Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#116993 - 19/09/2002 06:28 Dirty Spamming Ba$@*#@s
lopan
old hand

Registered: 28/01/2002
Posts: 970
Loc: Manassas VA
So the last couple of days I've been receiving a enormous amount of email. At first I just tried to ignore it (this is a hotmail account) and delete it... then I noticed that the majority of them were return emails. Basically some spammer has targeted my email address and is using it to spam with (he's not actually using my account.... just attaching my name somehow)..... So basically everytime his little spam list encounters an invalid name, that server sends a return email to me creating enormous amounts of email in my box. My question is, is there anyway to stop this?
_________________________
Brett 60Gb MK2a with Led's

Top
#116994 - 19/09/2002 06:35 Re: Dirty Spamming Ba$@*#@s [Re: lopan]
fusto
addict

Registered: 27/12/2001
Posts: 504
Loc: Lummi Island, WA
I had this same exact problem.
I read through the returned email headers, and discovered that the spammer was using an earthlink account.
I sent an email to abuse@earthlink.com explaining the situation and I attached the emails with intact headers, so they could see for themselves.
I got an email back the same day, telling me they had tracked down his account and terminated him.
No problems since.
Look through the return email headers and see if you can track down the source.
Good luck!
Z~
_________________________
...all I ask is a tall ship and a star to steer her by.

Top
#116995 - 19/09/2002 07:11 Re: Dirty Spamming Ba$@*#@s [Re: lopan]
DeadFire
addict

Registered: 30/05/2002
Posts: 695
Yes, I think fusto is right. This person likely just set up his return address in the email he is sending out to be your address. This way he won't have to waste time checking all the returned messages and deleting them, and can keep himself busy spamming people.

Top
#116996 - 19/09/2002 09:49 Re: Dirty Spamming Ba$@*#@s [Re: fusto]
lopan
old hand

Registered: 28/01/2002
Posts: 970
Loc: Manassas VA
so... I've been going through all the returned mail.... mostly ip addresses that don't respond to an nslookup.... but this was in the header for one of them

Reporting-MTA: dns; mel-rti21.wanadoo.fr
Received-from-MTA: dns; compuserve.com (61.11.75.128)
Arrival-Date: Thu, 19 Sep 2002 14:49:32 +0200

Final-Recipient: rfc822; noaddress@wanadoo.fr
Action: Failed
Status: 5.1.1 (bad destination mailbox address)
Remote-MTA: dns; ms18-2.wanadoo.fr
Diagnostic-Code: smtp; 550 RCPT <noaddress@wanadoo.fr> ERROR. Mailbox
unavailable

So does this mean it's coming from compuserve? or is that just a hop point?

_________________________
Brett 60Gb MK2a with Led's

Top
#116997 - 19/09/2002 10:05 Re: Dirty Spamming Ba$@*#@s [Re: lopan]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31596
Loc: Seattle, WA
Although you are right, it could be a spammer, there is another possibility that I wanted to make sure you knew about:

There is a chance that it's someone who is infected with an email virus and isn't deliberately trying to do anything bad. One of the characteristics of certain recent email viruses is to spoof the return address using a random name from the sender's address book (instead of using the sender's return address as older viruses did). I think they do this to make it more difficult to quickly identify and quarantine the infected machine.
_________________________
Tony Fabris

Top
#116998 - 19/09/2002 10:27 Re: Dirty Spamming Ba$@*#@s [Re: tfabris]
ashmoore
addict

Registered: 24/08/1999
Posts: 564
Loc: TX
That is correct,
most modern viruses like Klez will fake as much as it can in the header information so you cannot rely on anything in there, not even the routng info until you see your servers.
Remember that these things include thier own SMTP servers so they can fake anything.
_________________________
========================== the chewtoy for the dog of Life

Top
#116999 - 19/09/2002 19:07 Re: Dirty Spamming Ba$@*#@s [Re: lopan]
Tim
veteran

Registered: 25/04/2000
Posts: 1525
Loc: Arizona
That happened to me with my primary hotmail account a few years ago - it ended up getting removed. Pissed me off.

Top
#117000 - 22/09/2002 21:39 Re: Dirty Spamming Ba$@*#@s [Re: Tim]
lopan
old hand

Registered: 28/01/2002
Posts: 970
Loc: Manassas VA
I actually sent a email to compuserve's spam abuse address... I didn't hear anything back from them. The day after though I recieved no return email notifications.... I thought they'd taken care of it. I looked todayhowever and had 2 in my inbox, this is still considerably less then what I was getting...
_________________________
Brett 60Gb MK2a with Led's

Top
#117001 - 25/09/2002 12:41 Re: Dirty Spamming Ba$@*#@s [Re: fusto]
davey_boy
new poster

Registered: 11/02/2002
Posts: 10
Loc: United Kingdom
http://www.energis.com/abuse/

Here you can follow instructions on identifying the originator of email, enabling you to make a full report to the relevant ISP.

I had a different reason, someone was sending out abusive email disguised as thought they were from my email account.

Top