Who's the mail spammer?

Hobbes

Someone just spammed me at the address that is only used on 2 places on the net.

Considering it was an indigo.ie address and Irish related I would guess it is someone here.

MiCr0

yep
i got it too

maybe only to mods???

From: "This is Big Brother!!" <enabletel@indigo.ie> Save Address
Print View
Hide Headers
Report Junk Mail

Reply-To: <enabletel@indigo.ie>
Date: Wed, 25 Jul 2001 02:50:29 +0100
To: <writetome@dmeagher.net>
Subject: Vote Now
Content-Transfer-Encoding: 7bit
Received: (cpmta 25904 invoked from network); 24 Jul 2001 18:59:15 -0700
Received: from mail-out.namezero.com (216.34.13.235)
by smtp.c004-mx000.c004.sfo.cp.net (209.228.14.122) with SMTP; 24 Jul 2001 18:59:15 -0700
Received: from lavender.backend.namezero.com ([10.0.0.3] helo=lavender)
by mail-out.namezero.com with esmtp (Exim 3.30 #2)
id 15PDxD-0004Gy-00
for dmeagher.net@namezero.com; Tue, 24 Jul 2001 18:59:15 -0700
Received: from relay06.indigo.ie (HELO relay06.indigo.ie) (relay06.indigo.ie/194.125.133.230)
by lavender with SMTP; Tue, 24 Jul 2001 18:59:15 -0700 (PDT)
Apparently from: enabletel@indigo.ie
On behalf of:
writetome@dmeagher.net
Received: (qmail 73941 messnum 1270957 invoked from network[195.17.130.214/dublin-annex214.internet-ireland.ie]); 25 Jul 2001 01:59:10 -0000
Received: from dublin-annex214.internet-ireland.ie (HELO d3n9u3) (195.17.130.214)
by relay06.indigo.ie (qp 73941) with SMTP; 25 Jul 2001 01:59:10 -0000
X-Priority: 3 (Normal)
Content-Length: 1658
Content-Type: text/plain;
charset="iso-8859-1"
X-Received: 25 Jul 2001 01:59:15 GMT
X-Mimeole: Produced By Microsoft MimeOLE V5.00.2919.6700
Importance: Normal
X-NZ-Hop-Count: 1
X-Msmail-Priority: Normal
Return-Path: <enabletel@indigo.ie>
Mime-Version: 1.0
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Message-Id: <GGELIIEPDDKOEHJKCACFAEBKCIAA.enabletel@indigo.ie>

kayos

Yep got that as well hmmmm whos good at tracing back mails...... I would love to know who it is as well hmmmm fupin' spam

kayos

---

When you get to hell tell them I sent you,
you'll get a group discount...

tribes.gameshop.ie

Hobbes

My email address is only visible to moderators and admins.

Yea and it's the same spam.

Hobbes

Return-Path: <enabletel@indigo.ie>
Received: from chmls21.mediaone.net ([24.147.1.164]) by
chmls14.mediaone.net (Netscape Messaging Server 4.15) with ESMTP
id GH0AEP00.JXC for <XXXX>; Tue, 24 Jul 2001
21:49:37 -0400
Received: from relay06.indigo.ie (relay06.indigo.ie [194.125.133.230])
by chmls21.mediaone.net (8.11.4/8.11.4) with SMTP id f6P1na702020
for <XXXX>; Tue, 24 Jul 2001 21:49:36 -0400 (EDT)
Received: (qmail 57471 messnum 1270906 invoked from network[195.17.130.214/dublin-annex214.internet-ireland.ie]); 25 Jul 2001 01:48:59 -0000
Received: from dublin-annex214.internet-ireland.ie (HELO d3n9u3) (195.17.130.214)
by relay06.indigo.ie (qp 57471) with SMTP; 25 Jul 2001 01:48:59 -0000
Reply-To: <enabletel@indigo.ie>
From: "This is Big Brother!!" <enabletel@indigo.ie>
To: <XXXX>
Subject: Vote Now
Date: Wed, 25 Jul 2001 02:40:17 +0100
Message-ID: <GGELIIEPDDKOEHJKCACFKEPCCHAA.enabletel@indigo.ie>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
X-PMFLAGS: 37224576 0 1 P1E140.CNM

MiCr0

============================================================
=== VisualRoute (tm) 5.2c report on 25-Jul-01 2:02:04 PM ===
============================================================

Report for 195.17.130.214

Analysis: IP packets are being lost past network "Internet Interactions" at hop 27. There is insufficient cached
 information to determine the next network at hop  Connections to HTTP port 80 are being rejected. 

------------------------------------------------------------------------------------------------------------------------------------------------------------------
| Hop | %Loss | IP Address      | Node Name                                 | Location            | Tzone  | ms  | Graph      | Network                          |
------------------------------------------------------------------------------------------------------------------------------------------------------------------
| 0   |       | 192.168.101.239 | visualroute.visualware.co.uk              | -                   |        |     |            | (private use)                    |
| 1   |       | 192.168.101.254 | -                                         | ...                 |        | 0   | x          | (private use)                    |
| 2   |       | 195.167.164.1   | -                                         | ?London, UK         |    0.0 | 0   | x          | Richmond Software                |
| 3   |       | 195.167.252.170 | s2-4.access1uk.hep-lon-uk.ipcenta.net     | ?(United Kingdom)   |    0.0 | 2   | x          | UK-WEB-LONDON-980105             |
| 4   |       | 195.167.255.1   | fe-0-0.core2uk.hep-lon-uk.ipcenta.net     | ?London, UK         |    0.0 | 64  | x-         | iPcenta                          |
| 5   |       | 195.167.255.253 | f0-0-93.core5631.c7206.ipcenta.net        | ?(United Kingdom)   |    0.0 | 0   | x          | UK-WEB-LONDON-980105             |
| 6   |       | 195.167.176.125 | pos-7-3.core1.hep-lon-uk.ipcenta.net      | ?London, UK         |    0.0 | 0   | x          | iPcenta                          |
| 7   |       | 195.167.176.2   | pos-7-1.core2.hep-lon-uk.ipcenta.net      | ?London, UK         |    0.0 | 0   | x          | iPcenta                          |
| 8   |       | 195.167.176.21  | pos-7-0.core2.ixp-par-fr.ipcenta.net      | ?London, UK         |    0.0 | 11  | x          | iPcenta                          |
| 9   |       | 195.167.176.150 | pos-bbr2.nan.completel.fr                 | ?London, UK         |    0.0 | 20  | x          | iPcenta                          |
| 10  |       | 212.73.207.13   | serial2-2.hsipaccess1.Paris1.Level3.net   | Paris, France       |   +1.0 | 10  | x          | Aggregated DS3   customer serial |
| 11  |       | 212.73.240.46   | -                                         | ?(France)           |   +1.0 | 10  | x          | Level 3 Communications           |
| 12  |       | 193.251.240.213 | P3-1.BOUBB2.Bourse.opentransit.net        | -                   |        | 31  | x          | France Telecom Long Distance     |
| 13  |       | 193.251.128.233 | P0-0.BOUBB1.Bourse.opentransit.net        | -                   |        | 38  | x          | France Telecom Long Distance     |
| 14  |       | 193.251.128.65  | P2-0.PASBB2.Pastourelle.opentransit.net   | ?---                |        | 46  | x          | France Telecom Long Distance     |
| 15  |       | 193.251.240.142 | P8-0.NYKBB4.New-york.opentransit.net      | 30.50n, 87.12w      |        | 115 | x-         | France Telecom Long Distance     |
| 16  |       | 193.251.129.114 | P4-0.PALBB1.Palo-alto.opentransit.net     | 37.27n, 122.09w     |        | 202 |  x         | France Telecom Long Distance     |
| 17  |       | 193.251.129.118 | P3-2.STKBB1.Stockton.opentransit.net      | 59.20n, 18.03e      |        | 208 |  x         | France Telecom Long Distance     |
| 18  |       | 193.251.248.178 | -                                         | ?Paris, France      |   +1.0 | 208 |  x         | France Telecom Long Distance     |
| 19  | 10    | 204.59.128.210  | gip-stoc-us-bar-2-fe0-0-0.gip.net         | -                   |        | 214 |  x-        | Global One                       |
| 20  |       | 204.59.136.17   | gip-penn-us-bar-1-h5-1-1.gip.net          | Pennsauken, NJ, USA |   -5.0 | 194 |  x-        | Global One                       |
| 21  |       | 204.59.138.9    | gip-penn-us-bar-3-p1-1.gip.net            | Pennsauken, NJ, USA |   -5.0 | 189 |  x         | Global One                       |
| 22  |       | 204.59.138.22   | gip-arch-gb-bar-2-p9-0-0.gip.net          | Arches, France      |   +1.0 | 196 |  x-        | Global One                       |
| 23  |       | 204.59.7.10     | gip-tele-gb-bar-1-a0-1-0-532-aal5.gip.net | -                   |        | 171 |  x         | Global One                       |
| 24  |       | 204.59.3.46     | gip-dubl-ie-bar-1-a3-1-0-735-aal5.gip.net | -                   |        | 189 |  x         | Global One                       |
| 25  |       | 204.59.8.10     | gip-dubl-ie-car-1-s6.gip.net              | -                   |        | 337 |   x--      | Global One                       |
| 26  |       | 195.17.128.6    | gip-dublin-2-serial0.gip.net              | Dublin, Ireland     |    0.0 | 339 |  -x-       | Global One                       |
| 27  |       | 195.17.130.1    | minotaur.internet-ireland.ie              | ?(Ireland)          |    0.0 | 769 |    ---x--- | Internet Interactions            |
| ... |       |                 |                                           |                     |        |     |            |                                  |
| ?   |       | 195.17.130.214  | dublin-annex214.internet-ireland.ie       | Dublin, Ireland     |    0.0 |     |            | Internet Interactions            |
------------------------------------------------------------------------------------------------------------------------------------------------------------------

Shinji

I got this one as well... Odd.

MiCr0

hobbes,
mods can't see your email address (well i can't here any way)

MiCr0

i reckon the addresses were taken from the "moderated by" section at the top of each page.

logic1

Yep I got it too.

.logic.

amp

Hmmm, not me and my address is in my profile.

---

Lunacy Abounds! GLminesweeper RO><ORS!
"Boxes for show, Baskets for a pro" - [FCA]SyxPak

Gordon

Netshop has just been hit with a virus in the form of an email. It is a very new virus. We are using something called FixSirc.com to disinfect our computers. You may want to get a copy from us to be sure. don't email us though! 1890927928 ask for Hugo.

[This message has been edited by Gordon (edited 06-09-2001).]

Victor

Did any one else not get this e-mail?

How about we do a Glenstal?

Shinji, I could always see your address.

---

Kill, kill, kill the laser mice.

Kix

Hobbes: is this anything to do with the post you made here?

http://www.boards.ie/bulletin/Forum12/HTML/000933.html

K

Shinji

Yeah my email address on boards has always been visible, I don't generally get spam off it tho....

Hobbes

<font face="Verdana, Arial" size="2">Originally posted by Kix:
Hobbes: is this anything to do with the post you made here?

http://www.boards.ie/bulletin/Forum12/HTML/000933.html

K </font>

It was a spam mail for "Vote for Brian".

Mills

I got it too at my e-mail I used to sign up for boards.ie, very strange indeed.

Stephen

My email address is visible to all on the boards, but I've not got this email.

---

- Munch

Evil Phil

I got it this afternoon. Let's all vote but not for Brian.

Bard

I got it.

I also replied along the lines of "DO NOT SEND ME THIS CRAP AGAIN"... but as the Big Bro' thing is a once off, I guess they probably won't anyway...

Had I not voted for Brian already (based on the fact that he's Irish - so sue me ), this spam would have put me off voting for him, and I'd have voted for Dean instead (based on the fact that I think he deserves to win the competition).

Could someone please trace this guy and give him a good kick up the arse, Father Ted to Bishop Brennan styleee...

---

Bard

---

Some mornings, it's just not worth chewing through the leather straps.

LegacyUser

Well before all of u my mail got spamed with gay p0rn and its gettin a lot more as of late

Lucy_la_morte

I receive far too much 'pr0n' and weird stuff in my mail. I change it regulary. I think this mail must of just been for mods and admins since no one who wasn't a mod didn't get it.

---

Senretsukyaku
Kikosho!
SPINNING BIRD KICK

Chun-Li la morte.

Victor

<font face="Verdana, Arial" size="2">Originally posted by Shinji:
Yeah my email address on boards has always been visible, I don't generally get spam off it tho....</font>

Sorry, I got your post confused with Hobbes'.

---

Kill, kill, kill the laser mice.

Hobbes

Well if no one owns up I'll be reporting them for unsolicitied spam.

logic1

<font face="Verdana, Arial" size="2">Originally posted by Lucy_la_morte:
I think this mail must of just been for mods and admins since no one who wasn't a mod didn't get it.

</font>

Actully everyone who wasn't a MOD didn't get it.

.logic.

Evil Phil

(moderated by <A HREF="mailto:q@inniu#.com">Q</A> )

The main page for each forum contains this code but the profiles are accessed by a cgi script so a spider bot can't read them.
They must have trawled the .ie sites for addresses to spam.


[This message has been edited by Evil Phil (edited 25-07-2001).]

Lump

I didnt get it either.

John

DeVore

Once again this is rumour control (guess who was just watching Aliens 3 recently )

ok.

1. this person seems to have sent it to most of indigo/eircom. Not just boards.ie people.
abuse@eircom.net were alerted and have taken action.

2. Its pretty hard for even admins to get an email address for anyone who choses not to let it be visible.

3. DNTK is sent only to those who want it. Its not sent to a list per se.

4. That "list" will be prised from my dead clammy hands before spammers will be able to use it. It will always respect the "do not mail me" option in your profile.

DeV.

Lucifer

these emails were in the paper 2day.

the way the big brother voting works is eircom and providing the lines, they hav contracted a company to run them for them. this company sent all the emails. they hav been told to stop so it should b finished. its nothing 2 do wit boards.ie, they didnt give out ur address. loads of people got it.

Hobbes

<font face="Verdana, Arial" size="2">Originally posted by Lucifer.POD:
these emails were in the paper 2day.

the way the big brother voting works is eircom and providing the lines, they hav contracted a company to run them for them. this company sent all the emails. they hav been told to stop so it should b finished. its nothing 2 do wit boards.ie, they didnt give out ur address. loads of people got it.</font>

I would believe that except for the fact my email address is not an irish one. The only place it appears on the net is boards.ie (I have no way to stop it appearing in the RP forum) and in an open source project I'm watching (not visible though).

So I would say either the person knows all of us or pulled the names from boards.ie.

ecksor

This was dealt with.