Re: this wacko loser who posts under the alias 'Hendry Leon' (hendryleon@hotmail.com) wrote under the alias 'david'
Hendry Leon
'hendry leon' 'david' 'kelly' THE SAME PERSON WROTE UNDER DIFFERENT
ALIASES.
ONE AND THE SAME LOSER!
again:
'hendry leon' 'david' 'kelly' ONE AND THE SAME LOSER!
Rod
Your post is a fraud. Google servers do not suppress
the NNTP Posting Host line. You've used cracker software
to post it...
Thats morally wrong and pretty sad
--
To quote Jerry Moon;
Spelling mistakes above left in for people who need to correct
others to make their life fulfilled.
Copyright protected
Permission granted to copy for replies in News Groups
Jerry Moon
Whiskers
> Hendry Leon wrote:
>> 'hendry leon' 'david' 'kelly' THE SAME PERSON WROTE UNDER DIFFERENT
>> ALIASES.
>>
>> ONE AND THE SAME LOSER!
>>
>>
>>
>> again:
>> 'hendry leon' 'david' 'kelly' ONE AND THE SAME LOSER!
>>
>
> Your post is a fraud. Google servers do not suppress
> the NNTP Posting Host line. You've used cracker software
> to post it...
>
> Thats morally wrong and pretty sad
Nothing was hacked. Someone entered a misleading entry for the
Organisation header, and used an email address almost identical to someone
elses. The OP was posted using Giganews, as all the other headers show.
Sad and wrong to impersonate anyone, particularly someone so clearly
vulnerable, certainly.
--
-- ^^^^^^^^^^
-- Whiskers
-- ~~~~~~~~~~
Rod
> On 2008-04-24, Rod <ico...@att.net> wrote:
>> Hendry Leon wrote:
>>> 'hendry leon' 'david' 'kelly' THE SAME PERSON WROTE UNDER DIFFERENT
>>> ALIASES.
>>>
>>> ONE AND THE SAME LOSER!
>>>
>>>
>>>
>>> again:
>>> 'hendry leon' 'david' 'kelly' ONE AND THE SAME LOSER!
>>>
>> Your post is a fraud. Google servers do not suppress
>> the NNTP Posting Host line. You've used cracker software
>> to post it...
>>
>> Thats morally wrong and pretty sad
>
> Nothing was hacked. Someone entered a misleading entry for the
> Organisation header, and used an email address almost identical to someone
> elses. The OP was posted using Giganews, as all the other headers show.
Yes, and compared to Hendry's headers, the NNTP Posting Host line was
left out entirely.
>
> Sad and wrong to impersonate anyone, particularly someone so clearly
> vulnerable, certainly.
>
it's wrong to do it to anyone, but many on the net simply don't care.
"<316>"
> Sad and wrong to impersonate anyone, particularly someone so clearly
> vulnerable, certainly.
You likely just answered the impersonator in the above post, mate.
Whiskers
> On Apr 24, 2:49 pm, Whiskers <catwh...@operamail.com> wrote:
>
>> Sad and wrong to impersonate anyone, particularly someone so clearly
>> vulnerable, certainly.
>
> You likely just answered the impersonator in the above post, mate.
Not impossible, if that person has posting accounts with both Giganews and
Prodigy. The technical misinformation was worth correcting nonetheless.
Whiskers
> Whiskers wrote:
>> On 2008-04-24, Rod <ico...@att.net> wrote:
[...]
>>> Your post is a fraud. Google servers do not suppress
>>> the NNTP Posting Host line. You've used cracker software
>>> to post it...
>>>
>>> Thats morally wrong and pretty sad
>>
>> Nothing was hacked. Someone entered a misleading entry for the
>> Organisation header, and used an email address almost identical to someone
>> elses. The OP was posted using Giganews, as all the other headers show.
>
> Yes, and compared to Hendry's headers, the NNTP Posting Host line was
> left out entirely.
[...]
Many reputable NSPs do not insert that header; it isn't something the
poster has any control over beyond choosing which NSP to post to.
Rod
No, I'm not the impersonator Whiskers, I'm real. I've got a proxy
between myself and the net, it serves as a "firewall" to protect me from
crackers and the like. The nntp posting host address is the address of
the proxy. I real enough.
Rod
"<316>"
> Not impossible, if that person has posting accounts with both Giganews and
> Prodigy. The technical misinformation was worth correcting nonetheless.
No, not impossible at all. Rodney's already been caught once
impersonating Engineer - he's was careelss enough to misspell Guy's
nym as "Enineer", giving himself away. He's been using socks and
impersonating other users for quite some time - for entertainment,
sense of control? I'm not sure why he does it, but he does do it. My
guess is that he will sit in SRQ for a while, play all of you for a
time and move on to another group.
<shrug>
Rod
I'll say it again, I'm posting as myself only.
"<316>"
> I'll say it again, I'm posting as myself only.
Say it all you want. The truth is that you are a known Usenet liar,
sock-puppet poster, and post forger.
///Rod\\\
Actually it isn't either one of us...it's Merle Elaine Matthews,
and unlike YOU I can and DO read headers and provide evidence...
Look at the first server at the left in the path statement. That is
the server that accepts requests from the address ranges of 1 - 254,
ignoring ip addy's 0 and 255. Notice the addy range in this header
below, then compare it with the address on Elaine Matthews header...
Elaine can manipulate her address between the ranges, 1-254. The
ip address allocation figures somewhat like this...4 sets of three
digits...reading also right to left the first 3 would be the local
address range of 1-254. The second set of 3 to the left would be a
larger range of address, and to the left are larger and farther out
address that eventually encompass the entire network range.
Elaine has been trying to defeat this scheme by using an anon server,
AIOE to post thru. However it doesn't work BECAUSE the path statement
included the server that receives her posts before they reach the
news server network.
The first server in the path line determines who it is doing the
posting. Now go to the bottom of the page and compare that ip address
of the first server in the path statement...
flpi142.ffdc.sbc.com server address is 209.91.172.154 in Subury Canada...
Merle Elaine Matthews is the forger....
Path:
flpi142.ffdc.sbc.com!newsdst01.news.prodigy.net!prodigy.com!newscon04.news.prodigy.net!prodigy.net!goblin1!goblin.stu.neva.ru!newsfeed.straub-nv.de!aioe.org!not-for-mail
From: watcher <wat...@eyes.net>
Newsgroups: alt.religion.christian.baptist
Subject: To the BITCH Elaine
Date: Sun, 04 May 2008 19:23:33 -0400
Organization: Aioe.org NNTP Server
Lines: 5
Message-ID: <fvlghq$9t1$1...@aioe.org>
NNTP-Posting-Host: 5qaO+c5PNAfNJZ6maDqPaA.user.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Complaints-To: ab...@aioe.org
X-Antivirus-Status: Clean
X-Antivirus: avast! (VPS 080504-0, 05/04/2008), Outbound message
User-Agent: Noworyta News Reader/2.9
Xref: prodigy.net alt.religion.christian.baptist:1123711
X-Received-Date: Sun, 04 May 2008 19:23:41 EDT (flpi142.ffdc.sbc.com)
209.91.172.154
Record Type: IP Address
OrgName: Vianet Internet Solutions
OrgID: VIS
Address: 128 Larch Street
Address: Suite 301
City: Sudbury
StateProv: ON
PostalCode: P3E-5J8
Country: CA
ReferralServer: rwhois://rwhois.vianet.ca:4321
NetRange: 209.91.128.0 - 209.91.191.255
CIDR: 209.91.128.0/18
NetName: VIANET-CA2
NetHandle: NET-209-91-128-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.VIANET.CA
NameServer: NS2.VIANET.CA
NameServer: NS3.VIANET.CA
NameServer: NS4.VIANET.CA
Comment: Detailed, current reassignment information is
Comment: maintained via rWHOIS (see http://www.rwhois.net for more
information on
Comment: rWHOIS). *Some* standard WHOIS clients *may* be able to retrieve
Comment: partial data by directing lookups to rwhois.vianet.ca.
RegDate: 1997-07-08
Updated: 2006-09-01
RTechHandle: VH25-ORG-ARIN
RTechName: Vianet Network Operations Centre
RTechPhone: +1-705-675-0400
RTechEmail: d...@vianet.on.ca
OrgNOCHandle: VH25-ORG-ARIN
OrgNOCName: Vianet Network Operations Centre
OrgNOCPhone: +1-705-675-0400
OrgNOCEmail: d...@vianet.on.ca
OrgTechHandle: VH25-ORG-ARIN
OrgTechName: Vianet Network Operations Centre
OrgTechPhone: +1-705-675-0400
OrgTechEmail: d...@vianet.on.ca
Path:
flpi142.ffdc.sbc.com!newsdst01.news.prodigy.net!prodigy.com!newscon04.news.prodigy.net!prodigy.net!bigfeed.bellsouth.net!news.bellsouth.net!cycny01.gnilink.net!cyclone1.gnilink.net!gnilink.net!nx02.iad01.newshosting.com!newshosting.com!216.196.98.140.MISMATCH!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.vianet!news.vianet.POSTED!not-for-mail
NNTP-Posting-Date: Wed, 07 May 2008 10:08:12 -0500
From: NOSPAM <nospam@nospam>
Newsgroups: alt.religion.christian.baptist
Subject: Re: To the BITCH Elaine
Date: Wed, 07 May 2008 11:08:03 -0400
Message-ID: <1eh324p009n788ke0...@4ax.com>
References: <fvlghq$9t1$1...@aioe.org> <6872n4F...@mid.individual.net>
<sriu14pg1aeimh0ct...@4ax.com>
X-Newsreader: Forte Agent 4.2/32.1118
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 080506-0, 05/06/2008), Outbound message
X-Antivirus-Status: Clean
Lines: 38
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 209.91.172.134
X-Trace:
sv3-ToOOQqPmGBT6iA6ZMr9DKBI5M87zQbmU8WrZX6Yok2FYADIZhFf/CDuBdKFTc5iGXiEr/6DmGf91Fct!paMpNxQ5e4v/hIWs/AVxJMgbwEporF5K/hqNK8xXsLauZznTwu3JLm6GZ5GrVOk+SsOItXquX6DB!eA24
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
X-Postfilter: 1.3.39
Bytes: 2020
Xref: prodigy.net alt.religion.christian.baptist:1124347
X-Received-Date: Wed, 07 May 2008 11:08:15 EDT (flpi142.ffdc.sbc.com)
Path:
newsdbm02.news.prodigy.net!newsdst02.news.prodigy.net!prodigy.com!newscon02.news.prodigy.net!prodigy.net!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.vianet!news.vianet.POSTED!not-for-mail
NNTP-Posting-Date: Mon, 28 Apr 2008 09:26:53 -0500
From: NOSPAM <nospam@nospam>
Newsgroups: soc.religion.quaker,alt.religion.christian.baptist
Subject: Re: @@@Did Elaine write this or is it yet another post forged
by Rodney Eastman?@@@
Date: Mon, 28 Apr 2008 10:26:47 -0400
Message-ID: <5dnb1495dk9vmomjd...@4ax.com>
References: <9fk6149pq4t3ug8t2...@4ax.com>
<PpPQj.23064$%41.1...@nlpi064.nbdc.sbc.com>
<8f0b1d2a-0e4b-4738...@s33g2000pri.googlegroups.com>
<his814dljdnhbqg4j...@4ax.com>
<c0a040a1-15d2-4e83...@w8g2000prd.googlegroups.com>
<jmp914taqg7usitrt...@4ax.com>
<m69a14ptfkrh2ot3v...@4ax.com>
<43fdff98-79e7-4ab5...@k10g2000prm.googlegroups.com>
<5q2b14db3kkflce0m...@4ax.com>
X-Newsreader: Forte Agent 4.2/32.1118
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 080428-0, 04/28/2008), Outbound message
X-Antivirus-Status: Clean
Lines: 44
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 209.91.172.144
X-Trace:
sv3-1462DjxxJEP5fTAOXFPOHk6alpIXqF2mCwE3S5evlKMxuzEJ/eLcCn2s7C73V0TnSs3upRHCuFSMvlK!MYa6TNvvPx3x43/gkC7jMJYwyQIpFQMon17orfB+rcHYsssNNuY5V1khyp6PweWRFi/4LOkn4WHf!gh/G
X-Complaints-To: abuse@vianet
X-DMCA-Complaints-To: abuse@vianet
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
X-Postfilter: 1.3.38
Bytes: 2725
Xref: prodigy.net soc.religion.quaker:156598
alt.religion.christian.baptist:1122100
X-Received-Date: Mon, 28 Apr 2008 10:26:56 EDT (newsdbm02.news.prodigy.net)
NOSPAM
>alt.religion.christian.baptist:1122100
>X-Received-Date: Mon, 28 Apr 2008 10:26:56 EDT (newsdbm02.news.prodigy.net)
Did it ever dawn on you that someone is forging me?
And vianet covers a lot of territory.
Nice try.
///Rod\\\
Nice try Elaine, but this boat won't float. Your ip address is in the
same range as that of the originating server. The only one forging you
is YOU Elaine.......
No one else.....your ip address range has been in the same range for
quite a while now, before this crap even began. I'm only shocked that I
hadn't seen it sooner !
You're a fraud Elaine, just like your "faith"....
Say hello to my kill filters.....
Rod
"<316>"
> Nice try Elaine, but this boat won't float. Your ip address is in the
> same range as that of the originating server. The only one forging you
> is YOU Elaine.......
>
> No one else.....your ip address range has been in the same range for
> quite a while now, before this crap even began. I'm only shocked that I
> hadn't seen it sooner !
>
> You're a fraud Elaine, just like your "faith"....
>
> Say hello to my kill filters.....
>
> Rod
All your "evidence" shows is that you have found a way to forge
headers. It's still you, Rodney - as I have stated repeatedly, your
posts have revealing similarities and if one knows how to spot those
similarities, one is able to see that the forger and sock-poster is
still only you.
"<316>"
> Actually it isn't either one of us...it's Merle Elaine Matthews,
> and unlike YOU I can and DO read headers and provide evidence...
>
> Look at the first server at the left in the path statement. That is
> the server that accepts requests from the address ranges of 1 - 254,
> ignoring ip addy's 0 and 255. Notice the addy range in this header
> below, then compare it with the address on Elaine Matthews header...
> Elaine can manipulate her address between the ranges, 1-254. The
> ip address allocation figures somewhat like this...4 sets of three
> digits...reading also right to left the first 3 would be the local
> address range of 1-254. The second set of 3 to the left would be a
> larger range of address, and to the left are larger and farther out
> address that eventually encompass the entire network range.
>
> Elaine has been trying to defeat this scheme by using an anon server,
> AIOE to post thru. However it doesn't work BECAUSE the path statement
> included the server that receives her posts before they reach the
> news server network.
>
> The first server in the path line determines who it is doing the
> posting. Now go to the bottom of the page and compare that ip address
> of the first server in the path statement...
>
> flpi142.ffdc.sbc.com server address is 209.91.172.154 in Subury Canada...
>
> Merle Elaine Matthews is the forger....
All your "evidence" shows is that you have found a way to forge