Discussion:
Caught one...
(too old to reply)
Dave Laird
2005-02-12 14:12:41 UTC
Permalink
Good morning, everyone...

I occasionally am able to decipher the IP and addresses of the clowns who
routinely allow the Nigerian Scam messages onto their mail servers. I got
a bit lucky this morning, and caught the following open mail relay doing
just that.

HostDime.com DimeNoc - Infinitum Technologies TWTC-INFINITUM-01
(NET-66-193-174-0-1)
66.193.174.0 - 66.193.175.255

You might put these clowns in your firewalls, or simply ignore this
message. They are with Time-Warner, and I have not, to date, received any
response to several open abuse complaints from them. <sigh>

Dave
--
Dave Laird (***@kharma.net)
The Used Kharma Lot
Web Page: http://www.kharma.net updated 11/24/2004
Usenet news server : news://news.kharma.net

Fortune Random Thought For the Minute
Frankfort, Kentucky, makes it against the law to shoot off a policeman's
tie.
James Vahn
2005-02-13 20:52:49 UTC
Permalink
Here's one promising something having to do with *Linux*. He shows a Hong
Kong domain (hk?) and private IP, but appears to have funneled this through
an Austrailian mail server. It was written with the usual virus tools
(Microsoft Outlook Express).


From ***@graduate.hku.hk Sun Feb 13 08:01:35 2005
Return-Path: <***@graduate.hku.hk>
Received: from 192.168.1.8 (15.83.233.220.exetel.com.au [220.233.83.15]) by
gonzo.circuit.com (8.13.2/8.13.2/Debian-1) with SMTP id
j1DG12jv015339 for <***@short.circuit.com>; Sun, 13 Feb 2005
08:01:25 -0800
Message-Id: <***@gonzo.circuit.com>
Reply-To: "Ralph" <***@graduate.hku.hk>
From: "Ralph" <***@graduate.hku.hk>
To: <***@short.circuit.com>
Subject: Online Linux manpages
Date: Mon, 14 Feb 2005 02:59:49 +1100
Organization: PenguinSoft
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0034_01C221EC.6C64F7B0"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000ams
X-MimeOLE: Produced by Microsoft MimeOLE V6.00.2800.1165
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on gonzo.circuit.com
X-Spam-Level: ****
X-Spam-Status: No, score=4.8 required=5.0 tests=FORGED_MUA_OUTLOOK,
FORGED_OUTLOOK_TAGS,FORGED_RCVD_HELO,HTML_MESSAGE,MSGID_FROM_MTA_ID
autolearn=no version=3.0.2
Status: R
X-Status:
X-Keywords:

------=_NextPart_000_0034_01C221EC.6C64F7B0
Content-Type: text/plain;
charset="iso-8859-1"

Hello,

We make a searchable online linux manpage. See it is useful for your linux
development. http://linux.com.hk/man/

With best regards,
Ralph
PenguinSoft

------=_NextPart_000_0034_01C221EC.6C64F7B0
Content-Type: text/html;
charset="iso-8859-1"

<HTML><HEAD><TITLE>E-mail message content</TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Courier New">
<DIV>
<FONT color=#0000FF><B>Hello,</B></FONT></DIV>
<DIV>
&nbsp;</DIV>
<DIV>
&nbsp; We make a searchable online linux manpage. See it is useful for your
linux development.</DIV> <DIV>
&nbsp; <A href="http://linux.com.hk/man/"><FONT
color=#0000FF><U>http://linux.com.hk/man/</U></FONT></A></DIV> <DIV>
&nbsp;</DIV>
<DIV>
<FONT color=#0000FF><B>--</B></FONT></DIV>
<DIV>
<FONT color=#0000FF><B>With best regards,</B></FONT></DIV>
<DIV>
<FONT color=#0000FF><B>Ralph</B></FONT></DIV>
<DIV>
<FONT color=#0000FF><B>PenguinSoft</B></FONT></DIV>
<DIV>
<FONT color=#0000FF>&nbsp;</FONT></DIV>
</FONT>
</BODY></HTML>


------=_NextPart_000_0034_01C221EC.6C64F7B0--

Loading...