This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/anti-abuse-wg@ripe.net/
[anti-abuse-wg] anti-abuse-wg Digest, Vol 47, Issue 7
- Previous message (by thread): [anti-abuse-wg] Spam under protection. Believe it or not!
- Next message (by thread): [anti-abuse-wg] anti-abuse-wg Digest, Vol 47, Issue 7
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Marilson
marilson.mapa at gmail.com
Mon Sep 28 01:41:23 CEST 2015
To www.columbinehoney.net? I would send to the Vatican. They forgive everything. Det är billigare att göra det rätt. Det är dyra reparationer brister. -----Mensagem Original----- From: anti-abuse-wg-request at ripe.net Sent: Sunday, September 27, 2015 4:14 PM To: anti-abuse-wg at ripe.net Subject: anti-abuse-wg Digest, Vol 47, Issue 7 Send anti-abuse-wg mailing list submissions to anti-abuse-wg at ripe.net To subscribe or unsubscribe via the World Wide Web, visit https://www.ripe.net/mailman/listinfo/anti-abuse-wg or, via email, send a message with subject or body 'help' to anti-abuse-wg-request at ripe.net You can reach the person managing the list at anti-abuse-wg-owner at ripe.net When replying, please edit your Subject line so it is more specific than "Re: Contents of anti-abuse-wg digest..." Today's Topics: 1. Re: A spammer hidden (peter h) 2. Re: A spammer hidden (Arnold) ---------------------------------------------------------------------- Message: 1 Date: Sun, 27 Sep 2015 19:31:08 +0200 From: peter h <peter at hk.ipsec.se> To: anti-abuse-wg at ripe.net Subject: Re: [anti-abuse-wg] A spammer hidden Message-ID: <201509271931.08709.peter at hk.ipsec.se> Content-Type: text/plain; charset="utf-8" Please tell us what IP has been spamming, is it 178.77.237.135 ( which happens to be a czech network. My traceroute stops at 77.48.106.250 which seems to be located in UPC Czech peter h On Sunday 27 September 2015 18.46, Marilson wrote: > > From: Marilson > Sent: Sunday, September 27, 2015 1:16 PM > To: abuse at upcbroadband.cz > Cc: abuse at tech.infr.com ; lubos_hutar at mirovka.net ; abuse at godaddy.com ; > abuse at gmail.com ; anti-abuse-wg at ripe.net ; midmail.co at domainsbyproxy.com ; > descontosurpresa at cupomvip.com > Subject: A spammer hidden > > This domain's registrant is hidden by a domain privacy service. Domain > privacy is a service offered by a number of domain name registrars that > allows a domain registrant to hide their identity from public domain name > records. > > ISP does not wish to receive reports regarding > http://www.descontosurpresa.com.br - no date available. > > > > This registrant has two websites - www.descontosurpresa.com.br and > www.360midia.com.br . All contacts on both websites are fake, don?t work. > They are hidden for the illicit practice with the complicity of your ISP > and Registar. And no one does anything. > > Spammers and who sends phishing and virus are hidden... What is the > difference between these providers and an armed robber? Well, the thief is > not a coward. > > Marilson > > HEADER > > Delivered-To: marilson.mapa at gmail.com > Received: by 10.103.43.68 with SMTP id r65csp367699vsr; > Fri, 25 Sep 2015 21:24:11 -0700 (PDT) > X-Received: by 10.194.11.37 with SMTP id n5mr10924491wjb.71.1443241451183; > Fri, 25 Sep 2015 21:24:11 -0700 (PDT) > Return-Path: <bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com> > Received: from server135.midmail.co (server135.midmail.co. > [178.77.237.135]) > by mx.google.com with ESMTP id > ke3si3312538wjb.176.2015.09.25.21.24.10 > for <marilson.mapa at gmail.com>; > Fri, 25 Sep 2015 21:24:11 -0700 (PDT) > Received-SPF: pass (google.com: domain of > bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com designates > 178.77.237.135 as permitted sender) client-ip=178.77.237.135; > Authentication-Results: mx.google.com; > spf=pass (google.com: domain of > bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com designates > 178.77.237.135 as permitted sender) > smtp.mailfrom=bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com; > dkim=pass header.i=@cupomvip.com; > dmarc=pass (p=QUARANTINE dis=NONE) header.from=cupomvip.com > DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=Aug217161668357; > d=cupomvip.com; > h=Date:To:From:Reply-to:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type; > i=descontosurpresa at cupomvip.com; > bh=bUIZMSrI79fEcFU9+zU7pOhZ9i8=; > b=SvdQSTtSwO8EjXeLqTUdvFtLZLJ/Eakt54cBxzkhFkOmK+/rG9D62YmurBZh4hITpyRsB3jY83BQ > > 9i6GozG2UOuerdLa66U/C5VZojxd5VXnym4OSXXSPk7d32dFvRnqrMqzPO926gkm846kj0F//Y4k > > x/1yIK4M/VWCIgA3XKE70xRHudac0MyYfBvGFzF/rfowiuCetgweXMT1QzsNNv2SpVWHNoshA5WW > > 9cwjWgNdZ74IYqP67+oaQfj2i0hF61vSN5i7HRJXPkNdEU2GJ26mHoeldYnwFWypDQTRWQuoXyrr > aip3fOE8S0AanN2eTGWLyAKuVRyaH82gWtYrzA== > DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=Aug217161668357; > d=cupomvip.com; > b=kj8pGFQJ6omvtGFrDg9U3wE5qbD9ZexGojF5eZ96Mnc4A0/RRypVVFF/eIpseYbOQ7n+L2fi56Bu > > xua2PzAHIXDkp5xcsfBXpHwmQKLJIsqx/dBGu+IN7bCzpZnV5J3Cvvr3KXnB7igJbuUFGiGpQlSn > > myEK3EoTy1SrCYOrh5JknqdtyfJfWQQtDgmzNTneBUzUJcNWSMIy2t4NabY3mOaugyLHe6GHNtdB > > 9aeSSZTbuKLPd1F+LVAFR9GHo8oFC6ggRe/koSOTJTW2MIU4cLayv4qQLjKC63Co6E22AywprfEh > lbC20pXRo5V3rpQ+DyxXKJc7OGSv61mmplU4XA==; > Date: Fri, 25 Sep 2015 10:33:52 -0300 > Return-Path: bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com > To: "marilson.mapa at gmail.com" <marilson.mapa at gmail.com> > From: Desconto Surpresa <descontosurpresa at cupomvip.com> > Reply-to: Desconto Surpresa <descontosurpresa at cupomvip.com> > Subject: Regata Calvin Klein - T-Shirt Aleatory - Mochilas Bagaggio e > muito mais > Message-ID: <861974867edf969a7ae160b4ddc71e41 at localhost.localdomain> > X-Priority: 3 > X-Mailer: App2 > X-Complaints-To: abuse at mailguess.com > List-Unsubscribe: <http://mailguess.com/u.php?p=14n/rs/tff/s0/14g/rs>, > <mailto:fbl at fbl.mailguess.com?subject=unsubscribe:14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs> > X-MessageID: 14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs > X-Report-Abuse: > <http://mailguess.com/report_abuse.php?mid=14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs> > x-dkim-options: s=20150611;d=b.emailag.com.br > X-SMTPAPI: > {"unique_args":{"abuse-id":"14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs"}, > "category":"campaign"} > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="b1_861974867edf969a7ae160b4ddc71e41" > > TEXT ? hiperlink removed ? URL: http:// mailguess.com/ > tl.php?p=14n/14g/rs/tff/s0/rs//http%3A%2F%2Fwww.paguri.com%2Fclient%2Foffer%2F99%3B25%3B119 > From: Desconto Surpresa > Sent: Friday, September 25, 2015 10:33 AM > To: marilson.mapa at gmail.com > Subject: Regata Calvin Klein - T-Shirt Aleatory - Mochilas Bagaggio e > muito mais > > > > > > > > > > Vers?o Web > > > > > > > > > > REGATA FURINHOS FRENTE PRETO > > Regata Calvin Klein Jeans feminina na cor preta, > decote redondo, detalhe em couro sint?tico nas laterais, aplica??o de silk > com logo da marca... > > > VER PRE?O > > > > > > > > > > > > > > > T-Shirt Aleatory Estampada M/C Indigo > > > > > > > VER PRE?O > > > > > > > > > > > > > > > > > > > > Mochila Com Rodas Swisswin Zurique > > ? segura e resistente, feita de material ? > prova de rasgos e confort?vel para o transporte, devido ao carrinho > embutido e al?a telesc?pica... > > > VER PRE?O > > > > > > > > > > > > > > > > clique aqui para descadastrar > > > -- Peter H?kanson There's never money to do it right, but always money to do it again ... and again ... and again ... and again. ( Det ?r billigare att g?ra r?tt. Det ?r dyrt att laga fel. ) ------------------------------ Message: 2 Date: Sun, 27 Sep 2015 12:09:09 -0700 From: Arnold <wiegert at telus.net> To: anti-abuse-wg at ripe.net Subject: Re: [anti-abuse-wg] A spammer hidden Message-ID: <56083ED5.7000204 at telus.net> Content-Type: text/plain; charset="utf-8"; Format="flowed" On 9/27/2015 10:31 AM, peter h wrote: > Please tell us what IP has been spamming, is it 178.77.237.135 ( which > happens to be > a czech network. > > My traceroute stops at 77.48.106.250 which seems to be located in UPC > Czech Yes, and if you do a lookup on the IP address you would get the following inetnum: 178.77.237.0 - 178.77.237.255 netname: EMAILAG descr: inflr.com.br country: CZ admin-c: ZK896-RIPE tech-c: ZK896-RIPE status: ASSIGNED PA remarks: ********************************************** remarks: * Please send abuse notifications to: * remarks: * * abuse at tech.inflr.com** remarks: ********************************************** mnt-by: SLOANE-MNT created: 2015-07-30T13:35:15Z last-modified: 2015-09-01T07:59:56Z source: RIPE Whether they'll do something about it or not is an open question, but .. Arnold PS: I highly recommend the SPAM reporter wxSR PPS: blowing my own horn just a bit :-) > > peter h > > > > On Sunday 27 September 2015 18.46, Marilson wrote: >> From: Marilson >> Sent: Sunday, September 27, 2015 1:16 PM >> To: abuse at upcbroadband.cz >> Cc: abuse at tech.infr.com ; lubos_hutar at mirovka.net ; abuse at godaddy.com ; >> abuse at gmail.com ; anti-abuse-wg at ripe.net ; midmail.co at domainsbyproxy.com >> ; descontosurpresa at cupomvip.com >> Subject: A spammer hidden >> >> This domain's registrant is hidden by a domain privacy service. Domain >> privacy is a service offered by a number of domain name registrars that >> allows a domain registrant to hide their identity from public domain name >> records. >> >> ISP does not wish to receive reports regarding >> http://www.descontosurpresa.com.br - no date available. >> >> >> >> This registrant has two websites - www.descontosurpresa.com.br and >> www.360midia.com.br . All contacts on both websites are fake, don?t work. >> They are hidden for the illicit practice with the complicity of your ISP >> and Registar. And no one does anything. >> >> Spammers and who sends phishing and virus are hidden... What is the >> difference between these providers and an armed robber? Well, the thief >> is not a coward. >> >> Marilson >> >> HEADER >> >> Delivered-To: marilson.mapa at gmail.com >> Received: by 10.103.43.68 with SMTP id r65csp367699vsr; >> Fri, 25 Sep 2015 21:24:11 -0700 (PDT) >> X-Received: by 10.194.11.37 with SMTP id >> n5mr10924491wjb.71.1443241451183; >> Fri, 25 Sep 2015 21:24:11 -0700 (PDT) >> Return-Path: <bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com> >> Received: from server135.midmail.co (server135.midmail.co. >> [178.77.237.135]) >> by mx.google.com with ESMTP id >> ke3si3312538wjb.176.2015.09.25.21.24.10 >> for <marilson.mapa at gmail.com>; >> Fri, 25 Sep 2015 21:24:11 -0700 (PDT) >> Received-SPF: pass (google.com: domain of >> bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com designates >> 178.77.237.135 as permitted sender) client-ip=178.77.237.135; >> Authentication-Results: mx.google.com; >> spf=pass (google.com: domain of >> bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com designates >> 178.77.237.135 as permitted sender) >> smtp.mailfrom=bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com; >> dkim=pass header.i=@cupomvip.com; >> dmarc=pass (p=QUARANTINE dis=NONE) header.from=cupomvip.com >> DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=Aug217161668357; >> d=cupomvip.com; >> h=Date:To:From:Reply-to:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type; >> i=descontosurpresa at cupomvip.com; >> bh=bUIZMSrI79fEcFU9+zU7pOhZ9i8=; >> b=SvdQSTtSwO8EjXeLqTUdvFtLZLJ/Eakt54cBxzkhFkOmK+/rG9D62YmurBZh4hITpyRsB3jY83BQ >> >> 9i6GozG2UOuerdLa66U/C5VZojxd5VXnym4OSXXSPk7d32dFvRnqrMqzPO926gkm846kj0F//Y4k >> >> x/1yIK4M/VWCIgA3XKE70xRHudac0MyYfBvGFzF/rfowiuCetgweXMT1QzsNNv2SpVWHNoshA5WW >> >> 9cwjWgNdZ74IYqP67+oaQfj2i0hF61vSN5i7HRJXPkNdEU2GJ26mHoeldYnwFWypDQTRWQuoXyrr >> aip3fOE8S0AanN2eTGWLyAKuVRyaH82gWtYrzA== >> DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=Aug217161668357; >> d=cupomvip.com; >> b=kj8pGFQJ6omvtGFrDg9U3wE5qbD9ZexGojF5eZ96Mnc4A0/RRypVVFF/eIpseYbOQ7n+L2fi56Bu >> >> xua2PzAHIXDkp5xcsfBXpHwmQKLJIsqx/dBGu+IN7bCzpZnV5J3Cvvr3KXnB7igJbuUFGiGpQlSn >> >> myEK3EoTy1SrCYOrh5JknqdtyfJfWQQtDgmzNTneBUzUJcNWSMIy2t4NabY3mOaugyLHe6GHNtdB >> >> 9aeSSZTbuKLPd1F+LVAFR9GHo8oFC6ggRe/koSOTJTW2MIU4cLayv4qQLjKC63Co6E22AywprfEh >> lbC20pXRo5V3rpQ+DyxXKJc7OGSv61mmplU4XA==; >> Date: Fri, 25 Sep 2015 10:33:52 -0300 >> Return-Path: bounce-94496-7576400-1676-452 at bouncehandle.mailguess.com >> To: "marilson.mapa at gmail.com" <marilson.mapa at gmail.com> >> From: Desconto Surpresa <descontosurpresa at cupomvip.com> >> Reply-to: Desconto Surpresa <descontosurpresa at cupomvip.com> >> Subject: Regata Calvin Klein - T-Shirt Aleatory - Mochilas Bagaggio e >> muito mais >> Message-ID: <861974867edf969a7ae160b4ddc71e41 at localhost.localdomain> >> X-Priority: 3 >> X-Mailer: App2 >> X-Complaints-To: abuse at mailguess.com >> List-Unsubscribe: <http://mailguess.com/u.php?p=14n/rs/tff/s0/14g/rs>, >> <mailto:fbl at fbl.mailguess.com?subject=unsubscribe:14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs> >> X-MessageID: 14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs >> X-Report-Abuse: >> <http://mailguess.com/report_abuse.php?mid=14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs> >> x-dkim-options: s=20150611;d=b.emailag.com.br >> X-SMTPAPI: >> {"unique_args":{"abuse-id":"14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs"}, >> "category":"campaign"} >> MIME-Version: 1.0 >> Content-Type: multipart/alternative; >> boundary="b1_861974867edf969a7ae160b4ddc71e41" >> >> TEXT ? hiperlink removed ? URL: http:// mailguess.com/ >> tl.php?p=14n/14g/rs/tff/s0/rs//http%3A%2F%2Fwww.paguri.com%2Fclient%2Foffer%2F99%3B25%3B119 >> From: Desconto Surpresa >> Sent: Friday, September 25, 2015 10:33 AM >> To: marilson.mapa at gmail.com >> Subject: Regata Calvin Klein - T-Shirt Aleatory - Mochilas Bagaggio e >> muito mais >> >> >> >> >> >> >> >> >> >> Vers?o Web >> >> >> >> >> >> >> >> >> >> REGATA FURINHOS FRENTE PRETO >> >> Regata Calvin Klein Jeans feminina na cor preta, >> decote redondo, detalhe em couro sint?tico nas laterais, aplica??o de >> silk com logo da marca... >> >> >> VER PRE?O >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> T-Shirt Aleatory Estampada M/C Indigo >> >> >> >> >> >> >> VER PRE?O >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> Mochila Com Rodas Swisswin Zurique >> >> ? segura e resistente, feita de material >> ? prova de rasgos e confort?vel para o transporte, devido ao carrinho >> embutido e al?a telesc?pica... >> >> >> VER PRE?O >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> clique aqui para descadastrar >> >> >> -- Fight Spam - report it with wxSR 0.7 Vista & Win7 compatible http://www.columbinehoney.net/wxSR.shtml -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://www.ripe.net/ripe/mail/archives/anti-abuse-wg/attachments/20150927/f7de1604/attachment.html> End of anti-abuse-wg Digest, Vol 47, Issue 7 ********************************************
- Previous message (by thread): [anti-abuse-wg] Spam under protection. Believe it or not!
- Next message (by thread): [anti-abuse-wg] anti-abuse-wg Digest, Vol 47, Issue 7
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]