Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Spammer's list may be short

1 view
Skip to first unread message

pchelp

unread,
Apr 25, 2001, 1:04:17 PM4/25/01
to

Just now for the first time I began "greping" the mailbomb for
repetition. I find hundreds, sometimes more than 1,000 emails have been
sent to the same addresses.

It is possible the forged spam is being intentionally sent and re-sent
to a known-bad list of email addresses, just for the purpose of
generating the rejection messages that I and three others are receiving.

pchelp

abujamal

unread,
Apr 25, 2001, 2:48:42 PM4/25/01
to
Salaam!

pchelp wrote:

> Just now for the first time I began "greping" the mailbomb
> for repetition. I find hundreds, sometimes more than 1,000
> emails have been sent to the same addresses.

I noticed repetition back when I was still looking at them.

> It is possible the forged spam is being intentionally sent
> and re-sent to a known-bad list of email addresses, just
> for the purpose of generating the rejection messages that
> I and three others are receiving.

You, me, Davidovv -- who else? I have 4960 of them now, 24+
megabytes. How come Davidovv is ahead of me?

> pchelp

was-salaam,
abujamal
--
PCHelpers: Putting the "Personal" into "Personal Computers"
and closing the door on the tyranny of ignorance.
PCHelpers International: http://www.pchelpers.org/
news://news.pchelponline.org mailto:pche...@pchelpers.org

davidovv

unread,
Apr 25, 2001, 3:37:21 PM4/25/01
to

abujamal <mus...@earthlink.net> wrote:
>Salaam!
>
>pchelp wrote:
>
>> Just now for the first time I began "greping" the mailbomb
>> for repetition. I find hundreds, sometimes more than 1,000
>> emails have been sent to the same addresses.
>
> I noticed repetition back when I was still looking at them.
>
>> It is possible the forged spam is being intentionally sent
>> and re-sent to a known-bad list of email addresses, just
>> for the purpose of generating the rejection messages that
>> I and three others are receiving.
>
> You, me, Davidovv -- who else? I have 4960 of them now, 24+
>megabytes. How come Davidovv is ahead of me?
>
>> pchelp
>
>was-salaam,
>abujamal
>--

Abujamal,

I'm getting them on two addys related to our website - this one
and another one. They are coming in right now 4-6 (at each addy)
every 2 minutes. (that's a heck of data).

regards,

davidovv
http://www.wilders.org

abujamal

unread,
Apr 25, 2001, 3:29:08 PM4/25/01
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Salaam!

pchelp wrote:

>> You, me, Davidovv -- who else?

> Wayne.

> k...@recham.ernet.in.
> al...@ns.itochu.co.in
> wa...@kyelinux.kyelinux.geniusnet.com.hk.

That's what I have, too. I sent the following just now:

- -------- Original Message --------
To: ab...@recham.ernet.in,ab...@kyelinux.kyelinux.geniusnet.com.hk,
ab...@ns.itochu.co.in
Subject: SPAM EMAIL BOMBS

Salaam!

Gentlemen, in the last twelve hours some twenty thousand emails
have been sent from the following three accounts to four recipients
in the United States and Australia:

k...@recham.ernet.in
wa...@kyelinux.kyelinux.geniusnet.com.hk
al...@ns.itochu.co.in

and they are continuing to come in as I write. It appears that some
members of the Sub-Seven trojan writers club who work for or in
support of a fraudulent security software vendor in New Hampshire,
Michael Paris, who is in federal court against a software critic who
exposed his software, Lockdown2000, have caused these three accounts
to redirect all incoming "returns" from a spam attack to the four
recipients. I have received 5,027 spam emails since midnight Pacific
Daylight Time (-0700).

Please secure your servers against teenagers who appear to own
them at the moment.

was-salaam,
abujamal

So you all can correct any errors in this and follow up.

This is funny.

> pchelp

was-salaam,
abujamal
- --

PCHelpers: Putting the "Personal" into "Personal Computers"
and closing the door on the tyranny of ignorance.
PCHelpers International: http://www.pchelpers.org/
news://news.pchelponline.org mailto:pche...@pchelpers.org

-----BEGIN PGP SIGNATURE-----
Version: 6.5.8ckt http://www.ipgpp.com/
Comment: Unpublished key by intent of signer

iQEVAwUBOuclg9bWRcYTlnfrAQOQOggApwNAqRbXTRBAdAHXTYv94+PIv1z+Lf6Q
/0sghUcI/q8YvxkivZ0KjEva27IMGkvo/f5k+eHq3CB+SU57D2cXN/yArRXuzRAV
R6XcKUQtOvKR8k+X5+10+FQ/HVgwSEZlK9S8GvwBkH5IA8rRFZjT/G4V4dHS/GwC
eD4FFn2ug7IGOoMA9iHMb7PO8UayMv7rIf3WlaxCqShNhGrcJc3+sUjBLyc1pWrw
6ZcYgyMZYx0KUv9hsm5fvjLrOD8nIK4K1TNWr2VpYJ+Qk07ohGvLs/+xtjtxkqEI
1GwzhN5NQSmL9J/uSamqFAHhTYgbJ5/h958zt8szsQCp8qGzBF70Hg==
=4Glu
-----END PGP SIGNATURE-----

Wayne / DiamondCS

unread,
Apr 25, 2001, 2:49:21 PM4/25/01
to
Filtering/redirecting mailer-daemon@ and postmaster@ that isn't originating
from your ISP pretty much takes care of it all... :-)

Enjoy the rest of the week,
Wayne

Wayne / DiamondCS

unread,
Apr 25, 2001, 3:11:57 PM4/25/01
to
I can count if you want, but they're all being dumped to disk as soon as
they get to Perth, they're not getting into the actual mail stream so I
haven't been paying much attention to it :-)
But yep I've got some from those email addresses listed below...

Cheers,
Wayne


pchelp <pch...@nwi.net> wrote in message
news:3ae71f1d....@news.grc.com...
> X-No-archive: yes
>
> abujamal <mus...@earthlink.net> has evidently written:


>
> >pchelp wrote:
> >> It is possible the forged spam is being intentionally sent
> >> and re-sent to a known-bad list of email addresses, just
> >> for the purpose of generating the rejection messages that
> >> I and three others are receiving.
>
> > You, me, Davidovv -- who else?
>

> Wayne.


>
>
> >I have 4960 of them now, 24+
> >megabytes. How come Davidovv is ahead of me?
>

> I have no idea. I still have roughly half your total (2652 at the
> moment) and Davidovv seems to have roughly twice your volume. Looks
> like Wayne hasn't been counting.
>
> One "remove" request came to me, redirected through the email address
> k...@recham.ernet.in. Wayne got a copy of that too, suggesting the
> account is set up to forward everything to all of us. Which explains it
> all.
>
> That's probably true of the other two accounts, al...@ns.itochu.co.in
> and (I think) wa...@kyelinux.kyelinux.geniusnet.com.hk.
>
> pchelp


Andras Sarkozy

unread,
Apr 25, 2001, 3:43:28 PM4/25/01
to
abujamal wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: RIPEMD160
>
> Salaam!
>
> davidovv wrote:
>
> > I'm getting them on two addys related to our website - this
> > one and another one. They are coming in right now 4-6 (at
> > each addy) every 2 minutes. (that's a heck of data).
>
> Well, that's crass discrimination! If anyone should get the
> lion's share, it's Keith, who is the star of this show. After that I
> suppose it's up for grabs who should get the biggest bunch after
> that, but the numbers seem completely disproportionate -- can't this
> kid add? Who do we complain to about this unfair distribution of
> email bombs?
>
> I mean, this is my first -- I've had people send me virus and
> trojan attachments, but this is much more fun. Is there a club we
> can join to get these things regularly?
>
> I have 5,102 now, but this disproportionate distribution thing ...
>
> > regards,
> > davidovv
> > http://www.wilders.org
>
> was-salaam,
> abujamal
>

The frequency/speed maybe related to the mail server which receiving the mails. The outgoing server has a limited amount of connection it uses so it has to spread according to the received mails/connections.

Andras

abujamal

unread,
Apr 25, 2001, 3:43:15 PM4/25/01
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Salaam!

davidovv wrote:

> I'm getting them on two addys related to our website - this
> one and another one. They are coming in right now 4-6 (at
> each addy) every 2 minutes. (that's a heck of data).

Well, that's crass discrimination! If anyone should get the


lion's share, it's Keith, who is the star of this show. After that I
suppose it's up for grabs who should get the biggest bunch after
that, but the numbers seem completely disproportionate -- can't this
kid add? Who do we complain to about this unfair distribution of
email bombs?

I mean, this is my first -- I've had people send me virus and
trojan attachments, but this is much more fun. Is there a club we
can join to get these things regularly?

I have 5,102 now, but this disproportionate distribution thing ...

> regards,
> davidovv
> http://www.wilders.org

was-salaam,
abujamal
- --

PCHelpers: Putting the "Personal" into "Personal Computers"
and closing the door on the tyranny of ignorance.
PCHelpers International: http://www.pchelpers.org/
news://news.pchelponline.org mailto:pche...@pchelpers.org

-----BEGIN PGP SIGNATURE-----


Version: 6.5.8ckt http://www.ipgpp.com/
Comment: Unpublished key by intent of signer

iQEVAwUBOuco0NbWRcYTlnfrAQNjEwf/VmKrCSKw1UcnkbNialwW6SIh2EVAZ/Kc
roJqhmKsaXrzC+kN+U3PKFVUIsXliuMXhAXPp06vWxVNjscOti23QvhpbTH3sGvL
NwHqdKbVMeIsmqF3ec/rUz+JnUS+S1xrvCGT7dRRJgeAYXq6vZpTtOaqwDTnut3G
InoXX5YSu3hMuFEdijkIfdZ11If1do45JSY+o0RXPZKbSzNMpg3O2zPHQreZwjsI
AL7oBaeQ/k/oPLhTKi90YHZLdldS3SMT1gxJd0hCYTrFCZ2Xo/HFDHyBF/hbtX75
07GPP1xt84+lC9EQwoUgRAElkJzTa1TGDlHbCBvN6kHI5OIO2QiDgw==
=9b8X
-----END PGP SIGNATURE-----

davidovv

unread,
Apr 25, 2001, 3:54:42 PM4/25/01
to

abujamal <mus...@earthlink.net> wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: RIPEMD160
>
>Salaam!
>
>davidovv wrote:
>
>> I'm getting them on two addys related to our website - this
>> one and another one. They are coming in right now 4-6 (at
>> each addy) every 2 minutes. (that's a heck of data).
>
> Well, that's crass discrimination! If anyone should get the
>lion's share, it's Keith, who is the star of this show. After
that I
>suppose it's up for grabs who should get the biggest bunch after
>that, but the numbers seem completely disproportionate -- can't
this
>kid add? Who do we complain to about this unfair distribution
of
>email bombs?
---------
That's funny!
---------

>
> I mean, this is my first -- I've had people send me virus and
>trojan attachments, but this is much more fun. Is there a club
we
>can join to get these things regularly?
--------
One will do for me..BTW: are you, keith and me the only members,
as far as you know of?
--------

>
> I have 5,102 now, but this disproportionate distribution thing
..
---------
I'm not counting anymore; trashed them.
---------

>
>> regards,
>> davidovv
>> http://www.wilders.org
>
>was-salaam,
>abujamal
>- --

regards,

davidovv
http://www.wilders.org


davidovv

unread,
Apr 25, 2001, 3:58:06 PM4/25/01
to
>Andras]
-----------
Hi Andras,

If I'm not mistaken, you are one of the receivers as well?

regards,

davidovv
http://www.wilders.org

Andras Sarkozy

unread,
Apr 25, 2001, 3:53:13 PM4/25/01
to

> -----------
> Hi Andras,
>
> If I'm not mistaken, you are one of the receivers as well?
>
> regards,
>
> davidovv
> http://www.wilders.org

No - I'm not:( Maybe the mail server prevents me to getting them?

Andras
P.S. - check your mail box.

Robert Wycoff

unread,
Apr 25, 2001, 4:02:52 PM4/25/01
to

"Andras Sarkozy" <and...@andras.net> wrote in message
news:3AE72B29...@andras.net...

>
> > -----------
> > Hi Andras,
> >
> > If I'm not mistaken, you are one of the receivers as well?
> >
> > regards,
> >
> > davidovv
> > http://www.wilders.org
>
> No - I'm not:( Maybe the mail server prevents me to getting them?

Oops. I thought pchehpers.org was getting some.
--
«
--
Robert
grc.com forum FAQ - http://grc.com/discussions.htm
grc.com forum quick reference - http://grc.com/nntpquickref.htm
grc.com forum disclaimer - http://grc.com/forumdisclaimer.htm
grc.com privacy statement - http://grc.com/privacy.htm

davidovv

unread,
Apr 25, 2001, 4:10:00 PM4/25/01
to

Andras Sarkozy <and...@andras.net> wrote:
>
>> -----------
>> Hi Andras,
>>
>> If I'm not mistaken, you are one of the receivers as well?
>>
>> regards,
>>
>> davidovv
>> http://www.wilders.org
>
>No - I'm not:( Maybe the mail server prevents me to getting them?
------------
Right.
------------

>
>Andras
>P.S. - check your mail box.
------------
Just did; another 12 of them - is that what you wanted to know
:)

regards,

davidovv

Ray F. Jones

unread,
Apr 25, 2001, 4:40:18 PM4/25/01
to

"pchelp" <pch...@nwi.net> wrote in message
news:3ae71f1d....@news.grc.com...
> X-No-archive: yes
>
> abujamal <mus...@earthlink.net> has evidently written:
>
> >pchelp wrote:
> >> It is possible the forged spam is being intentionally sent
> >> and re-sent to a known-bad list of email addresses, just
> >> for the purpose of generating the rejection messages that
> >> I and three others are receiving.
>
> > You, me, Davidovv -- who else?
>
> Wayne.

>
>
> >I have 4960 of them now, 24+
> >megabytes. How come Davidovv is ahead of me?
>
> I have no idea. I still have roughly half your total (2652 at the
> moment) and Davidovv seems to have roughly twice your volume. Looks
> like Wayne hasn't been counting.
>
> One "remove" request came to me, redirected through the email address
> k...@recham.ernet.in. Wayne got a copy of that too, suggesting the
> account is set up to forward everything to all of us. Which explains it
> all.
>
> That's probably true of the other two accounts, al...@ns.itochu.co.in
> and (I think) wa...@kyelinux.kyelinux.geniusnet.com.hk.
>

pchelp,

These guys are small time. About a year ago, I got a mail bombing that ran
at just over 12,000 per hour for 24 hours. <g>

Ray


Eric Erades

unread,
Apr 25, 2001, 5:01:34 PM4/25/01
to
Ray F. Jones <rfj...@oakcrest.com> wrote:
>pchelp,
>
>These guys are small time. About a year ago, I got a mail bombing that
>ran at just over 12,000 per hour for 24 hours. <g>
>
>Ray
>

Hi Ray,

So you're still reading than? <g>
--
Eric Erades

mc

unread,
Apr 26, 2001, 5:48:32 AM4/26/01
to
Robert Wycoff wrote:
>
> "Andras Sarkozy" <and...@andras.net> wrote in message
> news:3AE72B29...@andras.net...
> >
> > > -----------
> > > Hi Andras,
> > >
> > > If I'm not mistaken, you are one of the receivers as well?
> > >
> > > regards,
> > >
> > > davidovv
> > > http://www.wilders.org
> >
> > No - I'm not:( Maybe the mail server prevents me to getting them?
>
> Oops. I thought pchehpers.org was getting some.

ssssshhhhhhhhhhhhhhhhh!!!!!!!!!! dont give em any ideas! *lol*

--
_____________________________________________________________________
_ __ __ Remember the Legend - Dale Earnhardt
| ' \/ _|
|_|_|_\__| http://pchelpers.org/

--+ The only constant in the universe is change +--

<<==-- Drain the WATER from my email to reply --==>>

0 new messages