Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

God is real, unless declared integer.

computers / news.admin.net-abuse.email / Re: Spam from mil.ar

SubjectAuthor
* Spam from mil.artjoen
+- Re: Spam from mil.arAndrzej Adam Filip
`* Re: Spam from mil.arAndreas Kohlbach
 `* Re: Spam from mil.artjoen
  `* Re: Spam from mil.arAndreas Kohlbach
   `- Re: Spam from mil.artjoen

1
Spam from mil.ar

<sm92l0$rbm$1@dont-email.me>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=195&group=news.admin.net-abuse.email#195

  copy link   Newsgroups: news.admin.net-abuse.email
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: tjo...@dds.invalid (tjoen)
Newsgroups: news.admin.net-abuse.email
Subject: Spam from mil.ar
Date: Sun, 7 Nov 2021 18:33:20 +0100
Organization: A noiseless patient Spider
Lines: 6
Message-ID: <sm92l0$rbm$1@dont-email.me>
Reply-To: tjoen@dds.nl
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 7 Nov 2021 17:33:20 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="6d21a727d75523b5ab2116b97e4e7813";
logging-data="28022"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1808pkAHdpAHi0H6EQvm0rp"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Thunderbird/91.3.0
Cancel-Lock: sha1:ZQ0mPo8MmJAlxJUJ2iU+b+GROEQ=
Content-Language: en-US
 by: tjoen - Sun, 7 Nov 2021 17:33 UTC

Received: from mx4.ejercito.mil.ar (mx4.ejercito.mil.ar [179.51.212.18])
by mx2.dds.nl (Postfix) with ESMTPS id 77B632200B1;
Sun, 7 Nov 2021 12:12:05 +0100 (CET)
Received: from mx4.ejercito.mil.ar (localhost.localdomain [127.0.0.1])
by mx4.ejercito.mil.ar (Proxmox) with ESMTP id BF03126F05;
Sun, 7 Nov 2021 08:09:49 -0300 (-03)

Re: Spam from mil.ar

<anfi+i750buus8f-lb70@wp.eu>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=196&group=news.admin.net-abuse.email#196

  copy link   Newsgroups: news.admin.net-abuse.email
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: anf...@onet.eu (Andrzej Adam Filip)
Newsgroups: news.admin.net-abuse.email
Subject: Re: Spam from mil.ar
Date: Sun, 07 Nov 2021 17:43:27 +0000 (UTC)
Organization: It is for me to know and for you to find out.
Lines: 17
Message-ID: <anfi+i750buus8f-lb70@wp.eu>
References: <sm92l0$rbm$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: reader02.eternal-september.org; posting-host="bc23948cfed4a39e49a32d14d9f8f2c5";
logging-data="2844"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19dL7zvMVJm61mGjp2UgFXk"
Cancel-Lock: sha1:9oV8pQ6IwhodYQi0405x3BLDogo=
sha1:oL4B3tEewnUzhtHwvTp9pqaEBNs=
 by: Andrzej Adam Filip - Sun, 7 Nov 2021 17:43 UTC

tjoen <tjoen@dds.invalid> wrote:
> Received: from mx4.ejercito.mil.ar (mx4.ejercito.mil.ar [179.51.212.18])
> by mx2.dds.nl (Postfix) with ESMTPS id 77B632200B1;
> Sun, 7 Nov 2021 12:12:05 +0100 (CET)
> Received: from mx4.ejercito.mil.ar (localhost.localdomain [127.0.0.1])
> by mx4.ejercito.mil.ar (Proxmox) with ESMTP id BF03126F05;
> Sun, 7 Nov 2021 08:09:49 -0300 (-03)

Is it systematic/high volume?

Shit happens. I remember a few *.mil spams years ago.
[ None recently ]

Anyway: Nothing to be proud of.

--
A. Filip

Re: Spam from mil.ar

<871r3ry8jz.fsf@usenet.ankman.de>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=197&group=news.admin.net-abuse.email#197

  copy link   Newsgroups: news.admin.net-abuse.email
Path: i2pn2.org!i2pn.org!aioe.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ank...@spamfence.net (Andreas Kohlbach)
Newsgroups: news.admin.net-abuse.email
Subject: Re: Spam from mil.ar
Date: Sun, 07 Nov 2021 16:12:16 -0500
Organization: A noiseless patient Spider
Lines: 15
Message-ID: <871r3ry8jz.fsf@usenet.ankman.de>
References: <sm92l0$rbm$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: reader02.eternal-september.org; posting-host="c81402370173630938b5cc4e7384473c";
logging-data="31716"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19qRaplh03SVpeeKhPJeJ6Q"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
Cancel-Lock: sha1:RXctHz4fB9SVKvCHouMFFIEtkKI=
sha1:tyryEUPggVGu1zvebpGSCXIoUhg=
X-No-Archive: Yes
X-Face: '#R~-oJz-_!iXhczPJ;=w1(`5-uQ2$0qHB7KKDV,]VoAC!P?swaa#m|eB<DkOt*XH=~9C[g S^w)b,)1q,{P\7Z3H,N(^m.YKuYM//B{X:PvbDk.|:g:$wVr*3*)[K6F+k\z-s32+oB]YJPy11wuGGz'bQAk~1.b1[;M{^A2@bboIENBB:Wd:<Fm~r7OuiJA1g}7KC-T'>Du+
X-Face-What-Is-It: Capture Bee from Galaga
 by: Andreas Kohlbach - Sun, 7 Nov 2021 21:12 UTC

On Sun, 7 Nov 2021 18:33:20 +0100, tjoen wrote:
>
> Received: from mx4.ejercito.mil.ar (mx4.ejercito.mil.ar [179.51.212.18])
> by mx2.dds.nl (Postfix) with ESMTPS id 77B632200B1;
> Sun, 7 Nov 2021 12:12:05 +0100 (CET)
> Received: from mx4.ejercito.mil.ar (localhost.localdomain [127.0.0.1])
> by mx4.ejercito.mil.ar (Proxmox) with ESMTP id BF03126F05;
> Sun, 7 Nov 2021 08:09:49 -0300 (-03)

Something from the body would be interesting too. Trying to sell pills,
dating scam, Nigerian scam.

Or did they try to recruit you? *g*
--
Andreas

Re: Spam from mil.ar

<smadm7$o67$1@dont-email.me>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=198&group=news.admin.net-abuse.email#198

  copy link   Newsgroups: news.admin.net-abuse.email
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: tjo...@dds.invalid (tjoen)
Newsgroups: news.admin.net-abuse.email
Subject: Re: Spam from mil.ar
Date: Mon, 8 Nov 2021 06:47:50 +0100
Organization: A noiseless patient Spider
Lines: 17
Message-ID: <smadm7$o67$1@dont-email.me>
References: <sm92l0$rbm$1@dont-email.me> <871r3ry8jz.fsf@usenet.ankman.de>
Reply-To: tjoen@dds.nl
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 8 Nov 2021 05:47:51 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="65c352f8a14125c1cfcf7a3c5fa362ee";
logging-data="24775"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/AhXUyvrwqCQWDyTHTUhCW"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Thunderbird/91.3.0
Cancel-Lock: sha1:6f0wCBhLkL8KkHfNWAQ3I3A9ek4=
In-Reply-To: <871r3ry8jz.fsf@usenet.ankman.de>
Content-Language: en-US
 by: tjoen - Mon, 8 Nov 2021 05:47 UTC

On 11/7/21 22:12, Andreas Kohlbach wrote:
> On Sun, 7 Nov 2021 18:33:20 +0100, tjoen wrote:
>>
>> Received: from mx4.ejercito.mil.ar (mx4.ejercito.mil.ar [179.51.212.18])
>> by mx2.dds.nl (Postfix) with ESMTPS id 77B632200B1;
>> Sun, 7 Nov 2021 12:12:05 +0100 (CET)
>> Received: from mx4.ejercito.mil.ar (localhost.localdomain [127.0.0.1])
>> by mx4.ejercito.mil.ar (Proxmox) with ESMTP id BF03126F05;
>> Sun, 7 Nov 2021 08:09:49 -0300 (-03)
>
> Something from the body would be interesting too. Trying to sell pills,
> dating scam, Nigerian scam.

5 times the same spammer. Only filling the Google form resulted in
closing the accounts. That was why first 3 spams used the same
Google account. But the fourth sent form government.bg and the 5th
from mil.ar

Re: Spam from mil.ar

<87bl2uw3rr.fsf@usenet.ankman.de>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=199&group=news.admin.net-abuse.email#199

  copy link   Newsgroups: news.admin.net-abuse.email
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ank...@spamfence.net (Andreas Kohlbach)
Newsgroups: news.admin.net-abuse.email
Subject: Re: Spam from mil.ar
Date: Mon, 08 Nov 2021 19:50:48 -0500
Organization: A noiseless patient Spider
Lines: 30
Message-ID: <87bl2uw3rr.fsf@usenet.ankman.de>
References: <sm92l0$rbm$1@dont-email.me> <871r3ry8jz.fsf@usenet.ankman.de>
<smadm7$o67$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: reader02.eternal-september.org; posting-host="31821cbdccf82443bb5b94ca95abc643";
logging-data="29394"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+ExwWOQp4i36Unbla2LcNc"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
Cancel-Lock: sha1:Ba3SSaTanTY+Xov4BhBmZWYZEmU=
sha1:4HNBtvc4fQVOD5PpizBQfTFV0FE=
X-No-Archive: Yes
X-Face: '#R~-oJz-_!iXhczPJ;=w1(`5-uQ2$0qHB7KKDV,]VoAC!P?swaa#m|eB<DkOt*XH=~9C[g S^w)b,)1q,{P\7Z3H,N(^m.YKuYM//B{X:PvbDk.|:g:$wVr*3*)[K6F+k\z-s32+oB]YJPy11wuGGz'bQAk~1.b1[;M{^A2@bboIENBB:Wd:<Fm~r7OuiJA1g}7KC-T'>Du+
X-Face-What-Is-It: Capture Bee from Galaga
 by: Andreas Kohlbach - Tue, 9 Nov 2021 00:50 UTC

On Mon, 8 Nov 2021 06:47:50 +0100, tjoen wrote:
>
> On 11/7/21 22:12, Andreas Kohlbach wrote:
>> On Sun, 7 Nov 2021 18:33:20 +0100, tjoen wrote:
>>>
>>> Received: from mx4.ejercito.mil.ar (mx4.ejercito.mil.ar [179.51.212.18])
>>> by mx2.dds.nl (Postfix) with ESMTPS id 77B632200B1;
>>> Sun, 7 Nov 2021 12:12:05 +0100 (CET)
>>> Received: from mx4.ejercito.mil.ar (localhost.localdomain [127.0.0.1])
>>> by mx4.ejercito.mil.ar (Proxmox) with ESMTP id BF03126F05;
>>> Sun, 7 Nov 2021 08:09:49 -0300 (-03)
>> Something from the body would be interesting too. Trying to sell
>> pills,
>> dating scam, Nigerian scam.
>
> 5 times the same spammer. Only filling the Google form resulted in
> closing the accounts. That was why first 3 spams used the same
> Google account. But the fourth sent form government.bg and the 5th
> from mil.ar

Which Google form is that?

At least does Google refuse to accept Spamcop complaints.

Good new I was able to get a "penis enlargement" spammer booted off
Youtube, who had his account there since March 2020. Amazing it was there
so long and not even their automated tests found the spammer all these
months.
--
Andreas

Re: Spam from mil.ar

<smd8g7$1c7$1@dont-email.me>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=200&group=news.admin.net-abuse.email#200

  copy link   Newsgroups: news.admin.net-abuse.email
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: tjo...@dds.invalid (tjoen)
Newsgroups: news.admin.net-abuse.email
Subject: Re: Spam from mil.ar
Date: Tue, 9 Nov 2021 08:37:22 +0100
Organization: A noiseless patient Spider
Lines: 21
Message-ID: <smd8g7$1c7$1@dont-email.me>
References: <sm92l0$rbm$1@dont-email.me> <871r3ry8jz.fsf@usenet.ankman.de>
<smadm7$o67$1@dont-email.me> <87bl2uw3rr.fsf@usenet.ankman.de>
Reply-To: tjoen@dds.nl
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 9 Nov 2021 07:37:43 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="a6ebd99c5c5d99acc4881785c749d292";
logging-data="1415"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+laLogaVd5isF8wEDMGVkA"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
Thunderbird/91.3.0
Cancel-Lock: sha1:Ot+1nWpc7TmO+Sc2mgEQjVQtxhk=
In-Reply-To: <87bl2uw3rr.fsf@usenet.ankman.de>
Content-Language: en-US
 by: tjoen - Tue, 9 Nov 2021 07:37 UTC

On 11/9/21 01:50, Andreas Kohlbach wrote:
> On Mon, 8 Nov 2021 06:47:50 +0100, tjoen wrote:
....
>> 5 times the same spammer. Only filling the Google form resulted in
>> closing the accounts. That was why first 3 spams used the same
>> Google account. But the fourth sent form government.bg and the 5th
>> from mil.ar
>
> Which Google form is that?
>
> At least does Google refuse to accept Spamcop complaints.

https://support.google.com/mail/contact/abuse

> Good new I was able to get a "penis enlargement" spammer booted off
> Youtube, who had his account there since March 2020. Amazing it was there
> so long and not even their automated tests found the spammer all these
> months.

nanae people work quietly behind the scenes.
Never received flowers

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor