be so concerned about a Russian spam gang and that *you* are responsible for "inspiring" InterCosmos.com to cancel spammy's domains. You do realise that most people don't know that InterCosmos.com is DirectNIC.com and that ab...@DirectNIC.com uses a DirectNIC email address, not an InterCosmos.com address, don't you, Bob? How about you post some of the email, along with headers adnd responses, you have been sending (sic) to DirectNic.com concerning this Russian spam gang.
:: Re: SUCCESS!
> bjbmdbe.info is now dead. Another Russian Spam Gang > domain gone... and this one, they didn't even get a chance > to send any spam for. InterCosmos is killing them off > preemptively now. I've got them searching through their records > for the email addresses the Russian Spam Gang has used > to register other domains, and they're killing any off that were > registered with those email addresses. > This is too much fun... 4 spammer domains killed off > (and possibly quite a few more once they find them) in two > days... the Russian Spam Gang has got to be wondering > what's going on.
You're full of cr@p, Bob. Prove it! Post your email exchange with DirectNic.com complete with headers. Otherwise, it's all just spammer speak coming from an idiot/k00k like yourself.
>>> Years ago, when all here were saying uu.net was unresponsive, I very >>> easily and simply (took two short, simple requests) got them to remove >>> the account for Rizler. If you do the right thing and present the right >>> evidence you can get spammer accounts removed. As a side efect you also >>> educate the ISPs into reaizing that their comlicity is glaringly >>> visible, with all the potential bad publicity that entails.
> Hi, Brad.
> How did you do it with uu.net? I'm always on the lookout for > effective > techniques, if I can tweak my LART reports so they get a better > response, > based upon what I learn from you (or anyone able to get uu.net, > savvis.net, > hanaro.net, telefonica.br, etc. to respond), that'd be great.
> Thanks for any help you can provide...
> :::: </quote> ::::
> Where are your LARTS posted, Bob? You talk the talk, but you don't > seem able to walk the walk, or at least prove it to any believable > degree. Admit it, Bob, you are just here to pump NANAE regulars for > information, intel for your cause which is spamming and spam support > and of course, trying to motivate folks to help "take out" your > competition.
> Be honest, Bob, you've read Sun-Tzu, haven't you, and you are > practicing Book 13.
Ouch. Picture me falling backwards off a fence (John Cleese as Fool) once again.
Still, there's nothing to be gained by the spammer from knowing how its done. The best and ultimately the only defense is to stop spamming (or to stop using abuse to spam, which makes blocklists real easy and real powerful.) It's a temporary defense to move to another form of abuse (like to open proxy abusde and then to spam zombie abuse), but if people start combating that abuse the spammers (Hi, Bob) lose. It's not the spammers knowing the tools agaist them that hurts, its the lack of practitioners of the art.
Uh, what's Book 13 of Sun-Tzu? Go into the enemy's camp and play dumb, play the novice, get the enemy to talk? Human engineering? No sweat - the secrets aren't the "how" but the "where" - and that's only if the user chooses the secret route.
One mode of honeypot counter-attack is to PUBLISH the honeypot IPs on a web page. Most of them, with some ringers thrown in. Like Nimitz said: "Send them our latitude and longitude."
On 2004-08-06, Sun Tsu <bananana...@spamblocked.com> wrote:
> Your posting IP resolves to 151.164.243.21
What kind of crack are you smoking? That's one of sbcglobal's backbone routers, searching for references to is isn't going to give you anything useful, it just turns up a lot of traceroutes that happen to go through it.
ROTFLMAO! God, Sun Tsu, you do the best impression of a crazy person that I've /ever/ seen! That was hilarious! Thanks for making me laugh so hard... I haven't laughed like that in ages.
> Yep, that's the Russian Spam Gang... I've been hammering the living hell > out of their websites with my SpamVampire > (http://www.hillscapital.com/antispam/index.htm feel free to grab the > source code and set up your own).
> > Intercosmos is DirectNIC. How did you contact them? What did you tell > them?
> I sent the LART to ab...@intercosmos.com, with a note at the top that they > were the registrar, and that they should check the registration information > for the site, and terminate it if it was found that the registration > information was invalid.
> > How about going after the nameserver for lots of them- LIONSTAM.BIZ?
> Tried that... the email address obtained by doing a dig on Lionstam.biz > bounces.
Well, I tried it and they just tell me to go after the host. Maybe you're perfuming your notes? :)
Here's another, please sic 'em-
eknmeem.info
I talked to someone else wanting to coordinate efforts. Wonder how you 2 and others could hook up at some place where people like your angry little jilted lover Sun Tsu won't get in the way :)
And just in case you're wondering... no, I'm not a spammer. And I /am/ a relative UseNet newby (newbie? newbee? whatever.)... I had enough trouble just figuring out how to get NANAE to load into my newsgroup reader. I never used usenet back in the days when it was all the rage.
As for the SPEWS listing numbers... I'm unfamiliar with a lot of things, so I ask questions about them to learn. I am also familiar with a lot of things, and I offer my advice on those things. Having never visited SPEWS before, I didn't know how they kept track of which spammer was which. Now I know.
As for the InterCosmos correspondence, here's a snippet (names, email addresses and IP addresses of the innocent munged to protect against usenet k00ks):
Received: from icmail.intercosmos.net [xxx.xxx.xxx.xxx] by mail.xxxxxx.com with ESMTP (SMTPD32-6.06) id AD1050209E1; Fri, 06 Aug 2004 12:08:48 -0400 Received: (qmail 6031 invoked by uid 306); 6 Aug 2004 16:05:23 -0000 Received: from xxxx...@intercosmos.com by icmail.intercosmos.net by uid 51 with qmail-scanner-1.20 (clamuko: 0.65. spamassassin: 2.63. Clear:RC:0(204.251.2.111):SA:0(3.2/5.0):. Processed in 0.145533 secs); 06 Aug 2004 16:05:23 -0000 X-Spam-Status: No, hits=3.2 required=5.0 Received: from unknown (HELO donnyxxx) (xxxxxxx...@intercosmos.com@xxx.xxx.xxx.xxx) by 0 with SMTP; 6 Aug 2004 16:05:23 -0000 From: "Donny Xxxxxxxxxx" xxx...@intercosmos.com To: xxxxxxxxxx...@xxxxxxxxxxxxx.com Subject: RE: Hi, Donny. Got a whole batch of them for you to check out... ADDENDUM Date: Fri, 6 Aug 2004 11:05:42 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2149 Thread-Index: AeL7A46u+d5tqnJpQTfS2x5I4cbtngBZ2TtA In-Reply-To: <IMFEKIJDNQIKEHMBMPBNDFCJDHBB.xxxxxxxxxxx...@xxxxxxxxxxxxx.com> X-Qmail-Scanner-Message-ID: <11029183346627...@icmail.intercosmos.net> Message-Id: <20040806120815.SN02...@icmail.intercosmos.net> X-RCPT-TO: xxxxxxxxxxx...@xxxxxxxxxxxxxx.com X-UIDL: 4785 Status: U
> -----Original Message----- > From: Spam Reporting [mailto:xxxxxxxxxxxxx...@xxxxxxxxxxxxxxx.com] > Sent: Thursday, August 05, 2004 10:50 PM > To: xxxx...@intercosmos.com; ab...@intercosmos.com > Subject: Hi, Donny. Got a whole batch of them for you to check out... > ADDENDUM
> Hi, Donny. I've got URLs for you to check out... I think you'll find the > website content looks familiar.
Oh, if you're a chick, I think I'm in love... you just uncovered yet another server of theirs (222.233.52.109). The one I was working on was 201.3.240.226. This one is hosted on HanaNet, mine is hosted on BrasilTelecom.
Ok, here's what you do.
1) Do a DNS lookup on the domain name. In this case, that domain resolves to 222.233.52.109.
2) Do a lookup on WHOIS.webhosting.info: http://whois.webhosting.info/222.233.52.109 This doesn't show anything right now... check back tomorrow, after the server updates, to see if there are any new entries. It also helps to converse with people here to get the domain names of the Russian Spam Gang... there is strength in numbers. I'm looking for other methods of figuring out what websites a server is hosting.
Yep, that is definitely a Russian Spam Gang website.
Now, write up a full LART, and report it to abuse at Intercosmos.com, and CC it to Donny at InterCosmos (I think you can figure out the email address...). Tell Donny it's another Russian Spam Gang website. After he visits the sites and recognizes the content, he should put them on Registrar Hold status.
All the Russian Spam Gang spamvertised websites that I know of were registered through either InterCosmos, or NameBay. I'm still trying to get a contact at NameBay that will act. Once I do, I'll let everyone here know what it is.
If anyone has a contact at NameBay, let us know, so we can get these spammer scum shut down.
I've got to thank you for letting me know about these... you are the reason I was able to inform InterCosmos about so many of the Russian Spam Gang's websites and get them shut down.
Thanks for teaching me how to figure out which websites a server is hosting... that is going to come in very handy in getting the RSG shut down completely.
Do you have any more tricks up your sleeve? I don't have all the knowledge that Sun Tsu attributes to me, but I've got a burning malice toward all things spam, and I believe in taking action and getting things done.
>> How about going after the nameserver for lots of them- LIONSTAM.BIZ?
>Tried that... the email address obtained by doing a dig on Lionstam.biz >bounces.
Go after the host/owner, just like you would if a abuse@webserver doesn't work. Get the IP address(es) of the DNS servers and then use traceroute and whois (on the IP address).
-- The suespammers.org mail server is located in California. So are all my other mailboxes. Please do not send unsolicited bulk e-mail or unsolicited commercial e-mail to my suespammers.org address or any of my other addresses. These are my opinions, not necessarily my employer's. I hate spam.
> Go after the host/owner, just like you would if a abuse@webserver > doesn't work. Get the IP address(es) of the DNS servers and then > use traceroute and whois (on the IP address).
I tried that, but every email address I tried just bounced, even the abuse@ and postmaster@ addresses. Isn't there some requirement that the people running the DNS servers have a valid contact address, as well? Who do I report to if they don't? How do I find that DNS server's upstream provider?
> On 2004-08-06, Sun Tsu <bananana...@spamblocked.com> wrote:
> > Your posting IP resolves to 151.164.243.21
> What kind of crack are you smoking? That's one of sbcglobal's backbone > routers, searching for references to is isn't going to give you anything > useful, it just turns up a lot of traceroutes that happen to go through it.
Temper, temper, Andrew.
It's simply the result of a tracert designed in accordance with Book 13. Read it, you might learn something interesting and realise that you are collateral damage. Spammers use your posting service just like normal folks do.
Unless you can vouch for Bob personally, you have nothing to contribute.
Reread the entire article and come back when you can see past your own nose/self-interest and post anything that contradicts the facts.
If you believe anything that Bob the bafoon's is spewing, you ae a disappointment.
Take some time off, Andrew, you need it.
Have a nice weekend.
Cheers,
Sun
-- Cui nun senti raggiuni, nun pò fari cosi cu raggiuni.
Well, it's not the Russian Spam Gang, but it's a spammer...
I am sorry (tins) to report the demise of goforvalue.com... a website that suffered mightily as the SpamVampire sunk its fangs deep into its veins and drew its very life from it. Burn in Hell, goforvalue.com. You will not be missed.
> Ouch. Picture me falling backwards off a fence (John Cleese as Fool) > once again.
> Still, there's nothing to be gained by the spammer from knowing how its > done. The best and ultimately the only defense is to stop spamming (or > to stop using abuse to spam, which makes blocklists real easy and real > powerful.) It's a temporary defense to move to another form of abuse > (like to open proxy abusde and then to spam zombie abuse), but if people > start combating that abuse the spammers (Hi, Bob) lose. It's not the > spammers knowing the tools agaist them that hurts, its the lack of > practitioners of the art.
Agreed. Bob is well versed is spamming and defending against being stopped.
> Uh, what's Book 13 of Sun-Tzu? Go into the enemy's camp and play dumb, > play the novice, get the enemy to talk? Human engineering? No sweat - > the secrets aren't the "how" but the "where" - and that's only if the > user chooses the secret route.
Good guess, Brad. Book 13 is entitled, "Espionage" and discusses the five agents and the role each plays.
If you need any further information, email the posting address. It works just fine.
> One mode of honeypot counter-attack is to PUBLISH the honeypot IPs on a > web page. Most of them, with some ringers thrown in. Like Nimitz said: > "Send them our latitude and longitude."
Bob's funny. His entertainment value alone is worth the read.
Cheers,
SuN
-- "No poor bastard every won a war by dying for his country. He won the war by making the other poor bastard die for his. -General George Patton
> If you believe anything that Bob the bafoon's is spewing, you ae a > disappointment.
Sun, you're such a nut... God, you should go on the stand-up comedy circuit... you're hilarious. I literally laughed until my sides hurt on that first post.
It started off great... you sounded sane, then just for the comedy effect, you tore off into this wild tangent that rollicked hither and yon, tying bits of history together like you were writing a Forrest Gump movie. Man, you are good.
> Must be Friday... checks calendar... yep it is. Probably a full moon > somewhere as well.
How would a blind person know if it were a full moon? Wait a sec, where did all of this hair come from and the big sharp teeth, and why is salava dripping....
Awooooooooooo...............
> Sun - get some sun, relax, enjoy your weekend & cool your jets.
You too, g-meister, and while you are relaxing read all of Bob the spammer's posts and be sure to come back on Monday and point out specifically why you believe Bob is anything other than a spammer.
That is, if you can?
You must have missed all of his contradictions and other tell tale signs of FUD.
Have a good weekend. Oh, when you decide to do some real investigative work to disprove anything posted, call DirectNic.com and ask for Donny, if there really is a Donny, and ask him to verify Bob's bullsh!t story.
To contact us via telephone: Our telephone number: +1 (504) 679-5170 Our telephone support hours: 7 am to 7 pm Central Standard Time Monday - Friday Our fax number: +1 (504) 566-0484
This one IS a Russian Spam Gang spamvertised website, acting as an 'affiliate' (read: spammer for hire) for 888casino.com.
I regret (tinr) to inform you that casinoderome.com has now shuffled off its mortal coil. The SpamVampire was simply too much for its mother-site to bear, causing its mother-site (888casino.com) to terminate its affiliate status, thus ending its life.
> Have a good weekend. Oh, when you decide to do some real > investigative work to disprove anything posted, call DirectNic.com and > ask for Donny, if there really is a Donny, and ask him to verify Bob's > bullsh!t story.
He can call Donny if he likes... he can call me, and I'll give him the full name to ask for. He doesn't need to verify who I am, as he's already called and spoken to me.
You're quickly slipping off your foundations, Sun. Get help... comedy relief is so hard to find, we don't want to lose you.
Russell Miller <rmil...@duskglow.com> wrote in message <news:slrnch8fep.fiq.rmiller@patthama.duskglow.com>... > It is, but eventually it just becomes a waste of time. I advise you to prime > your killfile, for eventual action :-)
Well, well, well, if it isn't Miller the arsehole/k00k/trool trolling Bananaposts again. Didn't you get the memo from Ferguson?
Have you learnt how to write a proper LART as of yet, or have you determined if GoDaddy received the one LART you have ever attempted in your long illustrious spam fighting carrer (sic)? Probably not. :(
Say, Miller, what ever happened to your mentor in the Jamie baiting and troll toying "biz," Marc Dufour? He just dropped off the face of the earth after 24 JUN 2004 and no one knows or cares what happend to him after *years* of posting almost daily.
You are doing a supurb job as his replacement.
Aren't you the least bit curious what happened to him since your nose couldn't have been any farther up his arse?
Say, when's your next dentist's appointment? Everyone (tine) is on the edge of their seats just waiting to read more of your personal details posted in NANAE. Don't let everyone down, amigo!
"Tell us how you really feel."
Oh, thanks for opening your mouth and confirming the obvious about you once again.
DING!
SWITCH!
Cheers,
SuN
-- It is better to remain silent and only thought a fool then it is to open one's mouth and remove all doubt.
>> What kind of crack are you smoking? That's one of sbcglobal's backbone >> routers, searching for references to is isn't going to give you anything >> useful, it just turns up a lot of traceroutes that happen to go through it.
>Temper, temper, Andrew.
>It's simply the result of a tracert designed in accordance with Book >13. Read it, you might learn something interesting and realise that >you are collateral damage. Spammers use your posting service just >like normal folks do.
Andrew has *never* posted anything that has made suspicious of his motives in any way. You have posted a lot of stuff that just gets me to scratching my head wondering what the heck your point is. An abundance of references to your own posts in Google don't prove anything. That's just circular. Book 13? You're a whack job.
>Unless you can vouch for Bob personally, you have nothing to >contribute.
You're a whack job.
>Reread the entire article and come back when you can see past your own >nose/self-interest and post anything that contradicts the facts.
>If you believe anything that Bob the bafoon's is spewing, you ae a >disappointment.
Did he say anything about believing anything that "Bob" said? I don't think so.
>Take some time off, Andrew, you need it.
That's what you'd like to think. But you're a whack job. Probably smoking some good stuff like Andrew speculated.
>> What kind of crack are you smoking? That's one of sbcglobal's backbone >> routers, searching for references to is isn't going to give you anything >> useful, it just turns up a lot of traceroutes that happen to go through it.
> Temper, temper, Andrew.
My lack of tolerance for fools is legendary.
> It's simply the result of a tracert designed in accordance with Book > 13.
For those not familiar with Art of War, Book 13 discusses the art of espionage, which Sun Tzu considers vital to warfare.
I don't see anything there about traceroutes, but I did notice this:
" Only the wisest ruler can use spies; only the most benevolent and upright general can use spies, and only the most alert and observant person can get the truth using spies. " [trans: sonshi.com]
Giles, additionally, quotes certain Chinese commentators on the required characteristics of the spies themselves.
It should go without saying that observing the dispositions of the enemy requires accurate observational skills. Then, as Sun Tzu points out in the passage quoted above, actually _interpreting_ those observations in order to draw useful conclusions and formulate strategy requires skill in itself. So if you're going to look at a traceroute and draw conclusions from it, then you'd better understand exactly what it is that you're looking at.
You said:
>>> Your posting IP resolves to 151.164.243.21
Firstly, the term "resolves to" isn't meaningful in that context. An IP address can be said to resolve to a domain name or vice versa, but saying that an IP resolves to another IP makes no sense. If what you actually meant was "the last IP I see on a traceroute to the posting IP is ...", then the statement makes sense but is not useful, since that IP is a router in Herndon VA while the poster's IP is clearly in San Francisco (easily confirmed from multiple sources).
To go on and suggest that a trace passing through a major backbone router then implies some sort of connection with other people simply based on traces that happen to pass through the same router is serious folly, certainly not in accordance with the quoted passage.
> Read it,
I think it was about 10 years ago that I first read Art of War.
> you might learn something interesting and realise that > you are collateral damage. Spammers use your posting service just > like normal folks do.
I'm sure there are or have been spammers who are users of ours either via personal accounts or via ISPs who outsource to us. We go to considerable lengths to ensure that we are not used for spamming or spam support, and we do a better job of that than, say, Google.
However, we will not comment on the identity of our users under any circumstances.
> Reread the entire article and come back when you can see past your own > nose/self-interest and post anything that contradicts the facts.
You've posted no facts worthy of contradiction. All I see from you is unsupported assumptions.
You've apparently assumed that this newsgroup is the only place where spammer-tracking is discussed or knowledge of network tools is available (it's quite possible for someone to be competent with the tools despite being new to the group).
You've apparently assumed that everyone engaged in fighting spam must automatically know all about SPEWS. I've got news for you: many of them don't even know about _Spamhaus_, despite it's much higher media profile and wider usage. This newsgroup isn't the center of the spam-fighting world (though used properly it is still one of the better resources).
You've assumed that you can identify someone from their posting style. There's a tendency that I see all the time in this group and elsewhere for people to assume that everything is the fault of their own particular pet enemy; this is most visible every time Hipcrime makes a visit, when that happens there is _always_ someone who assumes that it's an attack on _them_ by their own personal nemesis. After seeing this happen enough times, and seeing enough laughable mistaken accusations of sock-puppetry, one learns to ignore (or at best, defer judgement) on all such claims in the absence of real evidence.
Your claims are inconsistent anyway since you've stated both that one poster is a sock of another, and that one of those posters is quoting the other to make an x-no-archive post visible on Google. I'm sure you can see the problem with that.
> If you believe anything that Bob the bafoon's is spewing, you ae a > disappointment.
Fortunately, I don't need to believe anything that anyone says in this group.
You've certainly done a good job of showing why I shouldn't believe anything _you_ claim, though.
"Andrew - Supernews" <andrew+non...@supernews.com> wrote in message
> Your claims are inconsistent anyway since you've stated both that one poster > is a sock of another, and that one of those posters is quoting the other to > make an x-no-archive post visible on Google. I'm sure you can see the problem > with that.
Ok, more possibly dumb questions... what is a sock puppet, in usenet terms? And what is x-no-archive?
> >> What kind of crack are you smoking? >> Temper, temper, Andrew. > Andrew has *never* posted anything that has made suspicious of his > motives in any way
There was no disrespect displayed or directed toward Andrew in that post, yet Andrew showed disrespect. Facts are facts, Steve.
Accusing someone of smoking crack without proof is a serious accusation and a suspicious motive regardless of his rationale. That puts him in league with spammers.
The only other person to do such a stupid thing is a well documented spammer who has his very own SPEWS record, SPEWS S1106.
> >Unless you can vouch for Bob personally, you have nothing to > >contribute.
A tracert is a tracert is a tracert. Why would anyone have an emotional outburst against anyone else who simply posts *facts* without investigating those facts first? Spammy plays "tricjs" with routing or have you forgotten?
No one attacked Andrew, yet Andrew attacked another spam fighter. Andrew doesn't need you to speak for him and you obviously can't speak for Bob, the spammer. Therefore you had nothing to contribute to this thread, yet you felt obligated for whatever reason to display your lack of emotional control by posting a personal rant without provocation. :(
Now, Steve, if you actually want to do something useful and can't understand too much information presented in one article, do some googling on your own or do you have to be spoon fed the facts in the fight against spam like some ignorant newbie to NANAE.
Just because *you* can't put two and two together doesn't mean someone else can't. Shouldn't you be directing your rage against spammy? No one mentioned you, so why the outburst of emotion? If one wants to be effective in the fight against spam, one can't become personally involved nor can one be affected by anything someone ignorant of the facts has to say.
Can you vouch for Bob? Can you disprove anything that was posted? Can you understand that someone other than a spammer doesn't just pop in to NANAE with all of the solutions. Are you that blind to believe spammy's bullsh!t without question?
Here's your chance to either prove or disprove the facts. Are you up for the challenge, Steve?
Spammny registered /29's using 303 Second Street in San Francisco and is most likely related to globalofferz.biz, a *most* egregious pills/pron spammer. Can you find any of his other /29's or link him to any SPEWS records?
You should be able to construct that google search on your own but you aren't acting much like an intelligent spam fighter today, so here it is for you.
He also may have posted as ad...@globalofferz.biz using the very same line of bullsh!t he is posting as Mr. Anonymous. Can you find it or your own or are you going to wait until someone who can do it does it for you?
Here's a clue. Read the articles referenced below and demonstrate that you are a true spam fighter who can actually research spammers and post useful information, or don't, and admit that you are just simply someone who whines in NANAE and makes noise. Contribute to the cause rather than helping spammy obfuscate.
Google Search: ad...@globalofferz.biz john drupling
Now, here's another clue that you will actually have to think about to follow, "Is the sate of California a spam source?"
OK, Steve, now you have some clues, no *proof,* that Bob is a spammer. Either follow them and prove or disprove the accusation, or apologise for your rude behaviour.
Just because some NANAE regulars "think" they know how to research spammers doesn't mean that they do, nor does it mean that others can't find what they haven't a clue as to how to find.
Ask yourself why you felt the need to be rude to someone else in a matter which did not involve you.
TheBanana(tm) is a spam fighter, not a spam figher fighter. You will find no posts made by theBanana which is against SPEWS, Spamhaus or *any* other spam fighter unless that poster either trolled BananaPosts(tm) with some ulterior motive, such as the k00k/troll Marc Dufour AKA Etaoin Shrdlu AKA S...@SS.org, or attacked this poster first. *Whomever* attacks first *will* be dispatched with all deliberate speed. This means *anyone,* be it spammer or no, if said poster insists on contributing to FUD which can only help spammy.
If you do not understand what has just been said or should you wish to continue this dialog, please take it to email. NANAE is not the proper forum for personal attacks and/or rude comments against other spam fighters, such as the ones mentioned above. That is how spammers respond in NANAE, not gentlemen and ladies.
It is expected that not all posters have the self control to refrain from making posts which are simply displays of their lack of self discipline which results in nonproductive emotional outbursts manifested as rants, no matter how short, which *do not* contribute to the spam fighting effort one iota. This posting email address is always left open for such communications and also for "friendly" email exchanges, which do take place with some NANAE posters.
There is *no* justification for such unwarranted and unsubstantiated personal attacks and once made, the poster should expect a suitable response. There is no room for such immature behaviour in something as time consuming and serious as spam fighting. Other froups exists for casual posters who just want to chit chat, make personal attacks against others, tell "cute" stories, debate inane topics such as the weather, seek personal gratification by seeing his or her words printed on a computer screen, or for those who thrive on the attention they seek and so desperately need to feel fulfilled.
> You're a whack job.
Now you sound like a spammer and/or someone who can't control his emotions and/or someone who forgot how to exhibit proper manners and employ good interpersonal skills in hos posts. :(
> >Have a nice weekend.
> Yes, Andrew, please do.
It was a sincere gesture which is more than you seem to be able to muster.
Have nice weekend, Steve.
Cheers,
SuN
-- Cui nun senti raggiuni, nun pò fari cosi cu raggiuni.
Steve, your last name doesn't sound Sicilian, so here's the translation. Who doesn't listen to reason, can't do things with reason.
|
