30th December 2000
|
The ProblemThere have been complaint(s) by frustrated SPAM E-mail/Junk E-mail recipients that the CCP14.ac.uk servers (and users on these servers) have been sending out SPAM E-mails to all corners of the world (definitely multiple copies to those annoyed enough about it to pursue the problem).These SPAM messages are not benign to the CCP14 project. As well as giving the mistaken impression to a wide variety of people that the CCP14 project also promotes "get rich quick schemes", the enormous amount of "return" (forged) E-mails has forced messages sent to the [email protected] mail address to be dropped. This means these SPAM messages have effectively become a denial of service attack against the CCP14 mail server. (As a short term alternative, send query messages to [email protected] or [email protected])
DiagnosisNot possible to do SPAM Relaying from CCP14 computersAs a security precaution, the main CCP14 Web and FTP server does not run SMTP in "deamon" mode so cannot receive and/or relay Email. The servers that do handle the CCP14's E-mail are configured to not allow any type of SPAM relaying.
Examining the offending SPAM E-mailsThe following table gives an example of an offending SPAM Email. While the From: and To: fields have a garbage user name (but an exisiting domain - ccp14.ac.uk) - these are faked and irrelevant to where the SPAM Email originated from. Examining the Received: and Delivered-To: fields will reveal the originating server this, and the route it took to be delivered to its victim.
Actions you can takeIf you do wish to pursue and report a SPAM E-mail to what looks like the originating Internet domain, make sure to include the offending SPAM Email with ALL the headers so that it can be correctly diagnosed. In E-mail packages such as Eudora, you may have to hit the appropriately named "Blah, Blah, Blah" icon to bring up the Email headers. Could you also report this to the CCP14 |
Example of SPAM Mail with Faked CCP14.ac.uk origin
[Text Deleted]
Another example of SPAM Mail with Faked CCP14.ac.uk origin
Another example of SPAM Mail with Faked CCP14.ac.uk origin
|
December 30th 2000: CCP14 Feels the Wrath and Fury of Dr Oblivious(Though possibly a cunning SPAM mailer with the mass of bounced spam mails that arrived?)Received fields are bolded to show where the offending Emails have been inserted by SPAM friendly "relaying" SMTP Email servers
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected],
[email protected]. wrote:
> From [email protected] Tue Sep 26 05:57:53
> 2000
> X-Apparently-To: [email protected] via
> web3001.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 194.129.210.181
> Received: from intranet.teleregion.co.uk (HELO
> intranet-mail.teleregion.co.uk) (194.129.210.181)
> by mta425.mail.yahoo.com with SMTP; 25 Sep 2000
> 20:37:32 -0700 (PDT)
> Received: from za.mx.aol.com ([64.10.122.40]) by
> intranet-mail.teleregion.co.uk (Lotus SMTP MTA
> v4.6.1 (569.2 2-6-1998)) with SMTP id
> 80256966.001313F0; Sat, 26 Sep 1970 04:28:26 +0100
> Message-ID: < 448553@ 577415>
> From: [email protected]
> <[email protected]>
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Fri Sep 29 07:02:50
> 2000
> X-Apparently-To: [email protected] via
> web3006.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 200.12.166.46
> Received: from 200.12.166.46 (HELO gis1.)
> (200.12.166.46)
> by mta404.mail.yahoo.com with SMTP; 28 Sep 2000
> 22:17:15 -0700 (PDT)
> Received: from 36oa4ou.cupid-4-u.com by gis1.
> (SMI-8.6/SMI-SVR4)
> id AAA18693; Fri, 29 Sep 2000 00:03:13 -0500
> Reply-to: [email protected]
> Subject: - Are you single?- Looking for new
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected],
[email protected]. wrote:
> From [email protected] Fri Sep 29 20:12:03
> 2000
> X-Apparently-To: [email protected] via
> web3005.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 194.243.122.227
> Received: from 194.243.122.227 (EHLO
> fototeca.iccd.beniculturali.it) (194.243.122.227)
> by mta453.mail.yahoo.com with SMTP; 29 Sep 2000
> 13:10:14 -0700 (PDT)
> Received: from za.mx.aol.com (64.10.121.90) by
> fototeca.iccd.beniculturali.it (Worldmail 1.3.167);
> 29 Sep 2000 21:57:49 +0200
> Message-ID: < 407283@ 416559>
> From: [email protected]
> <[email protected]>
> To: [email protected]
> <[email protected]>
> Subject: friEnd (66310)
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Sun Oct 01 09:38:40 2000
> X-Apparently-To: [email protected] via
> web3004.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 195.146.114.162
> Received: from ns.telpro.cz (EHLO www.telpro.cz)
> (195.146.114.162)
> by mta212.mail.yahoo.com with SMTP; 30 Sep 2000
> 17:25:35 -0700 (PDT)
> Received: from ejkmail.ejk.cz (gate-2.ejk.cz
> [195.146.114.184])
> by www.telpro.cz (8.9.3/8.8.7) with SMTP id
> CAA21405;
> Sun, 1 Oct 2000 02:24:45 +0200
> Date: Sun, 1 Oct 2000 02:24:45 +0200
> From: [email protected]
> Message-Id: <[email protected]>
> Received: from 216.77.215.13 ([216.77.215.13]) by
> ejkmail.ejk.cz (WinRoute Pro 4.1) with SMTP; Sun, 1
> Oct 2000 02:00:43 +0200
> To: [email protected]
> Subject: The Information Which You Requested
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- kkdiisa24530@hhkuur7,
[email protected]. wrote:
> From kkdiisa24530@[email protected] Sun Oct 01
> 06:51:01 2000
> X-Apparently-To: [email protected] via
> web3003.mail.yahoo.com
> Return-Path: <"kkdiisa24530@hhkuur7"@iname.com>
> X-YahooFilteredBulk: 168.191.177.199
> Received: from sdn-ar-002txhousP269.dialsprint.net
> (HELO rs9.media3.net) (168.191.177.199)
> by mta429.mail.yahoo.com with SMTP; 30 Sep 2000
> 19:50:22 -0700 (PDT)
> Message-ID: <[email protected]>
> From: kkdiisa24530@[email protected]
> <kkdiisa24530@[email protected]>
> Reply-to: [email protected]
> Subject: Better Be Ready to PARTY UP If you Click
> This!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Thu Oct 12 03:57:29 2000
> X-Apparently-To: [email protected] via
> web3002.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 210.67.212.1
> Received: from 210.67.212.1 (EHLO everest.com.tw)
> (210.67.212.1)
> by mta320.mail.yahoo.com with SMTP; 11 Oct 2000
> 20:57:19 -0700 (PDT)
> Received: from evn004a.everest.com.tw
> ([203.66.121.182]) by dns1.everest.com.tw with SMTP
> id <115283>; Thu, 12 Oct 2000 11:46:11 +0800
> Received: from 210.67.212.1 ([206.133.78.64]) by
> evn004a.everest.com.tw (Lotus SMTP MTA v1.2 (600.1
> 3-26-1998)) with SMTP id C8256976.000268EC; Thu, 12
> Oct 2000 09:26:35 +0900
> To: [email protected]
> Message-ID: <[email protected]>
> Date: Sun, 1 Oct 2000 10:11:25 +0800
> From: [email protected]
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Sun Oct 01 17:40:54 2000
> X-Apparently-To: [email protected] via
> web3003.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 63.14.24.118
> Received: from 1Cust118.tnt3.manchester.nh.da.uu.net
> (HELO localhost) (63.14.24.118)
> by mta101.mail.yahoo.com with SMTP; 01 Oct 2000
> 10:14:45 -0700 (PDT)
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7BIT
> Message-Id: <btfqqnm.vlctrdhtiq@localhost>
> From: [email protected]
> Date: Sun, 01 Oct 2000 13:14:08 -0500
> Subject: Work from Home! Guaranteed Minimum Monthly
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Mon Oct 02 10:27:33 2000
> X-Apparently-To: [email protected] via
> web3003.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 210.217.220.157
> Received: from 210.217.220.157 (EHLO
> mail.eccenter.org) (210.217.220.157)
> by mta404.mail.yahoo.com with SMTP; 02 Oct 2000
> 03:27:32 -0700 (PDT)
> Received: from 163.net (1Cust139.tnt6.sea1.da.uu.net
> [63.39.180.139])
> by mail.eccenter.org (8.9.3/8.8.7) with SMTP id
> TAA23782;
> Mon, 2 Oct 2000 19:26:15 +0900
> From: [email protected]
> Message-ID:
> <[email protected]>
> To: <[email protected]>
> Subject: Go Off Shore Now
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- Znzh41g68@goplay wrote:
> From znzh41g68@goplay Tue Oct 03 18:04:08 2000
> X-Apparently-To: [email protected] via
> web3004.mail.yahoo.com
> Return-Path: <znzh41g68@goplay>
> X-YahooFilteredBulk: 203.246.184.99
> Received: from mail.posdata.co.kr (203.246.184.99)
> by mta443.mail.yahoo.com with SMTP; 03 Oct 2000
> 11:04:06 -0700 (PDT)
> Received: from gJGX7Z3Wg
> (sdn-ar-001calangP259.dialsprint.net
> [168.191.247.21])
> by mail.posdata.co.kr (8.8.7/8.8.7) with SMTP id
> BAA20806;
> Mon, 25 Sep 2000 01:08:55 +0900 (KST)
> From: Znzh41g68@goplay
> Date: 24 Sep 00 9:01:03 AM
> Message-ID: <lidgyUOrgTa3816V>
> Subject: WE DELIVER ANYWHERE IN SOUTHERN CALIFORNIA
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Thu Oct 05 03:20:06 2000
> X-Apparently-To: [email protected] via
> web3001.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 194.140.128.116
> Received: from desarrollo.ceac.com (194.140.128.116)
> by mta424.mail.yahoo.com with SMTP; 04 Oct 2000
> 20:18:59 -0700 (PDT)
> Received: from grupoceac.ceac.com
> ([194.140.128.113])
> by desarrollo.ceac.com (8.8.8+Sun/8.8.8) with ESMTP
> id FAA01604;
> Thu, 5 Oct 2000 05:03:27 +0200 (MET DST)
> From: [email protected]
> Received: from mindspring
> (pool0212.cvx10-bradley.dialup.earthlink.net
> [209.178.182.212])
> by grupoceac.ceac.com (8.8.8+Sun/8.8.8) with SMTP
> id FAA19860;
> Thu, 5 Oct 2000 05:18:19 +0200 (MET DST)
> Message-ID:
>
<[email protected]
> (mcfeely.concentric.net [217.15.198.83])by
> darius.concentric.net (8.9.1a/(98/12/15 5.12)) id
> PAA04003from default (m202.2-25.warwick.net
> [218.242.202.80]) byhost.warwick.net
> (8.10.0.Beta10/8.10.0.Beta10) with SMTP id
> e0GKEKk19201>
> To: <[email protected]>
> Subject: Feed Your Pet Not The Ants
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Sat Oct 7 21:23:53 2000
> X-Apparently-To: [email protected] via
> web3005.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 63.26.114.232
> Received: from
> 1Cust232.tnt5.baton-rouge.la.da.uu.net (HELO
> msn.com) (63.26.114.232)
> by mta467.mail.yahoo.com with SMTP; 07 Oct 2000
> 21:23:29 -0700 (PDT)
> From: <[email protected]>
> Subject: . , .
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Sun Oct 8 19:11:30 2000
> X-Apparently-To: [email protected] via
> web3005.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 211.40.179.68
> Received: from 211.40.179.68 (EHLO ahanet.co.kr)
> (211.40.179.68)
> by mta440.mail.yahoo.com with SMTP; 08 Oct 2000
> 19:14:23 -0700 (PDT)
> Received: from ewill
> (1Cust102.tnt5.auburn.wa.da.uu.net [63.30.16.102])
> by ahanet.co.kr (8.9.3/8.9.3) with SMTP id
> LAA06454;
> Mon, 9 Oct 2000 11:11:30 +0900
> Date: Mon, 9 Oct 2000 11:11:30 +0900
> From: [email protected]
> To: [email protected]
> Comments: Authenticated sender is <[email protected]>
> Subject: Cyber Investigator's Assistant!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Mon Oct 09 12:57:06 2000
> X-Apparently-To: [email protected] via
> web3001.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 63.26.114.138
> Received: from
> 1Cust138.tnt5.baton-rouge.la.da.uu.net (HELO
> excite.com) (63.26.114.138)
> by mta119.mail.yahoo.com with SMTP; 09 Oct 2000
> 05:48:03 -0700 (PDT)
> From: <[email protected]>
> Subject: uuuuuuuuuuuuuuuuuuuu
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Tue Oct 10 08:51:35 2000
> X-Apparently-To: [email protected] via
> web3003.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 163.121.197.221
> Received: from unassigned.menanet.com.eg (EHLO
> mansourgroup.com) (163.121.197.221)
> by mta324.mail.yahoo.com with SMTP; 10 Oct 2000
> 01:51:34 -0700 (PDT)
> Received: from 253tuutDl
> (1Cust48.tnt2.chi1.da.uu.net [63.21.65.48]) by
> mansourgroup.com with SMTP (Microsoft Exchange
> Internet Mail Service Version 5.5.2650.21)
> id TT24PJ2X; Tue, 10 Oct 2000 10:46:44 +0200
> Date: 10 Oct 00 5:31:13 AM
> From: [email protected]
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Tue Oct 10 11:00:11 2000
> X-Apparently-To: [email protected] via
> web3005.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 63.17.144.169
> Received: from 1Cust169.tnt2.manchester.nh.da.uu.net
> (HELO localhost) (63.17.144.169)
> by mta130.mail.yahoo.com with SMTP; 10 Oct 2000
> 09:56:05 -0700 (PDT)
> Subject: Adult XXX Videos
> Message-Id: <pwjtv.njulhohgpkmfa@localhost>
> From: [email protected]
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7BIT
> To: @yahoo.com
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Wed Oct 11 13:37:53 2000
> X-Apparently-To: [email protected] via
> web3003.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 195.31.212.100
> Received: from 195.31.212.100 (HELO
> ntproxy.advantech.it) (195.31.212.100)
> by mta449.mail.yahoo.com with SMTP; 11 Oct 2000
> 14:01:34 -0700 (PDT)
> Received: from myrop (ew6.southwind.net
> [216.53.98.70]) by onyx.southwind.netfrom
> homepage.com (114.230.197.216) by
> newmail.spectraweb.ch from default
> (m202.2-25.warwick.net [218.242.202.80])
> byhost.warwick.net (8.10.0.Beta10/8.10.0.Beta10)
> with SMTP id e9GKEKk19201 ([63.44.155.26]) by
> nt_proxy.advantech.it (Lotus SMTP MTA v4.6.5 (863.2
> 5-20-1999)) with SMTP id C1256975.00732D0F; Wed, 11
> Oct 2000 22:58:21 +0200
> Message-ID:
>
<[email protected]
> (mcfeely.concentric.net [217.15.198.83])by
> darius.concentric.net (8.9.1a/(98/12/15 5.12)) id
> PAA04003from default (m202.2-25.warwick.net
> [218.242.202.80]) byhost.warwick.net
> (8.10.0.Beta10/8.10.0.Beta10) with SMTP id
> e0GKEKk19201>
> To: <[email protected]>
> From: [email protected]
> Subject: Sensitive Herbas
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Mon Oct 16 11:51:22 2000
> X-Apparently-To: [email protected] via
> web3006.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 63.26.114.45
> Received: from 1Cust45.tnt5.baton-rouge.la.da.uu.net
> (HELO excite.com) (63.26.114.45)
> by mta312.mail.yahoo.com with SMTP; 16 Oct 2000
> 04:51:18 -0700 (PDT)
> From: <[email protected]>
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Sun Sep 24 00:49:20 2000
> X-Apparently-To: [email protected] via
> web3004.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 210.233.48.210
> Received: from dns1.kyoto-shaken.co.jp (EHLO
> mail.kyoto-shaken.co.jp) (210.233.48.210)
> by mta224.mail.yahoo.com with SMTP; 23 Sep 2000
> 17:49:18 -0700 (PDT)
> Received: from 206.133.236.34 [206.133.236.34] by
> mail.kyoto-shaken.co.jp
> (SMTPD32-4.10) id AEA856B90292; Sun, 24 Sep 2000
> 09:41:12 +0900
> Message-ID: <00005a4e5151$00003870$000038c1@>
> To: <Undisclosed Recipients>
> From: [email protected]
> Subject: Need to check someone out?
> 14529
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Wed Oct 25 15:13:12 2000
> X-Apparently-To: [email protected] via
> web3006.mail.yahoo.com
> Received: from spool5.valueweb.net (216.219.253.139)
> by mta468.mail.yahoo.com with SMTP; 25 Oct 2000
> 12:05:52 -0700 (PDT)
> Received: from musicwarepos.com
> (client209-42-207-154.intrex.net [209.42.207.154]
> (may be forged))
> by spool5.valueweb.net (8.9.2/8.9.2) with SMTP id
> PAA49024;
> Wed, 25 Oct 2000 15:05:42 -0400
> From: <[email protected]>
> Subject: IF YOU SELL MUSIC - READ ON .......
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Wed Nov 1 21:31:01 2000
> X-Apparently-To: [email protected] via
> web3006.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 195.246.1.125
> Received: from 195.246.1.125 (EHLO
> castor.perftech.si) (195.246.1.125)
> by mta424.mail.yahoo.com with SMTP; 01 Nov 2000
> 21:28:46 -0800 (PST)
> Received: from [195.246.3.199] by castor.s5.net
> (NTMail 5.06.0016/AL0102.01.4ffdd1e4) with ESMTP id
> audoaaaa for [email protected]; Thu, 2 Nov
> 2000 06:21:59 +0000
> Date: 01 Nov 00 11:36:01 PM
> From: [email protected]
> Message-ID: <S21lXQk570iuqqv>
> Subject: Re: New passwords
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Tue Nov 14 14:51:38 2000
> X-Apparently-To: [email protected] via
> web3005.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 216.192.201.4
> Received: from atl-tgn-ygn-vty4.as.wcom.net (HELO
> 216.192.201.4) (216.192.201.4)
> by mta466.mail.yahoo.com with SMTP; 14 Nov 2000
> 15:49:45 -0800 (PST)
> Message-ID: <0000222559f6$00004d39$00007d3e@>
> To: <Undisclosed Recipients>
> From: [email protected]
> Subject: Hello San Francisco!!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Sun Sep 24
> 11:03:23 2000
> X-Apparently-To: [email protected] via
> web3005.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 195.130.72.1
> Received: from 195.130.72.1 (EHLO teiep.gr)
> (195.130.72.1)
> by mta107.mail.yahoo.com with SMTP; 24 Sep 2000
> 04:03:18 -0700 (PDT)
> Received: from smtp.indiatimes.com
> (sdn-ar-002wimadiP123.dialsprint.net
> [158.252.99.187]) by teiep.gr (8.8.7/8.8.3) with
> SMTP id OAA21159; Sun, 24 Sep 2000 14:01:26 +0300
> (EET DST)
> To: [email protected]
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- lopo6519559@hfhuet4,
[email protected]. wrote:
> From lopo6519559@[email protected] Sun Sep
> 24 06:56:55 2000
> X-Apparently-To: [email protected] via
> web3006.mail.yahoo.com
> Return-Path:
> <"lopo6519559@hfhuet4"@concentricnet.com>
> X-YahooFilteredBulk: 168.191.178.37
> Received: from sdn-ar-003txhousP299.dialsprint.net
> (HELO rs9.media3.net) (168.191.178.37)
> by mta202.mail.yahoo.com with SMTP; 23 Sep 2000
> 23:56:52 -0700 (PDT)
> Message-ID: <[email protected]>
> From: lopo6519559@[email protected]
> <lopo6519559@[email protected]>
> Reply-to: [email protected]
> Subject: Good News! Signup Online For Your
> *Guaranteed* Mastercard!!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Sat Sep 23 06:06:10 2000
> X-Apparently-To: [email protected] via
> web3001.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 202.96.202.62
> Received: from 202.96.202.62 (EHLO
> ns.yidong.net.cn) (202.96.202.62)
> by mta104.mail.yahoo.com with SMTP; 22 Sep 2000
> 21:27:42 -0700 (PDT)
> Received: from ns.yidong.net.cn
> (ip151.las-vegas17.nv.pub-ip.psi.net
> [38.29.117.151])
> by ns.yidong.net.cn (8.8.8+Sun/8.8.8) with SMTP id
> MAA17006;
> Sat, 23 Sep 2000 12:24:27 +0800 (CST)
> From: [email protected]
> Message-Id: <[email protected]>
> Received: from [email protected] by
> [email protected] (8.8.5/8.6.5) with SMTP id
> GAA09422 for <[email protected]>; Fri, 22 Sep 2000
> 18:42:05 -0600 (EST)
> To: [email protected]
> Date: Fri, 22 Sep 00 18:42:05 EST
> Subject: Cell phones / Brain Tumors
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- "Dollarstore.com" <[email protected]>
wrote:
> From Dollarstore.com Tue Sep 19 22:53:05 2000
> X-Apparently-To: [email protected] via
> web3003.mail.yahoo.com
> X-YahooFilteredBulk: 168.191.176.141
> Received: from sdn-ar-001txdallP251.dialsprint.net
> (HELO e-unit-4) (168.191.176.141)
> by mta419.mail.yahoo.com with SMTP; 20 Sep 2000
> 00:58:30 -0700 (PDT)
> From: "Dollarstore.com" <[email protected]>
> To: <[email protected]>
> Subject: 25 items, $25.00, Free Shipping - No
> Kidding!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- [email protected] wrote:
> From [email protected] Fri Oct 06 17:37:56 2000
> X-Apparently-To: [email protected] via
> web3004.mail.yahoo.com
> Return-Path: <[email protected]>
> X-YahooFilteredBulk: 63.29.199.213
> Received: from 2Cust85.tnt33.lax3.da.uu.net (HELO
> mylocalserver.com) (63.29.199.213)
> by mta457.mail.yahoo.com with SMTP; 06 Oct 2000
> 10:35:55 -0700 (PDT)
> To: [email protected]
> From: [email protected]
> Subject: Safe, Natural, Herbal Sex Formula!
|