[ale] I am confused!!!

Greg Sabino Mullane greg at turnstep.com
Thu Mar 7 10:57:06 EST 2002



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> How did that end up in my mailbox at pcintelligent.com? Look at those
> headers? it's not even close. Any of it! I am totally confused...

Just a spammer, looking for live email addresses. Until recently, 
"Mike" was a very common one to see; I guess they've worn out that name 
and have moved on to "Fred." These runs usually go alphabetically, 
so you can watch it progress if you have more than one email account 
(or a bunch of spamtraps - see below)

Please report the spammer if possible, so that he (could be a she but 
I doubt it) gets nuked as soon as possible. Looks like in your case 
your email system barfed on the IP lookup for some reason. This 
particular spammer likes to send through various relays and open 
proxies, as well as randomize their X-Mailer tag. Pretty slippery.
At least drop a line to "abuse at cranfield.ac.uk" so they can't pick 
up their bounces.


Here's what I got from searching my email: note the alphabetical 
progression. The two letters are the first two letters of the 
email it was sent to: full name hidden to protect my spamtraps. :)

===
Searching for "hey fred" in the subject.

Matches found: 8 out of 39383 total emails.

Hey Fred <susan69 at cranfield.ac.uk> (0.09 Kb) (he) Mar 06, 06:17 PM 
Hey Fred <summer69 at cranfield.ac.uk> (0.09 Kb) (ha) Mar 06, 03:55 PM 
Hey Fred <wantme691 at cranfield.ac.uk> (0.09 Kb) (ic) Mar 06, 01:36 PM 
Hey Fred <caroline691 at cranfield.ac.uk> (0.09 Kb) (hc) Mar 06, 01:09 PM 
Hey Fred <summer691 at cranfield.ac.uk> (0.09 Kb) (hd) Mar 06, 12:19 PM 
Hey Fred <heidi691 at cranfield.ac.uk> (0.09 Kb) (co) Mar 06, 06:42 AM 
Hey Fred <mandy69 at cranfield.ac.uk> (0.09 Kb) (bi) Mar 05, 05:19 PM 
Hey Fred <holly691 at cranfield.ac.uk> (0.09 Kb) (cg) Mar 05, 03:13 PM 
===


Greg Sabino Mullane greg at turnstep.com
Member of the Lumber Cartel (tinlc)
PGP Key: 0x14964AC8 200203071054

-----BEGIN PGP SIGNATURE-----
Comment: http://www.turnstep.com/pgp.html

iD8DBQE8h43GvJuQZxSWSsgRApFHAKDxnuvnt+oe/5+Mb7wvj2Bsi/biKwCg6j/i
v0bkS3CpoxKhnd8IGvHfvdw=
=8SPm
-----END PGP SIGNATURE-----



---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.






More information about the Ale mailing list