From: "Stuart Moore" Newsgroups: alt.ascii-art Subject: Sudden Spam Epedemic Lines: 7 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Message-ID: Date: Sun, 25 Feb 2001 14:31:54 -0000 NNTP-Posting-Host: 62.255.115.183 X-Complaints-To: abuse@ntlworld.com X-Trace: news2-win.server.ntlworld.com 983111522 62.255.115.183 (Sun, 25 Feb 2001 14:32:02 GMT) NNTP-Posting-Date: Sun, 25 Feb 2001 14:32:02 GMT Organization: ntlworld News Service Path: chonsp.franklin.ch!pfaff.ethz.ch!news-zh.switch.ch!news-ge.switch.ch!news-fra1.dfn.de!news.tele.dk!194.42.224.136!diablo.netcom.net.uk!netcom.net.uk!btnet-peer!btnet-peer0!btnet!news5-gui.server.ntli.net!ntli.net!news2-win.server.ntlworld.com.POSTED!not-for-mail Xref: chonsp.franklin.ch alt.ascii-art:17542 On my NG feed, we've just received 3 cable box descrambler plans and one pornographic binary - is everyone seeing this or are the rest of you lucky enough to have decent filters? Anything we can do about it? Stuart ###### Path: chonsp.franklin.ch!not-for-mail From: Neil Franklin Newsgroups: alt.ascii-art Subject: Re: Sudden Spam Epedemic Date: 25 Feb 2001 22:27:11 +0100 Organization: My own Private Self Lines: 49 Message-ID: <6uwvaev4gg.fsf@chonsp.franklin.ch> References: NNTP-Posting-Host: chonsp.franklin.ch X-Trace: chonsp.franklin.ch 983136431 1247 10.0.3.2 (25 Feb 2001 21:27:11 GMT) X-Complaints-To: news@chonsp.franklin.ch NNTP-Posting-Date: 25 Feb 2001 21:27:11 GMT X-Newsreader: Gnus v5.7/Emacs 20.4 Xref: chonsp.franklin.ch alt.ascii-art:17553 "Stuart Moore" writes: > On my NG feed, we've just received 3 cable box descrambler plans and one > pornographic binary - is everyone seeing this or are the rest of you lucky > enough to have decent filters? They also arrive here (at least the 3 cable TV ones). > Anything we can do about it? Most spammers: Identify the providers of: - their net access (see the NNTP-Posting-Host: line) - their usenet access (see the tail of the Path: line) - their mail boxes (particularly those to anwer to) (see the From:, Reply-To: lines and addresses in the text) - their advertised web sites (see URLs in the text) and then mail (forward the spam) to abuse@provider and postmaster@provider and demand to have the net access or mail box or web site closed down. Repeat this for every spam that makes it through to you. Usenet and Email. The more people who do this, the faster the spammers net resources disappear, and the less spamming makes an profit. This particular cable TV spammer: He has no mail box and no web site and treats net access as "hit and run". So the best is to forward them to uce@ftc.gov so that they follow up the phone numbers and postal mail boxes to get him. Note: this is a government agancy mail box (federal trade commission), so the more people that complain of an particular spammer, the more likely they are going to take this particular spammer serious. That is also why you should not distract them with spams where you can go to the providers. Alternatively if you are in Florida: follow up the postal address and find out if local law enables you to privately sue him (for wasting you resources, see also anti FAX spam laws). -- Neil Franklin, neil@franklin.ch.remove http://neil.franklin.ch/ Hacker, Unix Guru, El Eng FH/BSc, Sysadmin, Roleplayer, LARPer, Mystic ###### From: "Stuart Moore" Newsgroups: alt.ascii-art References: <6uwvaev4gg.fsf@chonsp.franklin.ch> Subject: Re: Sudden Spam Epedemic Lines: 65 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Message-ID: Date: Sun, 25 Feb 2001 21:59:50 -0000 NNTP-Posting-Host: 62.255.96.249 X-Complaints-To: abuse@ntlworld.com X-Trace: news6-win.server.ntlworld.com 983138407 62.255.96.249 (Sun, 25 Feb 2001 22:00:07 GMT) NNTP-Posting-Date: Sun, 25 Feb 2001 22:00:07 GMT Organization: ntlworld News Service Path: chonsp.franklin.ch!pfaff.ethz.ch!news-zh.switch.ch!news-ge.switch.ch!feed2.news.luth.se!luth.se!news.tele.dk!212.43.194.69!fr.clara.net!heighliner.fr.clara.net!grolier!btnet-peer0!btnet!news5-gui.server.ntli.net!ntli.net!news6-win.server.ntlworld.com.POSTED!not-for-mail Xref: chonsp.franklin.ch alt.ascii-art:17557 Neil Franklin wrote in message news:6uwvaev4gg.fsf@chonsp.franklin.ch... > "Stuart Moore" writes: > > > On my NG feed, we've just received 3 cable box descrambler plans and one > > pornographic binary - is everyone seeing this or are the rest of you lucky > > enough to have decent filters? > > They also arrive here (at least the 3 cable TV ones). > I got 4, one of which contained 2 small jpgs, perhaps your provider blocks binarys. > > > Anything we can do about it? > > Most spammers: > > Identify the providers of: > > - their net access (see the NNTP-Posting-Host: line) Constant domein for all 4: ip113.orlando14.fl.pub-ip.psi.net for one and ip38.orlando14.fl.pub-ip.psi.net for the other 3; have forwarded to abuse@psi.net > - their usenet access (see the tail of the Path: line) All gone through tiac.net for me; 2 seemed to originate there, 2 from german domains. These 2 and one that does originate from tiac.net have: !news-feed1.tiac.net.MISMATCH So I'm guessing someone could have tried to fake this, and forwarded them to tiac.net > > This particular cable TV spammer: > > He has no mail box and no web site and treats net access as "hit and > run". So the best is to forward them to uce@ftc.gov so that they > follow up the phone numbers and postal mail boxes to get him. How do you know he treats net access as hit and run? > > Note: this is a government agancy mail box (federal trade commission), > so the more people that complain of an particular spammer, the more > likely they are going to take this particular spammer serious. That is > also why you should not distract them with spams where you can go to > the providers. > > Alternatively if you are in Florida: follow up the postal address and > find out if local law enables you to privately sue him (for wasting > you resources, see also anti FAX spam laws). Sorry, I'm in the UK. Although that said, I might try to sue him from here; I'll get him for not making his mind up about the US President at the same time too ;-) (sorry couldn't resist it) Hope this isn't to OT for some people, but given the Commodore thread I doubt anything could be ;-) Stuart ###### From: Bateau Newsgroups: alt.ascii-art Subject: Re: Sudden Spam Epedemic Date: Mon, 26 Feb 2001 08:57:26 +0800 Message-ID: References: X-Newsreader: Forte Agent 1.6/32.525 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 14 NNTP-Posting-Host: i191-051.nv.iinet.net.au X-Trace: news.iinet.net.au 983149187 26080 203.59.191.51 Path: chonsp.franklin.ch!pfaff.ethz.ch!news-zh.switch.ch!news-ge.switch.ch!kanja.arnes.si!news-hub.siol.net!newsfeed.rt.ru!news.tele.dk!204.94.211.44!enews.sgi.com!harbinger.cc.monash.edu.au!news.mel.connect.com.au!news.per.connect.com.au!newsfeed.iinet.net.au!news.iinet.net.au!not-for-mail Xref: chonsp.franklin.ch alt.ascii-art:17588 On Sun, 25 Feb 2001 14:31:54 -0000 "Stuart Moore" wrote: >On my NG feed, we've just received 3 cable box descrambler plans and one >pornographic binary - is everyone seeing this or are the rest of you lucky >enough to have decent filters? Anything we can do about it? Know what I see? A damned whiner epidemic. Seriously, people post useless complaints about spammers far more than people post spam. -- | _ \ _ ^~ email:bateau at jupiterio.net | <')_,/ , ; \ >(')__, . ` ' , ,______________._ | (_~=/ \._`.'. \ (_~_/ _, '------:_______ ;==( *BANG* | ='- \=~_) ; \ ~^~~^~ ` (_~_/ | | `-\ \ *BANG* | ICQ:11367619 -'= \ ~^~~^~ `~' \_; ###### From: "yAtGiRL tHeBuCkEt" Newsgroups: alt.ascii-art Subject: Re: Sudden Spam Epedemic Date: Sun, 25 Feb 2001 21:08:30 -0600 Organization: Girl Cooties Of America Message-ID: References: X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 X-Complaints-To: newsabuse@supernews.com Lines: 18 Path: chonsp.franklin.ch!pfaff.ethz.ch!news-zh.switch.ch!newsfeed-zh.ip-plus.net!news.ip-plus.net!news.tesion.net!news.belwue.de!news-stu1.dfn.de!news-koe1.dfn.de!news-fra1.dfn.de!news.tele.dk!171.64.14.106!newsfeed.stanford.edu!sn-xit-01!sn-post-01!supernews.com!corp.supernews.com!not-for-mail Xref: chonsp.franklin.ch alt.ascii-art:17577 : >pornographic binary - is everyone seeing this or are the rest of you lucky : >enough to have decent filters? Anything we can do about it? : : Know what I see? A damned whiner epidemic. Seriously, people post : useless complaints about spammers far more than people post spam. Here's another one...LOL I use this to help identify spammers. http://combat.uxn.com/ Yatty 8^D ###### From: "Stuart Moore" Newsgroups: alt.ascii-art References: Subject: Re: Sudden Spam Epedemic Lines: 29 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Message-ID: Date: Mon, 26 Feb 2001 18:29:55 -0000 NNTP-Posting-Host: 62.255.97.239 X-Complaints-To: abuse@ntlworld.com X-Trace: news6-win.server.ntlworld.com 983212211 62.255.97.239 (Mon, 26 Feb 2001 18:30:11 GMT) NNTP-Posting-Date: Mon, 26 Feb 2001 18:30:11 GMT Organization: ntlworld News Service Path: chonsp.franklin.ch!pfaff.ethz.ch!news-zh.switch.ch!news-ge.switch.ch!feed2.news.luth.se!luth.se!news.tele.dk!194.176.220.129!newsfeed.icl.net!dispose.news.demon.net!demon!btnet-peer0!btnet!news5-gui.server.ntli.net!ntli.net!news6-win.server.ntlworld.com.POSTED!not-for-mail Xref: chonsp.franklin.ch alt.ascii-art:17558 Bateau wrote in message news:zamZOg+AvvN62sN+TetIa8fVtyxg@4ax.com... > On Sun, 25 Feb 2001 14:31:54 -0000 "Stuart Moore" > wrote: > >On my NG feed, we've just received 3 cable box descrambler plans and one > >pornographic binary - is everyone seeing this or are the rest of you lucky > >enough to have decent filters? Anything we can do about it? > > Know what I see? A damned whiner epidemic. Seriously, people post > useless complaints about spammers far more than people post spam. I made the comment because I saw what looked to me like a sudden increase in spam. I wanted to know if everyone was getting it, in which case some new spammer has found our ng and it's worth trying to get rid of them, or whether it seemed to be being filtered out by other providers, in which case it would probably be a spammer local to me, so I could do something about it personally. I am not whining pointlessly, I want to get rid of spam. I would hardly call one post after what I believe was a large outburst of spam an epidemic, esp as I was not just saying "Won't someone do something about this" but was trying to be objective. I'm sorry if what I said annoyed you. I was not aware you were the sole judge on what was acceptable on the newsgroup. In future anything will be run by you first. Stuart ###### From: "Christian 'CeeJay' Jensen" Newsgroups: alt.ascii-art Subject: Re: Sudden Spam Epedemic Date: Tue, 27 Feb 2001 01:29:48 +0100 Organization: Posted Courtesy of Tele Danmark or one of its European Subsidiaries Lines: 5 Message-ID: <97etog$q8q$3@news.inet.tele.dk> References: NNTP-Posting-Host: ip227.hgnxr1.ras.tele.dk X-Trace: news.inet.tele.dk 983235152 26906 195.249.199.227 X-Complaints-To: the appropriate department of the poster's provider X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Path: chonsp.franklin.ch!pfaff.ethz.ch!news-zh.switch.ch!newsfeed-zh.ip-plus.net!news.ip-plus.net!news.tesion.net!news.belwue.de!news-stu1.dfn.de!news-koe1.dfn.de!news-fra1.dfn.de!news.tele.dk!Tele.Dk.POSTED!not-for-mail Xref: chonsp.franklin.ch alt.ascii-art:17564 > Know what I see? A damned whiner epidemic. A hey .. you just added to it ###### Path: chonsp.franklin.ch!not-for-mail From: Neil Franklin Newsgroups: alt.ascii-art Subject: Re: Sudden Spam Epedemic Date: 27 Feb 2001 19:09:18 +0100 Organization: My own Private Self Lines: 47 Message-ID: <6ug0h0vvzl.fsf@chonsp.franklin.ch> References: <6uwvaev4gg.fsf@chonsp.franklin.ch> NNTP-Posting-Host: chonsp.franklin.ch X-Trace: chonsp.franklin.ch 983297361 1336 10.0.3.2 (27 Feb 2001 18:09:21 GMT) X-Complaints-To: news@chonsp.franklin.ch NNTP-Posting-Date: 27 Feb 2001 18:09:21 GMT X-Newsreader: Gnus v5.7/Emacs 20.4 Xref: chonsp.franklin.ch alt.ascii-art:17600 "Stuart Moore" writes: > Neil Franklin wrote in message > news:6uwvaev4gg.fsf@chonsp.franklin.ch... > > "Stuart Moore" writes: > > > > > On my NG feed, we've just received 3 cable box descrambler plans and one > > > pornographic binary - is everyone seeing this or are the rest of you lucky > > > enough to have decent filters? > > > > They also arrive here (at least the 3 cable TV ones). > > > > I got 4, one of which contained 2 small jpgs, perhaps your provider blocks > binarys. I sometimes get binary ones (like the one today), some get killed. I have not managed to detect the logic on when they get killed. What I do know is that anything crossposted to binary or pictures groups gets killed here, and some high volume hierarches (alt.fan.* for example). > > This particular cable TV spammer: > > > > He has no mail box and no web site and treats net access as "hit and > > run". So the best is to forward them to uce@ftc.gov so that they > > follow up the phone numbers and postal mail boxes to get him. > > How do you know he treats net access as hit and run? Previous posting history (he has posted over 30 spams). I am an regular spam fighter (average 5 mails to abuse etc per day) and once I noticed him as a repeat I noticed he simply gets an new provider as soon as one kills him. > Hope this isn't to OT for some people, but given the Commodore thread I doubt > anything could be ;-) This is Usenet. The home of topic drift. -- Neil Franklin, neil@franklin.ch.remove http://neil.franklin.ch/ Hacker, Unix Guru, El Eng FH/BSc, Sysadmin, Roleplayer, LARPer, Mystic ###### From: "Stuart Moore" Newsgroups: alt.ascii-art References: <6uwvaev4gg.fsf@chonsp.franklin.ch> <6ug0h0vvzl.fsf@chonsp.franklin.ch> Subject: Re: Sudden Spam Epedemic Lines: 12 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Message-ID: Date: Tue, 27 Feb 2001 19:34:57 -0000 NNTP-Posting-Host: 62.255.99.226 X-Complaints-To: abuse@ntlworld.com X-Trace: news6-win.server.ntlworld.com 983303266 62.255.99.226 (Tue, 27 Feb 2001 19:47:46 GMT) NNTP-Posting-Date: Tue, 27 Feb 2001 19:47:46 GMT Organization: ntlworld News Service Path: chonsp.franklin.ch!pfaff.ethz.ch!news-zh.switch.ch!news-ge.switch.ch!kanja.arnes.si!news-hub.siol.net!newsfeeds.belnet.be!news.belnet.be!btnet-peer1!btnet-peer0!btnet!news5-gui.server.ntli.net!ntli.net!news6-win.server.ntlworld.com.POSTED!not-for-mail Xref: chonsp.franklin.ch alt.ascii-art:17601 Neil Franklin wrote in message news:6ug0h0vvzl.fsf@chonsp.franklin.ch... > "Stuart Moore" writes: > > Hope this isn't to OT for some people, but given the Commodore thread I doubt > > anything could be ;-) > > This is Usenet. The home of topic drift. Nice quote - put it in your sig!