30th December 2000
|
The ProblemThere have been complaint(s) by frustrated SPAM E-mail/Junk E-mail recipients that the CCP14.ac.uk servers (and users on these servers) have been sending out SPAM E-mails to all corners of the world (definitely multiple copies to those annoyed enough about it to pursue the problem).These SPAM messages are not benign to the CCP14 project. As well as giving the mistaken impression to a wide variety of people that the CCP14 project also promotes "get rich quick schemes", the enormous amount of "return" (forged) E-mails has forced messages sent to the ccp14@ccp14.ac.uk mail address to be dropped. This means these SPAM messages have effectively become a denial of service attack against the CCP14 mail server. (As a short term alternative, send query messages to ccp14@dl.ac.uk or l.cranswick@dl.ac.uk)
DiagnosisNot possible to do SPAM Relaying from CCP14 computersAs a security precaution, the main CCP14 Web and FTP server does not run SMTP in "deamon" mode so cannot receive and/or relay Email. The servers that do handle the CCP14's E-mail are configured to not allow any type of SPAM relaying.
Examining the offending SPAM E-mailsThe following table gives an example of an offending SPAM Email. While the From: and To: fields have a garbage user name (but an exisiting domain - ccp14.ac.uk) - these are faked and irrelevant to where the SPAM Email originated from. Examining the Received: and Delivered-To: fields will reveal the originating server this, and the route it took to be delivered to its victim.
Actions you can takeIf you do wish to pursue and report a SPAM E-mail to what looks like the originating Internet domain, make sure to include the offending SPAM Email with ALL the headers so that it can be correctly diagnosed. In E-mail packages such as Eudora, you may have to hit the appropriately named "Blah, Blah, Blah" icon to bring up the Email headers. Could you also report this to the CCP14 |
Example of SPAM Mail with Faked CCP14.ac.uk origin
[Text Deleted]
Another example of SPAM Mail with Faked CCP14.ac.uk origin
Another example of SPAM Mail with Faked CCP14.ac.uk origin
|
December 30th 2000: CCP14 Feels the Wrath and Fury of Dr Oblivious(Though possibly a cunning SPAM mailer with the mass of bounced spam mails that arrived?)Received fields are bolded to show where the offending Emails have been inserted by SPAM friendly "relaying" SMTP Email servers
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- xmrose99277@compuserve.com,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From xmrose99277@compuserve.com Tue Sep 26 05:57:53
> 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <xmrose99277@compuserve.com>
> X-YahooFilteredBulk: 194.129.210.181
> Received: from intranet.teleregion.co.uk (HELO
> intranet-mail.teleregion.co.uk) (194.129.210.181)
> by mta425.mail.yahoo.com with SMTP; 25 Sep 2000
> 20:37:32 -0700 (PDT)
> Received: from za.mx.aol.com ([64.10.122.40]) by
> intranet-mail.teleregion.co.uk (Lotus SMTP MTA
> v4.6.1 (569.2 2-6-1998)) with SMTP id
> 80256966.001313F0; Sat, 26 Sep 1970 04:28:26 +0100
> Message-ID: < 448553@ 577415>
> From: xmrose99277@compuserve.com
> <xmrose99277@compuserve.com>
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- cupid-link@nflrtikxr.unbounded.com wrote:
> From cupid-4-u@unbounded.com Fri Sep 29 07:02:50
> 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path: <cupid-4-u@unbounded.com>
> X-YahooFilteredBulk: 200.12.166.46
> Received: from 200.12.166.46 (HELO gis1.)
> (200.12.166.46)
> by mta404.mail.yahoo.com with SMTP; 28 Sep 2000
> 22:17:15 -0700 (PDT)
> Received: from 36oa4ou.cupid-4-u.com by gis1.
> (SMI-8.6/SMI-SVR4)
> id AAA18693; Fri, 29 Sep 2000 00:03:13 -0500
> Reply-to: cupid-link@unbounded.com
> Subject: - Are you single?- Looking for new
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- lxMcMaey64411@geocities.com,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From lxmcmaey64411@geocities.com Fri Sep 29 20:12:03
> 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <lxmcmaey64411@geocities.com>
> X-YahooFilteredBulk: 194.243.122.227
> Received: from 194.243.122.227 (EHLO
> fototeca.iccd.beniculturali.it) (194.243.122.227)
> by mta453.mail.yahoo.com with SMTP; 29 Sep 2000
> 13:10:14 -0700 (PDT)
> Received: from za.mx.aol.com (64.10.121.90) by
> fototeca.iccd.beniculturali.it (Worldmail 1.3.167);
> 29 Sep 2000 21:57:49 +0200
> Message-ID: < 407283@ 416559>
> From: lxMcMaey64411@geocities.com
> <lxMcMaey64411@geocities.com>
> To: Doublehappy@mail.com
> <doctorofphilosophy@yahoo.com>
> Subject: friEnd (66310)
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- Herbal-V@lm.se wrote:
> From herbal-v@lm.se Sun Oct 01 09:38:40 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <herbal-v@lm.se>
> X-YahooFilteredBulk: 195.146.114.162
> Received: from ns.telpro.cz (EHLO www.telpro.cz)
> (195.146.114.162)
> by mta212.mail.yahoo.com with SMTP; 30 Sep 2000
> 17:25:35 -0700 (PDT)
> Received: from ejkmail.ejk.cz (gate-2.ejk.cz
> [195.146.114.184])
> by www.telpro.cz (8.9.3/8.8.7) with SMTP id
> CAA21405;
> Sun, 1 Oct 2000 02:24:45 +0200
> Date: Sun, 1 Oct 2000 02:24:45 +0200
> From: Herbal-V@lm.se
> Message-Id: <200010010024.CAA21405@www.telpro.cz>
> Received: from 216.77.215.13 ([216.77.215.13]) by
> ejkmail.ejk.cz (WinRoute Pro 4.1) with SMTP; Sun, 1
> Oct 2000 02:00:43 +0200
> To: Herbal-V@lm.se
> Subject: The Information Which You Requested
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- kkdiisa24530@hhkuur7,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From kkdiisa24530@hhkuur7@iname.com Sun Oct 01
> 06:51:01 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <"kkdiisa24530@hhkuur7"@iname.com>
> X-YahooFilteredBulk: 168.191.177.199
> Received: from sdn-ar-002txhousP269.dialsprint.net
> (HELO rs9.media3.net) (168.191.177.199)
> by mta429.mail.yahoo.com with SMTP; 30 Sep 2000
> 19:50:22 -0700 (PDT)
> Message-ID: <44333.15926@rs9.media3.net>
> From: kkdiisa24530@hhkuur7@iname.com
> <kkdiisa24530@hhkuur7@iname.com>
> Reply-to: ghjjz8i@bakterius.eggenet.de
> Subject: Better Be Ready to PARTY UP If you Click
> This!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- willam12@MauiMail.com wrote:
> From willam12@mauimail.com Thu Oct 12 03:57:29 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3002.mail.yahoo.com
> Return-Path: <willam12@mauimail.com>
> X-YahooFilteredBulk: 210.67.212.1
> Received: from 210.67.212.1 (EHLO everest.com.tw)
> (210.67.212.1)
> by mta320.mail.yahoo.com with SMTP; 11 Oct 2000
> 20:57:19 -0700 (PDT)
> Received: from evn004a.everest.com.tw
> ([203.66.121.182]) by dns1.everest.com.tw with SMTP
> id <115283>; Thu, 12 Oct 2000 11:46:11 +0800
> Received: from 210.67.212.1 ([206.133.78.64]) by
> evn004a.everest.com.tw (Lotus SMTP MTA v1.2 (600.1
> 3-26-1998)) with SMTP id C8256976.000268EC; Thu, 12
> Oct 2000 09:26:35 +0900
> To: makemoney@abraxa.ign.fr
> Message-ID: <238874747.0098732@abraxa.ign.fr>
> Date: Sun, 1 Oct 2000 10:11:25 +0800
> From: willam12@MauiMail.com
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- edward42@myrealbox.com wrote:
> From edward42@myrealbox.com Sun Oct 01 17:40:54 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <edward42@myrealbox.com>
> X-YahooFilteredBulk: 63.14.24.118
> Received: from 1Cust118.tnt3.manchester.nh.da.uu.net
> (HELO localhost) (63.14.24.118)
> by mta101.mail.yahoo.com with SMTP; 01 Oct 2000
> 10:14:45 -0700 (PDT)
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7BIT
> Message-Id: <btfqqnm.vlctrdhtiq@localhost>
> From: edward42@myrealbox.com
> Date: Sun, 01 Oct 2000 13:14:08 -0500
> Subject: Work from Home! Guaranteed Minimum Monthly
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- vvsay@kali.com.cn wrote:
> From vvsay@kali.com.cn Mon Oct 02 10:27:33 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <vvsay@kali.com.cn>
> X-YahooFilteredBulk: 210.217.220.157
> Received: from 210.217.220.157 (EHLO
> mail.eccenter.org) (210.217.220.157)
> by mta404.mail.yahoo.com with SMTP; 02 Oct 2000
> 03:27:32 -0700 (PDT)
> Received: from 163.net (1Cust139.tnt6.sea1.da.uu.net
> [63.39.180.139])
> by mail.eccenter.org (8.9.3/8.8.7) with SMTP id
> TAA23782;
> Mon, 2 Oct 2000 19:26:15 +0900
> From: vvsay@kali.com.cn
> Message-ID:
> <0000756f7c41$00002acb$000042ef@doar.net>
> To: <ab103@newmail.net>
> Subject: Go Off Shore Now
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- Znzh41g68@goplay wrote:
> From znzh41g68@goplay Tue Oct 03 18:04:08 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <znzh41g68@goplay>
> X-YahooFilteredBulk: 203.246.184.99
> Received: from mail.posdata.co.kr (203.246.184.99)
> by mta443.mail.yahoo.com with SMTP; 03 Oct 2000
> 11:04:06 -0700 (PDT)
> Received: from gJGX7Z3Wg
> (sdn-ar-001calangP259.dialsprint.net
> [168.191.247.21])
> by mail.posdata.co.kr (8.8.7/8.8.7) with SMTP id
> BAA20806;
> Mon, 25 Sep 2000 01:08:55 +0900 (KST)
> From: Znzh41g68@goplay
> Date: 24 Sep 00 9:01:03 AM
> Message-ID: <lidgyUOrgTa3816V>
> Subject: WE DELIVER ANYWHERE IN SOUTHERN CALIFORNIA
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- 3tn0h6@4cnet.4c.com.kw wrote:
> From 3tn0h6@4cnet.4c.com.kw Thu Oct 05 03:20:06 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <3tn0h6@4cnet.4c.com.kw>
> X-YahooFilteredBulk: 194.140.128.116
> Received: from desarrollo.ceac.com (194.140.128.116)
> by mta424.mail.yahoo.com with SMTP; 04 Oct 2000
> 20:18:59 -0700 (PDT)
> Received: from grupoceac.ceac.com
> ([194.140.128.113])
> by desarrollo.ceac.com (8.8.8+Sun/8.8.8) with ESMTP
> id FAA01604;
> Thu, 5 Oct 2000 05:03:27 +0200 (MET DST)
> From: 3tn0h6@4cnet.4c.com.kw
> Received: from mindspring
> (pool0212.cvx10-bradley.dialup.earthlink.net
> [209.178.182.212])
> by grupoceac.ceac.com (8.8.8+Sun/8.8.8) with SMTP
> id FAA19860;
> Thu, 5 Oct 2000 05:18:19 +0200 (MET DST)
> Message-ID:
>
<00000a38059c$000033b9$0000128e@mcpeely.concentric.net
> (mcfeely.concentric.net [217.15.198.83])by
> darius.concentric.net (8.9.1a/(98/12/15 5.12)) id
> PAA04003from default (m202.2-25.warwick.net
> [218.242.202.80]) byhost.warwick.net
> (8.10.0.Beta10/8.10.0.Beta10) with SMTP id
> e0GKEKk19201>
> To: <aft@arbi.informatik.uni-oldenburg.de>
> Subject: Feed Your Pet Not The Ants
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- klambake@earthlink.net wrote:
> From klambake@earthlink.net Sat Oct 7 21:23:53 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <klambake@earthlink.net>
> X-YahooFilteredBulk: 63.26.114.232
> Received: from
> 1Cust232.tnt5.baton-rouge.la.da.uu.net (HELO
> msn.com) (63.26.114.232)
> by mta467.mail.yahoo.com with SMTP; 07 Oct 2000
> 21:23:29 -0700 (PDT)
> From: <klambake@earthlink.net>
> Subject: . , .
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- geiwo@forum.dk wrote:
> From geiwo@forum.dk Sun Oct 8 19:11:30 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <geiwo@forum.dk>
> X-YahooFilteredBulk: 211.40.179.68
> Received: from 211.40.179.68 (EHLO ahanet.co.kr)
> (211.40.179.68)
> by mta440.mail.yahoo.com with SMTP; 08 Oct 2000
> 19:14:23 -0700 (PDT)
> Received: from ewill
> (1Cust102.tnt5.auburn.wa.da.uu.net [63.30.16.102])
> by ahanet.co.kr (8.9.3/8.9.3) with SMTP id
> LAA06454;
> Mon, 9 Oct 2000 11:11:30 +0900
> Date: Mon, 9 Oct 2000 11:11:30 +0900
> From: geiwo@forum.dk
> To: geiwo@forum.dk
> Comments: Authenticated sender is <geiwo@forum.dk>
> Subject: Cyber Investigator's Assistant!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- liza14@ibm.net wrote:
> From liza14@ibm.net Mon Oct 09 12:57:06 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <liza14@ibm.net>
> X-YahooFilteredBulk: 63.26.114.138
> Received: from
> 1Cust138.tnt5.baton-rouge.la.da.uu.net (HELO
> excite.com) (63.26.114.138)
> by mta119.mail.yahoo.com with SMTP; 09 Oct 2000
> 05:48:03 -0700 (PDT)
> From: <liza14@ibm.net>
> Subject: uuuuuuuuuuuuuuuuuuuu
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- hAedRq78Z@mimj.co.jp wrote:
> From haedrq78z@mimj.co.jp Tue Oct 10 08:51:35 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <haedrq78z@mimj.co.jp>
> X-YahooFilteredBulk: 163.121.197.221
> Received: from unassigned.menanet.com.eg (EHLO
> mansourgroup.com) (163.121.197.221)
> by mta324.mail.yahoo.com with SMTP; 10 Oct 2000
> 01:51:34 -0700 (PDT)
> Received: from 253tuutDl
> (1Cust48.tnt2.chi1.da.uu.net [63.21.65.48]) by
> mansourgroup.com with SMTP (Microsoft Exchange
> Internet Mail Service Version 5.5.2650.21)
> id TT24PJ2X; Tue, 10 Oct 2000 10:46:44 +0200
> Date: 10 Oct 00 5:31:13 AM
> From: hAedRq78Z@mimj.co.jp
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- susan87@zxmail.com wrote:
> From susan87@zxmail.com Tue Oct 10 11:00:11 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <susan87@zxmail.com>
> X-YahooFilteredBulk: 63.17.144.169
> Received: from 1Cust169.tnt2.manchester.nh.da.uu.net
> (HELO localhost) (63.17.144.169)
> by mta130.mail.yahoo.com with SMTP; 10 Oct 2000
> 09:56:05 -0700 (PDT)
> Subject: Adult XXX Videos
> Message-Id: <pwjtv.njulhohgpkmfa@localhost>
> From: susan87@zxmail.com
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7BIT
> To: @yahoo.com
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- jemul@ttd.ibernet.es wrote:
> From jemul@ttd.ibernet.es Wed Oct 11 13:37:53 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <jemul@ttd.ibernet.es>
> X-YahooFilteredBulk: 195.31.212.100
> Received: from 195.31.212.100 (HELO
> ntproxy.advantech.it) (195.31.212.100)
> by mta449.mail.yahoo.com with SMTP; 11 Oct 2000
> 14:01:34 -0700 (PDT)
> Received: from myrop (ew6.southwind.net
> [216.53.98.70]) by onyx.southwind.netfrom
> homepage.com (114.230.197.216) by
> newmail.spectraweb.ch from default
> (m202.2-25.warwick.net [218.242.202.80])
> byhost.warwick.net (8.10.0.Beta10/8.10.0.Beta10)
> with SMTP id e9GKEKk19201 ([63.44.155.26]) by
> nt_proxy.advantech.it (Lotus SMTP MTA v4.6.5 (863.2
> 5-20-1999)) with SMTP id C1256975.00732D0F; Wed, 11
> Oct 2000 22:58:21 +0200
> Message-ID:
>
<00002a2c264c$00004708$00000881@mcpeely.concentric.net
> (mcfeely.concentric.net [217.15.198.83])by
> darius.concentric.net (8.9.1a/(98/12/15 5.12)) id
> PAA04003from default (m202.2-25.warwick.net
> [218.242.202.80]) byhost.warwick.net
> (8.10.0.Beta10/8.10.0.Beta10) with SMTP id
> e0GKEKk19201>
> To: <emily@mail.wilmod.nl>
> From: jemul@ttd.ibernet.es
> Subject: Sensitive Herbas
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- rewkka@mailcity.com wrote:
> From rewkka@mailcity.com Mon Oct 16 11:51:22 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path: <rewkka@mailcity.com>
> X-YahooFilteredBulk: 63.26.114.45
> Received: from 1Cust45.tnt5.baton-rouge.la.da.uu.net
> (HELO excite.com) (63.26.114.45)
> by mta312.mail.yahoo.com with SMTP; 16 Oct 2000
> 04:51:18 -0700 (PDT)
> From: <rewkka@mailcity.com>
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- yujzn@dj.net.tw wrote:
> From yujzn@dj.net.tw Sun Sep 24 00:49:20 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <yujzn@dj.net.tw>
> X-YahooFilteredBulk: 210.233.48.210
> Received: from dns1.kyoto-shaken.co.jp (EHLO
> mail.kyoto-shaken.co.jp) (210.233.48.210)
> by mta224.mail.yahoo.com with SMTP; 23 Sep 2000
> 17:49:18 -0700 (PDT)
> Received: from 206.133.236.34 [206.133.236.34] by
> mail.kyoto-shaken.co.jp
> (SMTPD32-4.10) id AEA856B90292; Sun, 24 Sep 2000
> 09:41:12 +0900
> Message-ID: <00005a4e5151$00003870$000038c1@>
> To: <Undisclosed Recipients>
> From: yujzn@dj.net.tw
> Subject: Need to check someone out?
> 14529
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- sales@musicwarepos.com wrote:
> From sales@musicwarepos.com Wed Oct 25 15:13:12 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Received: from spool5.valueweb.net (216.219.253.139)
> by mta468.mail.yahoo.com with SMTP; 25 Oct 2000
> 12:05:52 -0700 (PDT)
> Received: from musicwarepos.com
> (client209-42-207-154.intrex.net [209.42.207.154]
> (may be forged))
> by spool5.valueweb.net (8.9.2/8.9.2) with SMTP id
> PAA49024;
> Wed, 25 Oct 2000 15:05:42 -0400
> From: <sales@musicwarepos.com>
> Subject: IF YOU SELL MUSIC - READ ON .......
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- 841UBKXPi@aol.com wrote:
> From 841UBKXPi@aol.com Wed Nov 1 21:31:01 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path: <841ubkxpi@aol.com>
> X-YahooFilteredBulk: 195.246.1.125
> Received: from 195.246.1.125 (EHLO
> castor.perftech.si) (195.246.1.125)
> by mta424.mail.yahoo.com with SMTP; 01 Nov 2000
> 21:28:46 -0800 (PST)
> Received: from [195.246.3.199] by castor.s5.net
> (NTMail 5.06.0016/AL0102.01.4ffdd1e4) with ESMTP id
> audoaaaa for doctorjenkins@yahoo.com; Thu, 2 Nov
> 2000 06:21:59 +0000
> Date: 01 Nov 00 11:36:01 PM
> From: 841UBKXPi@aol.com
> Message-ID: <S21lXQk570iuqqv>
> Subject: Re: New passwords
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- lettergrl22@yahoo.com wrote:
> From lettergrl22@yahoo.com Tue Nov 14 14:51:38 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <lettergrl22@yahoo.com>
> X-YahooFilteredBulk: 216.192.201.4
> Received: from atl-tgn-ygn-vty4.as.wcom.net (HELO
> 216.192.201.4) (216.192.201.4)
> by mta466.mail.yahoo.com with SMTP; 14 Nov 2000
> 15:49:45 -0800 (PST)
> Message-ID: <0000222559f6$00004d39$00007d3e@>
> To: <Undisclosed Recipients>
> From: lettergrl22@yahoo.com
> Subject: Hello San Francisco!!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- Mike_Lewellen9909@indiatimes.com wrote:
> From mike_kinch9909@indiatimes.com Sun Sep 24
> 11:03:23 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <mike_kinch9909@indiatimes.com>
> X-YahooFilteredBulk: 195.130.72.1
> Received: from 195.130.72.1 (EHLO teiep.gr)
> (195.130.72.1)
> by mta107.mail.yahoo.com with SMTP; 24 Sep 2000
> 04:03:18 -0700 (PDT)
> Received: from smtp.indiatimes.com
> (sdn-ar-002wimadiP123.dialsprint.net
> [158.252.99.187]) by teiep.gr (8.8.7/8.8.3) with
> SMTP id OAA21159; Sun, 24 Sep 2000 14:01:26 +0300
> (EET DST)
> To: Shamwell@hotmail.com
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- lopo6519559@hfhuet4,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From lopo6519559@hfhuet4@concentricnet.com Sun Sep
> 24 06:56:55 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path:
> <"lopo6519559@hfhuet4"@concentricnet.com>
> X-YahooFilteredBulk: 168.191.178.37
> Received: from sdn-ar-003txhousP299.dialsprint.net
> (HELO rs9.media3.net) (168.191.178.37)
> by mta202.mail.yahoo.com with SMTP; 23 Sep 2000
> 23:56:52 -0700 (PDT)
> Message-ID: <56956.97978@rs9.media3.net>
> From: lopo6519559@hfhuet4@concentricnet.com
> <lopo6519559@hfhuet4@concentricnet.com>
> Reply-to: io87u@prodigy.com
> Subject: Good News! Signup Online For Your
> *Guaranteed* Mastercard!!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- esco@ns.yidong.net.cn wrote:
> From esco@ns.yidong.net.cn Sat Sep 23 06:06:10 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <esco@ns.yidong.net.cn>
> X-YahooFilteredBulk: 202.96.202.62
> Received: from 202.96.202.62 (EHLO
> ns.yidong.net.cn) (202.96.202.62)
> by mta104.mail.yahoo.com with SMTP; 22 Sep 2000
> 21:27:42 -0700 (PDT)
> Received: from ns.yidong.net.cn
> (ip151.las-vegas17.nv.pub-ip.psi.net
> [38.29.117.151])
> by ns.yidong.net.cn (8.8.8+Sun/8.8.8) with SMTP id
> MAA17006;
> Sat, 23 Sep 2000 12:24:27 +0800 (CST)
> From: esco@ns.yidong.net.cn
> Message-Id: <200009230424.MAA17006@ns.yidong.net.cn>
> Received: from sky4@pino.co.kr by
> stevenkilman@kilman.com (8.8.5/8.6.5) with SMTP id
> GAA09422 for <paul34@pino.co.kr>; Fri, 22 Sep 2000
> 18:42:05 -0600 (EST)
> To: paul34@pino.co.kr
> Date: Fri, 22 Sep 00 18:42:05 EST
> Subject: Cell phones / Brain Tumors
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- "Dollarstore.com" <dollarstore57@excite.com>
wrote:
> From Dollarstore.com Tue Sep 19 22:53:05 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> X-YahooFilteredBulk: 168.191.176.141
> Received: from sdn-ar-001txdallP251.dialsprint.net
> (HELO e-unit-4) (168.191.176.141)
> by mta419.mail.yahoo.com with SMTP; 20 Sep 2000
> 00:58:30 -0700 (PDT)
> From: "Dollarstore.com" <dollarstore57@excite.com>
> To: <doctoroblivious@yahoo.com>
> Subject: 25 items, $25.00, Free Shipping - No
> Kidding!
I HAVE RECEIVED SPAM FROM YOUR SITE. YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET. ENJOY.
--- beoin@pageend.com wrote:
> From yotana@pageend.com Fri Oct 06 17:37:56 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <yotana@pageend.com>
> X-YahooFilteredBulk: 63.29.199.213
> Received: from 2Cust85.tnt33.lax3.da.uu.net (HELO
> mylocalserver.com) (63.29.199.213)
> by mta457.mail.yahoo.com with SMTP; 06 Oct 2000
> 10:35:55 -0700 (PDT)
> To: ustani@pageend.com
> From: beoin@pageend.com
> Subject: Safe, Natural, Herbal Sex Formula!
|