Getting lots of messages at many domains promoting Spamhaus - not sure what they are trying to achieve :
WORKING TO PROTECT INTERNET NETWORKS WORLDWIDE Spamhaus tracks the Internet's Spammers, Spam Gangs and Spam Services, provides dependable realtime anti-spam protection for Internet networks, and works with Law Enforcement to identify and pursue spammers worldwide.
The SBL database is maintained by a dedicated international Spamhaus team based in 9 countries, working 24 hours a day, 7 days a week to list new confirmed spam issues and - just as importantly - to delist resolved issues.
The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
The Exploits Block List can be used by all modern mail servers, by setting your mail server's anti-spam DNSBL feature (sometimes called "Blacklist DNS Servers" or "RBL servers") to query xbl.spamhaus.org. Use of the XBL is free for users with normal mail servers (but networks with high email traffic should see DataFeed).
You can get MUCH MORE if you contact us:
The Spamhaus Project Ltd. 50 Churchill Square, Suite 6, Kings Hill, West Malling ME19 4YU United Kingdom, Tel (+44) 0845 226 0208
Splorf! wrote: >Getting lots of messages at many domains promoting Spamhaus - not sure what >they are trying to achieve :
THEY are likely not trying to achieve anything. This one screams Joe Job.
-- Those who try to hide behind Godwin are the real net-nazis. Philosophy: Joking about why we cuss so much. Learn about spam: http://www.seige-perilous.org/spam/spam.html [fourth line intentionally left blank]
"Splorf!" <do-not-e...@think-about.it> wrote: > Getting lots of messages at many domains promoting Spamhaus - not sure what > they are trying to achieve
We're a bit puzzled too, as normally we'd expect the spammer to at least put some email addresses or links or something in the joe-job. This one simply had a postal address which is not the address of Spamhaus, and a phone number which doesn't work and is not the number of Spamhaus.
The phone number is an old number used by Ultradesign some years ago, however the same phone number was given in a joe-job last year by spammers William Stanley and Robert Russo. So I imagine those two jail birds may be spamming this one too, although for what purpose is a mystery.
Maybe they have access to WiFi in the courtroom where they're appearing currently on charges of racketeering...
PACER: 2:07-cv-00954-NVW Xcentric Ventures, LLC et al v. Stanley et al
Defendants: William "Bill" Stanley, Robert Russo, QED Media Group, L.L.C., Defamation Action League and Internet Defamation League
Office: Phoenix Division Filed: 05/10/2007 Jury Demand: Both Demand: Nature of Suit: 470 Cause: 18:1964 Racketeering (RICO) Act
On Fri, 06 Jul 2007 12:14:30 +0200, Steve Linford wrote: > Defendants: > William "Bill" Stanley, Robert Russo, QED Media Group, L.L.C., > Defamation Action League and Internet Defamation League
I'm not sure what amazes me more: that they would be so foolish to send something like that or that they would send something like that without using speel cheek.
-- "A 7-word insult about intelligence containing two misspellings and a punctuation error. I believe that's a new record for you..." -- Kevin Wilson, June 29, 2007
> I'm not sure what amazes me more: that they would be so foolish to send > something like that or that they would send something like that without > using speel cheek.
Well, considering that Robert Russo is known to have posted this gem:
In the following post, Russo tells an American company, Tipi, that he will Stuff Google's index with "bad things about you" to defame the company:
"I am going to take my posting script that posts to 200 thousand message boards on the internet and I am going to post very bad things about your little Tipi company. You may be having fun now but you will be crying in your soup when someone types in tipi or arrow tipi or arrowtipi in the search engines and all that comes up is crap about you and your company. I am telling you this is a war you cannot win and it will take you years if ever to remove what it takes me 5 minutes to place. think about it before you act because I am very serious about this. This goes for anyone else here that wants to play."
That ROKSO record also has details of Russo's "Anti-Spam-America LLC" which had us rolling on the floor in stitches last year...
<do-not-e...@think-about.it> wrote: >Getting lots of messages at many domains promoting Spamhaus - not sure what >they are trying to achieve :
>WORKING TO PROTECT INTERNET NETWORKS WORLDWIDE >Spamhaus tracks the Internet's Spammers, Spam Gangs and Spam Services, >provides dependable >realtime anti-spam protection for Internet networks, and works with Law >Enforcement to identify >and pursue spammers worldwide.
Seeing the same thing to. Very strange indeed, they don't even include the url to spamhaus. What's the point unless its to portray spamhaus as spammers.
Or is a certain outfit trying to make it look like spamhaus is advertising itself in markets so they can collect some money. See they do market and maintain a presence. A doubt a certain person has thrown away his proxy sending software.
-- Cary Your have the right to say whatever wish. But just as you may not open my door to say it, you also may not put it in my email box. Your rights end when they meet my firewall.
Cary wrote: >Or is a certain outfit trying to make it look like spamhaus is >advertising itself in markets so they can collect some money. See they >do market and maintain a presence. A doubt a certain person has thrown >away his proxy sending software.
And he is dumb enough to try and miss two birds with the same stone? Put his own email address into it, just to collect the complaints, and thus spam the crap out of people who respond?
"Let's see, I'ma gonna spend the time/effort/money to send this ... lujidament anouncemint, so why not try to make sum muny wiff it?"
Yeah, I guess it must be e360idiot again. Who else would be so stupid?
-- Those who try to hide behind Godwin are the real net-nazis. Philosophy: Joking about why we cuss so much. Learn about spam: http://www.seige-perilous.org/spam/spam.html [fourth line intentionally left blank]
<do-not-e...@think-about.it> wrote: >Getting lots of messages at many domains promoting Spamhaus - not sure what >they are trying to achieve :
>WORKING TO PROTECT INTERNET NETWORKS WORLDWIDE >Spamhaus tracks the Internet's Spammers, Spam Gangs and Spam Services, >provides dependable >realtime anti-spam protection for Internet networks, and works with Law >Enforcement to identify >and pursue spammers worldwide.
Comparing the source IP's should prove interesting if confusing.
The trouble is all too often folks read beyond a headline.
On Fri, 06 Jul 2007 12:20:51 -0500, Cary wrote: > Or is a certain outfit trying to make it look like spamhaus is > advertising itself in markets so they can collect some money. See they > do market and maintain a presence. A doubt a certain person has thrown > away his proxy sending software.
Correct me if I'm wrong, but spamhaus doesn't advertise, to the best of my knowledge. It's been entirely word of mouth; by the time you need their services on a paid basis, you KNOW who they are and where to find them...
On Fri, 06 Jul 2007 19:14:30 +0000, Jay Chandler wrote: > On Fri, 06 Jul 2007 12:20:51 -0500, Cary wrote:
>> Or is a certain outfit trying to make it look like spamhaus is >> advertising itself in markets so they can collect some money. See they >> do market and maintain a presence. A doubt a certain person has thrown >> away his proxy sending software.
> Correct me if I'm wrong, but spamhaus doesn't advertise, to the best of > my knowledge. It's been entirely word of mouth; by the time you need > their services on a paid basis, you KNOW who they are and where to find > them...
Sort of like the A Team.
-- "A 7-word insult about intelligence containing two misspellings and a punctuation error. I believe that's a new record for you..." -- Kevin Wilson, June 29, 2007
On Fri, 06 Jul 2007 19:26:58 -0000, NetworkElf <e...@networkelf.net> wrote:
>> Correct me if I'm wrong, but spamhaus doesn't advertise, to the best of >> my knowledge. It's been entirely word of mouth; by the time you need >> their services on a paid basis, you KNOW who they are and where to find >> them...
>Sort of like the A Team.
Nah, Steve isn't wearing fifty pounds of gold chains, no mohawk and he doesn't preface everything with "I pity the fool". ;-)
>>Getting lots of messages at many domains promoting Spamhaus - not sure what >>they are trying to achieve :
>>WORKING TO PROTECT INTERNET NETWORKS WORLDWIDE >>Spamhaus tracks the Internet's Spammers, Spam Gangs and Spam Services, >>provides dependable >>realtime anti-spam protection for Internet networks, and works with Law >>Enforcement to identify >>and pursue spammers worldwide.
>Comparing the source IP's should prove interesting if >confusing.
>The trouble is all too often folks read beyond a headline.
Source IP 217.25.18.162 (HELO mail2mike.com) (217.25.18.162) listed on a couple of lists. PBL, CBL, and UCEprotect2 no rDNS
Subject: Are many moatsville
payload identical to the OPs
turn to and from : munged @ mail2mike.com *who knows might be a legit email address of someone innocent*
I'd expect spamhaus has a lot of copies by now. But I am curious how big a run it was. -- Cary
-- When Andrea Margiotta of consultingweb.it says "I ask me why a owner of spam list is so aggressive with a provider, provider is make of people that work hard, causes of internet disability is spammer, is this person that must to pay they misfact." He means it.
In article <sk3t831b755brs1mpq5rbkab5ega076...@4ax.com>, Chris U <pressedp...@nojunk.blueyonder.co.uk> wrote:
> Comparing the source IP's should prove interesting if > confusing.
They will be hijacked proxies as usual, so to us they're only interesting in that they may identify new proxies not yet on CBL/XBL, and identify dynamic IP ranges not yet on PBL.
Cary <masteroflus...@eaglemailserver.invalid> wrote: > Or is a certain outfit trying to make it look like spamhaus is > advertising itself in markets so they can collect some money.
No, this is just some small-time spammer burning up his proxies, probably one who's spam bidniz we terminated yesterday.
On Sat, 07 Jul 2007 00:21:18 +0200, Steve Linford wrote: > They will be hijacked proxies as usual, so to us they're only > interesting in that they may identify new proxies not yet on CBL/XBL, > and identify dynamic IP ranges not yet on PBL.
On a tangent, does the PBL accept submissions of observed dynamic ranges? I'm getting hit with more than a few, and would love to have some way of nominating 'em elsewhere...
>>> Correct me if I'm wrong, but spamhaus doesn't advertise, to the best of >>> my knowledge. It's been entirely word of mouth; by the time you need >>> their services on a paid basis, you KNOW who they are and where to find >>> them... >> Sort of like the A Team.
> Nah, Steve isn't wearing fifty pounds of gold chains, no mohawk and he > doesn't preface everything with "I pity the fool". ;-)
Don't give the Resident Mind-Control Agents with Photoshop any unnecessary ideas....
-- Test, Jamie, Test. Just remember: It's the shiny side out.
Susan wrote: > On Fri, 06 Jul 2007 19:26:58 -0000, NetworkElf <e...@networkelf.net> > wrote:
>>> Correct me if I'm wrong, but spamhaus doesn't advertise, to the best of >>> my knowledge. It's been entirely word of mouth; by the time you need >>> their services on a paid basis, you KNOW who they are and where to find >>> them...
>>Sort of like the A Team.
> Nah, Steve isn't wearing fifty pounds of gold chains, no mohawk and he > doesn't preface everything with "I pity the fool". ;-)
Still, I can picture him with his feet up, lighting a cigar and saying, "I love it when a plan comes together."
-- Postulate a group whose intent is to destroy the United States from within via anarchy and bankruptcy. The actions of the United States Congress are completely consistent with the actions one would predict from such a group.
<linf...@spamhaus.org> wrote: >In article <sk3t831b755brs1mpq5rbkab5ega076...@4ax.com>, > Chris U <pressedp...@nojunk.blueyonder.co.uk> wrote:
>> Comparing the source IP's should prove interesting if >> confusing.
>They will be hijacked proxies as usual, so to us they're only >interesting in that they may identify new proxies not yet on CBL/XBL, >and identify dynamic IP ranges not yet on PBL.
>-- > Steve Linford
To be expected I guess.
I'm still hammering away in the Virgin Media forums about their spam issues in both directions. From the numbers of Spamhaus listed IP's that slip through whatever settings they have, seems to indicate the whole set up is screwed up or someone keeps lowering the defences if the load of the servers which check Spamhaus becomes high and causes a backlog. The users are now seeing the servers supplying their mail taken out of service every couple of weeks for defrag. My guess is it's to close up the holes created by users anti settings deleting anything seen as spam cluttering up the space.
Susan wrote: > On Fri, 06 Jul 2007 19:26:58 -0000, NetworkElf <e...@networkelf.net> > wrote:
>>> Correct me if I'm wrong, but spamhaus doesn't advertise, to the best of >>> my knowledge. It's been entirely word of mouth; by the time you need >>> their services on a paid basis, you KNOW who they are and where to find >>> them... >> Sort of like the A Team.
> Nah, Steve isn't wearing fifty pounds of gold chains, no mohawk and he > doesn't preface everything with "I pity the fool". ;-)
But wouldn't it be really cool if he did??
-- To be clear on that last one, I would rather irradiate myself with a radioactive cobalt cockring than have even three point seven seconds of sexytime with Pamela Anderson. - Flaming Poultice
: : > Getting lots of messages at many domains promoting Spamhaus - not sure what : > they are trying to achieve : : We're a bit puzzled too, as normally we'd expect the spammer to at least : put some email addresses or links or something in the joe-job. This one : simply had a postal address which is not the address of Spamhaus, and a : phone number which doesn't work and is not the number of Spamhaus. : : The phone number is an old number used by Ultradesign some years ago, : however the same phone number was given in a joe-job last year by : spammers William Stanley and Robert Russo. So I imagine those two jail : birds may be spamming this one too, although for what purpose is a : mystery. :
Messages continue and are now carrying a Swiss contact :
You can get MUCH MORE if you contact us:
The Spamhaus Project Ltd. 18 Avenue Louis Casai, CH-1209, Geneva, Switzerland, Tel +41225330399
<do-not-e...@think-about.it> wrote: >You can get MUCH MORE if you contact us:
Gee, wonder who else likes to use strange all caps in the middle of sentences.....Oh, yeah..our little buddy "Euros" aka Moris Chiprut. I'm surprised he has the energy given he spends so much time on spam fora. Maybe "Euros" and his buddy Nick Danger cooked this up? Marion Lynn enjoys egging others on to DDoS anti-spam sites.
>>you guys are sooooooo fucking gay, we all know you suck horse cock.
>>How gay can you get, CRYING like a little bitch all the time.
>>pussy ass bitches
>>p.s. Shiksaa = donkey
>Your fondness for using "donkey" as an insult, and your penchant for >using all caps for certain words is already well documented, and thus >gave you away:
>>You are a master donkey. You can't even answer a simple question.
>>>*PLONK*
>>Thanks!
>>----- >>Are you INSANE? Then you are qualified to become a SPEWS PUPPET! >>Our mission is simple: We INTIMIDATE the innocent spews victims. >>If you would like to be part of a CRIMINAL organization, write in confidence to: >>patricia a. shaffer, >>Chief spews rat @ Nanae
>>You will require a few double lobotomies by the time you finish >>masturbating on your neighbor's donkey.
>>----- >>Are you insane? Then you are qualified to become a SPEWS PUPPET
I hope the Moris Chorus just reads it and moves along...
"Splorf!" <do-not-e...@think-about.it> wrote: > Messages continue and are now carrying a Swiss contact :
> You can get MUCH MORE if you contact us:
> The Spamhaus Project Ltd. 18 Avenue Louis Casai, CH-1209, Geneva, > Switzerland, Tel +41225330399
At least that address works should these mailings 'pick up' a customer ;)
(I'll be amazed if someone actually contacts us since the type of people who can use our service all have internet access and simply go to the website. Maybe the spammer is hoping we'll pay him an affiliate fee if someone actually ends up buying our service from his spam :)
