Forum Home
PC World Chat
 
Thread ID: 59055 2005-06-20 10:31:00 Anyone got this NZ guy's SPAM? Nomad (952) PC World Chat
Post ID Timestamp Content User
365459 2005-06-20 10:31:00 As follows, the following email in his/her message can be diff username but same domain. Its always the same domain. I got like 20+ of these just day and counting. I was forced to get Mailwasher. Didn't had to use that since Clear Net put a SPAM filter on.


This is an automatically generated Delivery Status Notification.

Unable to deliver message to the following recipients, due to being unable to connect successfully to the destination mail server.

[email addy removed - Bruce]
Nomad (952)
365460 2005-06-20 10:42:00 It's highly likely someone he knows has a virus of sorts and it is sending out spam under a random name from his / her address book - and the virus chose this address as the supposed 'source'. This person probably didn't send the spam so you should really take his e-mail address off this forum. andrew93 (249)
365461 2005-06-20 12:40:00 Never believe anything you read in spam - any names, source or destination addresses, that Rolexes can be had for cheap, or that cialis can increase the volume of your ejaculate... vinref (6194)
365462 2005-06-20 12:43:00 Well for a start it doesn't sound like spam. It sounds like you're getting delivery failures because someone is trying to send a message to that guy forging your address.

Probably because of a virus as previously mentioned.

Post the full headers of the message(s) and I'll tell you where it came from.
ninja (1671)
365463 2005-06-20 20:06:00 chances are his email addy has been havested (as stated earlier) off an infected machine and being used without knowledge.
Have you checked the website take the domain and add www to the front of it. They are Avaition,Tourism or Travel Training Organisation. It seems highly unlikly that he would spamming from such an easily tracable location (but anything is possible).
beama (111)
365464 2005-06-20 20:10:00 . . . . . . . . . . . . Its always the same domain . I got like 20+ of these just day and counting . I was forced to get Mailwasher .

Why not just set up a filter based on that domain name?
Most email clients can do this, even OE .
personthingy (1670)
365465 2005-06-20 21:08:00 If it is in fact from a NZ'er I've found in the past that complaining to local ISP's is effective (apart from Xtra) Greg (193)
365466 2005-06-20 21:38:00 Read your headers, see example below:

Return-Path: <******@forums.pcworld.co.nz>
Received: from forums.pcworld.co.nz (ip-210-48-100-45.iconz.net.nz
[210.48.100.45] (may be forged)) by drs.registerdirect.net.nz
(8.11.6p2-20030920/8.11.0) with ESMTP id j5KK2cZ18055 for
<******@*********.net.nz>; Tue, 21 Jun 2005 08:02:38 +1200 (NZST)
(envelope-from ******@forums.pcworld.co.nz)
Received: from forums.pcworld.co.nz (cindy [127.0.0.1]) by
forums.pcworld.co.nz (8.12.11/8.12.11) with ESMTP id j5KK86nV018860 for
<******@*********.net.nz>; Tue, 21 Jun 2005 08:08:06 +1200
Received: (from apache@localhost) by forums.pcworld.co.nz
(8.12.11/8.12.11/Submit) id j5KK86CF018859; Tue, 21 Jun 2005 08:08:06 +1200

The above header is from a PF1 notification of new stuff on a thread i am monitoring. Only email addresses has been *****ed with.

The important thing is the originating IP, in this case 210.48.100.45, which can be traced directly to

inetnum: 210.48.0.0 - 210.48.127.255
netname: ICONZ-NZ
descr: ICONZ, Internet Service Provider
descr: Private Bag 92142
descr: Auckland, 1001
descr: New Zealand
descr: ****************************************
descr: * Complaints to: abuse@iconz.net
descr: ****************************************

Type "whois 210.48.100.45" or for windows users try the whois.com website

You may have to view message source or something to see your headers, but the IP will be there, so the sourse will be visable, and you will then know which ISP to bleat to.
personthingy (1670)
365467 2005-06-20 21:46:00 I'd say his email address has been hijaked. It happened to me once, where I started getting heaps of emails saying that an email address I sent an emal to didn't exist. They were emails that I didn't send at all. I think my address was used to send spam to a wide range of random computer generated addresses ending in ihug.co.nz.

The poor guy probably has no idea whats happening, and is innocent
netchicken (4843)
365468 2005-06-21 01:54:00 I had the same problem when (much younger) I used AOL .

Anyway, I have a rather simple and neat thing I do in my address book/list .

First, I enter my own sn in it, and then I type another one like this: "!!%$@noway . com"

It will migrate to the top of the address list and when you get your list hijacked, it will generate a lot of error messages to the guy who scooped your book . And, you'll get word too that you have had some strange things happening in YOUR e-mails, by sending you "MAILERDAEMON" notices .

Just a thought . . but it works . :waughh:
SurferJoe46 (51)
1 2