RE: [Declude.JunkMail] annoying spammer
BTW: I'm working on a daily report for hold messages
between 100 and 200% of our hold weight. So each user can review his hold
messages for himself.
The report will be an email containing a list with mailfrom
and subject line and a link to an ASP-script that will requeue the selected
message. But I want also copy the SMD-files to a temporary folder so that I
can find out what we can improve on our filters.
So the ability of reviewing different hold folders would be
very usefull for this too.
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin
CoxSent: Monday, October 04, 2004 4:32 PMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]
annoying spammer
Good idea.
Darin.
- Original Message -
From: Markus Gufler
To: [EMAIL PROTECTED]
Sent: Monday, October 04, 2004 10:17 AM
Subject: RE: [Declude.JunkMail] annoying spammer
Please consider also support for multiple/flexible hold
folders. Sometimes miracles just happens ;-)
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin
CoxSent: Monday, October 04, 2004 4:01 PMTo: [EMAIL PROTECTED]Subject:
Re: [Declude.JunkMail] annoying spammer
Nope on SpamReview as far as I know. They
wouldn't release the code...told me at the time they were in talks with
Declude about taking it over, but Scott said nothing happened
there.
As soon as we have time, we're going to write
one that has better support for ip and fromfile black/white lists, data
extracted from custom headers, and supports internal logging to accumulate
stats on potential additions to black/white lists.
Darin.
- Original Message -
From: J Porter
To: [EMAIL PROTECTED]
Sent: Monday, October 04, 2004 3:08 AM
Subject: Re: [Declude.JunkMail] annoying spammer
Yep a REAL annoying spammer. I'm putting
the Class Bs in hold as well as the first 2 or 3 letters of the domain names
then reviewing with Spam Review.
BTW.. didn't someone take over Spam Review? Any
new versions available?
Dam... we shoulda been in the registrar biz and
collected the dough for all these names... LOL...
~Joe
- Original Message -
From:
i360 Support
To: [EMAIL PROTECTED]
Sent: Sunday, October 03, 2004 11:22
PM
Subject: [Declude.JunkMail] annoying
spammer
We have
been swamped with spam from United Email Marketing.Below is a list of
IP addresses and domains used to send the crap.Sniffer does not
catch them and I can't stop them.Does anyone have a solution on
how to get rid of
them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com-
Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the
Lenders Compete Over You=20Your
energies are just mismatched these days. You will gain confidence =in
your abilities if you say no to those wanting you to do for them
=instead of for yourself. Your energies are just mismatched these
days. =Who knew that romance could be so fun? Buy flowers. Write
poetry. Order =dessert.You will attract a potential partner.
Play your cards right. The big =picture is as crucial as the small
one. Consult an expert for help. =Nothing will be as it appears. Be
careful.=20Your creative talent must be implemented in your work
if you want to =reach a higher level. What you get now is what you
wanted all along. =Your energies are just mismatched these days. You
will attract a =potential partner. Play your cards right.You
find pleasure wherever you look -- and maybe in a few surprising
=places as well. You are in a very industrious and creative cycle that
=will bring you profits and satisfaction. Avoid opposition for a
little =while. As the song says Later on you can decide whether this
is the =beginning of a permanent
change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252
--=_NextPart_000_06EA_01C4A99D.138B9190Content-
Re: [Declude.JunkMail] annoying spammer
One warning, I've received legit non-spam e-mail from 204.96.122.157 within September. - Original Message - From: "Bill Landry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 2:33 PM Subject: Re: [Declude.JunkMail] annoying spammer > Message- Original Message - > From: Richard Farris > > > I am seeing a lot of these in my spamreview alsocan't we just > blacklist the domain..? > > You could, but they use so many different domains if could be tough to keep > up with them. I just block the netblocks that have been assigned to Phoenix > Data Systems at my mail gateways: > > 204.94.0.0/15 REJECT > 204.96.0.0/15 REJECT > 205.241.64.0/18 REJECT > 207.43.0.0/18 REJECT > > Bill > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
- Original Message - From: Matt > You must have missed my reply late last night due to spam blocking > of a domain in the message. Hmmm, maybe so, because I never saw your message from last night (I'll check my hold queue). > Please note that your blocks are off, in fact the first two that you listed > include two class B's each 131,072 IP's each), while their largest block > is a /18 which contains 16,384 addresses. The IP space belonging to > Phoenix Data Systems which has obviously been used by this spammer > includes the following: > > 204.120.224.0/19[204.120.224.0 - 204.120.255.255] > 205.240.144.0/21[205.240.144.0 - 205.240.151.255] > 205.241.64.0/18 [205.241.64.0 - 205.241.127.255] > 207.43.0.0/18 [207.43.0.0 - 207.43.63.255] > 204.95.90.0/24[204.95.90.0 - 204.95.90.255] > 204.95.128.0/20 [204.95.128.0 - 204.95.143.255] > 146.145.109.8/29[146.145.109.8 - 146.145.109.15] > > This information is available from ARIN. Which is where I got my data from, but I only based it on the IP ranges I was seeing their spam coming from. Thanks for the additional netblocks, I will add them to my block list. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
Bill, You must have missed my reply late last night due to spam blocking of a domain in the message. Please note that your blocks are off, in fact the first two that you listed include two class B's each (131,072 IP's each), while their largest block is a /18 which contains 16,384 addresses. The IP space belonging to Phoenix Data Systems which has obviously been used by this spammer includes the following: 204.120.224.0/19 [204.120.224.0 - 204.120.255.255] 205.240.144.0/21 [205.240.144.0 - 205.240.151.255] 205.241.64.0/18 [205.241.64.0 - 205.241.127.255] 207.43.0.0/18 [207.43.0.0 - 207.43.63.255] 204.95.90.0/24 [204.95.90.0 - 204.95.90.255] 204.95.128.0/20 [204.95.128.0 - 204.95.143.255] 146.145.109.8/29 [146.145.109.8 - 146.145.109.15] This information is available from ARIN. Matt Bill Landry wrote: Message- Original Message - From: Richard Farris I am seeing a lot of these in my spamreview alsocan't we just blacklist the domain..? You could, but they use so many different domains if could be tough to keep up with them. I just block the netblocks that have been assigned to Phoenix Data Systems at my mail gateways: 204.94.0.0/15 REJECT 204.96.0.0/15 REJECT 205.241.64.0/18 REJECT 207.43.0.0/18 REJECT Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] annoying spammer - external test
I've been very successful stopping this spammer by attacking spamheader code C040120E. This seems to be the only spammer that returns this code. I blast it with a 100 point penalty along with the spamheaders points, and they scoring the spam into the hold and delete ranges. They can change domain names and IP address all they want, as long as their spam software has this flaw, I can nail them. I use an external test. It is posted here: http://it.farmprogress.com/declude/Header.htm - Original Message - From: "Bill Landry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 2:33 PM Subject: Re: [Declude.JunkMail] annoying spammer > Message- Original Message - > From: Richard Farris > > > I am seeing a lot of these in my spamreview alsocan't we just > blacklist the domain..? > > You could, but they use so many different domains if could be tough to keep > up with them. I just block the netblocks that have been assigned to Phoenix > Data Systems at my mail gateways: > > 204.94.0.0/15 REJECT > 204.96.0.0/15 REJECT > 205.241.64.0/18 REJECT > 207.43.0.0/18 REJECT > > Bill > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
- Original Message - From: "Richard Farris" <[EMAIL PROTECTED]> > So putting these lines in my ipblacklist would work... Yes, without the "REJECT" command, as this applies to my Postfix gateways and not Declude JunkMail. For more detail, see my previous post for how to use these netblocks with Declude JunkMail's ipfile. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
- Original Message - From: "Cody Wilson" <[EMAIL PROTECTED]> > I see where we can exclude single ips in the badip.txt file. Can we do > networks as well? If so - what's the syntax. Yes, add something like the following to your global.cfg: IPBLACKLIST ipfile C:\IMail\Declude\ipfile.txt x 5 0 Then in you ipfile.txt file, add: 204.94.0.0/15 204.96.0.0/15 205.241.64.0/18 207.43.0.0/18 Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
So putting these lines in my ipblacklist would work... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet" - Original Message - From: "Bill Landry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 2:33 PM Subject: Re: [Declude.JunkMail] annoying spammer Message- Original Message - From: Richard Farris I am seeing a lot of these in my spamreview alsocan't we just blacklist the domain..? You could, but they use so many different domains if could be tough to keep up with them. I just block the netblocks that have been assigned to Phoenix Data Systems at my mail gateways: 204.94.0.0/15 REJECT 204.96.0.0/15 REJECT 205.241.64.0/18 REJECT 207.43.0.0/18 REJECT Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] annoying spammer
On Monday, October 4, 2004, 3:33:50 PM, Bill wrote: BL> Message- Original Message - BL> From: Richard Farris >> I am seeing a lot of these in my spamreview alsocan't we just BL> blacklist the domain..? BL> You could, but they use so many different domains if could be tough to keep BL> up with them. I just block the netblocks that have been assigned to Phoenix BL> Data Systems at my mail gateways: BL> 204.94.0.0/15 REJECT BL> 204.96.0.0/15 REJECT BL> 205.241.64.0/18 REJECT BL> 207.43.0.0/18 REJECT We've been adding domains as we see them. It seems they have a constant stream of new ones. We've also researched and tagged a number of networks - those rules are now in the system and should be making their way out. I've found no technical reason (nothing broken) for these not to be trapped by sniffer except that some of the domains we just haven't seen yet (at the time of the scan). I suspect this is exaggerated by their initiating this campaign over the weekend while folks are not sending in new spam (so most of what we get is from spamtraps). Anyone here who is using sniffer and does not see an improvement with the next updates (if not already) please contact us on the sniffer list so we can weed out any technical issues we might have missed. If you do see an improvement (you should) please let us know. Thanks, _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] annoying spammer
I see where we can exclude single ips in the badip.txt file. Can we do networks as well? If so - what's the syntax. Thanks, Cody 469.828.4700 PH 469-828-4702 FX intercityweb.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Monday, October 04, 2004 2:34 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] annoying spammer Message- Original Message - From: Richard Farris > I am seeing a lot of these in my spamreview alsocan't we just blacklist the domain..? You could, but they use so many different domains if could be tough to keep up with them. I just block the netblocks that have been assigned to Phoenix Data Systems at my mail gateways: 204.94.0.0/15 REJECT 204.96.0.0/15 REJECT 205.241.64.0/18 REJECT 207.43.0.0/18 REJECT Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Intercity Services Inc. www.intercityweb.com] --- [This E-mail scanned for viruses by Intercity Services Inc. www.intercityweb.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
Message- Original Message - From: Richard Farris > I am seeing a lot of these in my spamreview alsocan't we just blacklist the domain..? You could, but they use so many different domains if could be tough to keep up with them. I just block the netblocks that have been assigned to Phoenix Data Systems at my mail gateways: 204.94.0.0/15 REJECT 204.96.0.0/15 REJECT 205.241.64.0/18 REJECT 207.43.0.0/18 REJECT Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] annoying spammer
See: http://www.senderbase.org/search?searchString=Phoenix+Data+Net http://www.senderbase.org/search?searchString=Phoenix+Data+Systems Fritz Frederick P. Squib, Jr. Network Operations/Mail Administrator Citizens Telephone Company of Kecksburg http://www.wpa.net () ascii ribbon campaign - against html mail /\- against microsoft attachments -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Monday, October 04, 2004 2:57 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] annoying spammer I am seeing a lot of these in my spamreview alsocan't we just blacklist the domain..? Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet" - Original Message - From: Chuck Schick To: [EMAIL PROTECTED] Sent: Monday, October 04, 2004 10:09 AM Subject: RE: [Declude.JunkMail] annoying spammer We are seeing the same thing. They are not tripping sniffer, we are only catching them because of Mailpolice bulk. They seem to be all originating from Alpha Internet services out of Houston Texas. We are blocking a /20 and a /18 block. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of i360 Support Sent: Sunday, October 03, 2004 10:23 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] annoying spammer We have been swamped with spam from United Email Marketing. Below is a list of IP addresses and domains used to send the crap. Sniffer does not catch them and I can't stop them. Does anyone have a solution on how to get rid of them? 207.43.11.191 207.43.11.192 207.43.12.187 205.241.69.176 205.241.69.175 205.241.71.182 205.241.72.177 205.241.73.187 205.241.73.168 205.241.68.178 205.241.75.170 205.241.75.176 207.43.11.191 207.43.11.192 207.43.9.183 207.43.8.192 207.43.6.175 207.43.4.186 205.241.76.183 205.241.77.182 205.241.77.172 205.241.81.186 205.241.82.184 204.95.128.193 204.95.129.174 uniecommerce.com=20 unpitch.com unpromotion.com unplugging.net unmtransactor.com unmpr.com unmplugger.com unnotice.com=20 unmmarketer.com unitrucking.com unipurchaser.com uniebuying.com untrucking.com untrucker.com untrafficker.com=20 unseller.com uemrbuying.com=20 uemrcommerce.com uemrenterprise.com umrmailclient.com umrexchanger.com - Original Message -=20 From: Mortgage Connectors=20 To: [EMAIL PROTECTED] Sent: Monday, October 04, 2004 3:12 AM Subject: SPAM: Make the Lenders Compete Over You =20 Your energies are just mismatched these days. You will gain confidence = in your abilities if you say no to those wanting you to do for them = instead of for yourself. Your energies are just mismatched these days. = Who knew that romance could be so fun? Buy flowers. Write poetry. Order = dessert. You will attract a potential partner. Play your cards right. The big = picture is as crucial as the small one. Consult an expert for help. = Nothing will be as it appears. Be careful.=20 Your creative talent must be implemented in your work if you want to = reach a higher level. What you get now is what you wanted all along. = Your energies are just mismatched these days. You will attract a = potential partner. Play your cards right. You find pleasure wherever you look -- and maybe in a few surprising = places as well. You are in a very industrious and creative cycle that = will bring you profits and satisfaction. Avoid opposition for a little = while. As the song says Later on you can decide whether this is the = beginning of a permanent change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20 =20 10.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable We have been swamped with spam from = United Email=20 Marketing. Below is a list of IP addresses and = domains used to=20 send the crap. Sniffer does not catch them and I can't = stop=20 them. Does anyone have a solution on how to = get rid of=20 them? 207.43.11.191207.43.11.192207.43.12.187205.241.69.17= 6205.241.69.175205.241.71.182205.241.72.177205.241.73.187= 205.241.73.168205.241.68.178205.241.75.170205.241.75.176<= BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.= 43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7= 7.172205.241.81.186205.241.82.184204.95.128.193204.95.129= .174 uniecommerce.com=20 unpitch.comunpromotion.comunplugging.netunmtransactor.com= unmpr.comunmplugger.comunnotice.com=20 unmmarketer.comunitrucking.comunipurchaser.comuniebuying.= comuntrucking.comuntrucker.comuntrafficker.com=20 unseller.comuemrbuying.com=20 uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc= hanger.com - Original Message -=20 From: mailto:[EMAIL PROTECTED]">Mortgage Connectors = To: mailto:[EMAIL PROTECTED]">[EMAIL P
Re: [Declude.JunkMail] annoying spammer
Title: Message I am seeing a lot of these in my spamreview alsocan't we just blacklist the domain..? Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: Chuck Schick To: [EMAIL PROTECTED] Sent: Monday, October 04, 2004 10:09 AM Subject: RE: [Declude.JunkMail] annoying spammer We are seeing the same thing. They are not tripping sniffer, we are only catching them because of Mailpolice bulk. They seem to be all originating from Alpha Internet services out of Houston Texas. We are blocking a /20 and a /18 block. Chuck SchickWarp 8, Inc.(303)-421-5140www.warp8.com -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of i360 SupportSent: Sunday, October 03, 2004 10:23 PMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] annoying spammer We have been swamped with spam from United Email Marketing.Below is a list of IP addresses and domains used to send the crap.Sniffer does not catch them and I can't stop them.Does anyone have a solution on how to get rid of them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com- Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over You=20Your energies are just mismatched these days. You will gain confidence =in your abilities if you say no to those wanting you to do for them =instead of for yourself. Your energies are just mismatched these days. =Who knew that romance could be so fun? Buy flowers. Write poetry. Order =dessert.You will attract a potential partner. Play your cards right. The big =picture is as crucial as the small one. Consult an expert for help. =Nothing will be as it appears. Be careful.=20Your creative talent must be implemented in your work if you want to =reach a higher level. What you get now is what you wanted all along. =Your energies are just mismatched these days. You will attract a =potential partner. Play your cards right.You find pleasure wherever you look -- and maybe in a few surprising =places as well. You are in a very industrious and creative cycle that =will bring you profits and satisfaction. Avoid opposition for a little =while. As the song says Later on you can decide whether this is the =beginning of a permanent change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190Content-Type: text/html;charset="iso-8859-1"Content-Transfer-Encoding: quoted-printablecharset=3Diso-8859-1">We have been swamped with spam from =United Email=20Marketing.Below is a list of IP addresses and =domains used to=20send the crap. Sniffer does not catch them and I can't =stop=20them. Does anyone have a solution on how to =get rid of=20them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17=6205.241.69.175205.241.71.182205.241.72.177205.241.73.187=205.241.73.168205.241.68.178205.241.75.170205.241.75.176<=BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.=43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7=7.172205.241.81.186205.241.82.184204.95.128.193204.95.129=.174 uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.com=unmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.=comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc=hanger.com - Original Message -=20From: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">Mortgage Connectors =To: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over Youhref="">http://844.umrexchanger.com/106519/[EMAIL PROTECTED].=com">src="">http://6485.umrexchanger.com/[EMAIL PROTECTED]" =border=3D0>=20Your energies are just mismatched these
RE: [Declude.JunkMail] annoying spammer
Title: Message We are seeing the same thing. They are not tripping sniffer, we are only catching them because of Mailpolice bulk. They seem to be all originating from Alpha Internet services out of Houston Texas. We are blocking a /20 and a /18 block. Chuck SchickWarp 8, Inc.(303)-421-5140www.warp8.com -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of i360 SupportSent: Sunday, October 03, 2004 10:23 PMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] annoying spammer We have been swamped with spam from United Email Marketing.Below is a list of IP addresses and domains used to send the crap.Sniffer does not catch them and I can't stop them.Does anyone have a solution on how to get rid of them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com- Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over You=20Your energies are just mismatched these days. You will gain confidence =in your abilities if you say no to those wanting you to do for them =instead of for yourself. Your energies are just mismatched these days. =Who knew that romance could be so fun? Buy flowers. Write poetry. Order =dessert.You will attract a potential partner. Play your cards right. The big =picture is as crucial as the small one. Consult an expert for help. =Nothing will be as it appears. Be careful.=20Your creative talent must be implemented in your work if you want to =reach a higher level. What you get now is what you wanted all along. =Your energies are just mismatched these days. You will attract a =potential partner. Play your cards right.You find pleasure wherever you look -- and maybe in a few surprising =places as well. You are in a very industrious and creative cycle that =will bring you profits and satisfaction. Avoid opposition for a little =while. As the song says Later on you can decide whether this is the =beginning of a permanent change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190Content-Type: text/html;charset="iso-8859-1"Content-Transfer-Encoding: quoted-printablecharset=3Diso-8859-1">We have been swamped with spam from =United Email=20Marketing.Below is a list of IP addresses and =domains used to=20send the crap. Sniffer does not catch them and I can't =stop=20them. Does anyone have a solution on how to =get rid of=20them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17=6205.241.69.175205.241.71.182205.241.72.177205.241.73.187=205.241.73.168205.241.68.178205.241.75.170205.241.75.176<=BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.=43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7=7.172205.241.81.186205.241.82.184204.95.128.193204.95.129=.174 uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.com=unmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.=comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc=hanger.com - Original Message -=20From: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">Mortgage Connectors =To: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over Youhref="">http://844.umrexchanger.com/106519/[EMAIL PROTECTED].=com">src="">http://6485.umrexchanger.com/[EMAIL PROTECTED]" =border=3D0>=20Your energies are just mismatched these days. =You will=20gain confidence in your abilities if you say no to those wanting you to =do for="">them instead of for yourself. Your energies are just mismatched these =days. Who=20knew that romance could be so fun? Buy flowers. Write poetry. Order=20dessert.You will attract a potential partner. Play your cards =right. The=20big picture is as crucial as the small one. Consult an expert for help. =Nothing=20will be as it appears. Be careful. Your creative talent must be=20implemented in yo
Re: [Declude.JunkMail] annoying spammer
Good idea.
Darin.
- Original Message -
From: Markus Gufler
To: [EMAIL PROTECTED]
Sent: Monday, October 04, 2004 10:17 AM
Subject: RE: [Declude.JunkMail] annoying spammer
Please consider also support for multiple/flexible hold
folders. Sometimes miracles just happens ;-)
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin
CoxSent: Monday, October 04, 2004 4:01 PMTo: [EMAIL PROTECTED]Subject:
Re: [Declude.JunkMail] annoying spammer
Nope on SpamReview as far as I know. They
wouldn't release the code...told me at the time they were in talks with
Declude about taking it over, but Scott said nothing happened
there.
As soon as we have time, we're going to write one
that has better support for ip and fromfile black/white lists, data extracted
from custom headers, and supports internal logging to accumulate stats on
potential additions to black/white lists.
Darin.
- Original Message -
From: J Porter
To: [EMAIL PROTECTED]
Sent: Monday, October 04, 2004 3:08 AM
Subject: Re: [Declude.JunkMail] annoying spammer
Yep a REAL annoying spammer. I'm putting the
Class Bs in hold as well as the first 2 or 3 letters of the domain names then
reviewing with Spam Review.
BTW.. didn't someone take over Spam Review? Any
new versions available?
Dam... we shoulda been in the registrar biz and
collected the dough for all these names... LOL...
~Joe
- Original Message -
From:
i360 Support
To: [EMAIL PROTECTED]
Sent: Sunday, October 03, 2004 11:22
PM
Subject: [Declude.JunkMail] annoying
spammer
We have
been swamped with spam from United Email Marketing.Below is a list of IP
addresses and domains used to send the crap.Sniffer does not catch
them and I can't stop them.Does anyone have a solution on how to get
rid of
them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com-
Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the
Lenders Compete Over You=20Your energies
are just mismatched these days. You will gain confidence =in your
abilities if you say no to those wanting you to do for them =instead of
for yourself. Your energies are just mismatched these days. =Who knew
that romance could be so fun? Buy flowers. Write poetry. Order
=dessert.You will attract a potential partner. Play your cards
right. The big =picture is as crucial as the small one. Consult an
expert for help. =Nothing will be as it appears. Be
careful.=20Your creative talent must be implemented in your work if
you want to =reach a higher level. What you get now is what you wanted
all along. =Your energies are just mismatched these days. You will
attract a =potential partner. Play your cards right.You find
pleasure wherever you look -- and maybe in a few surprising =places as
well. You are in a very industrious and creative cycle that =will bring
you profits and satisfaction. Avoid opposition for a little =while. As
the song says Later on you can decide whether this is the =beginning of
a permanent
change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252
--=_NextPart_000_06EA_01C4A99D.138B9190Content-Type:
text/html;charset="iso-8859-1"Content-Transfer-Encoding:
quoted-printablecharset=3Diso-8859-1">We
have been swamped with spam from =United
Email=20Marketing.Below is a list of IP addresses and =domains
used to=20send the crap. Sniffer does not catch them and I can't
=stop=20them. Does anyone have a solution on how to =get rid
of=20them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17=6205.241.69.175205.241.71.182205.241.72.177205.241.73.187=205.241.73.168205.241.68.178205.241.75.170205.241.75.176<=BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.=43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7=7.172205.241.81.186205.241.82.184204.95.128.193204.95.129=.174 uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.com=unmpr.comunmplugger.comunnotice.com=2
RE: [Declude.JunkMail] annoying spammer
Please consider also support for multiple/flexible hold
folders. Sometimes miracles just happens ;-)
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin
CoxSent: Monday, October 04, 2004 4:01 PMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]
annoying spammer
Nope on SpamReview as far as I know. They
wouldn't release the code...told me at the time they were in talks with
Declude about taking it over, but Scott said nothing happened
there.
As soon as we have time, we're going to write one
that has better support for ip and fromfile black/white lists, data extracted
from custom headers, and supports internal logging to accumulate stats on
potential additions to black/white lists.
Darin.
- Original Message -
From: J Porter
To: [EMAIL PROTECTED]
Sent: Monday, October 04, 2004 3:08 AM
Subject: Re: [Declude.JunkMail] annoying spammer
Yep a REAL annoying spammer. I'm putting the
Class Bs in hold as well as the first 2 or 3 letters of the domain names then
reviewing with Spam Review.
BTW.. didn't someone take over Spam Review? Any
new versions available?
Dam... we shoulda been in the registrar biz and
collected the dough for all these names... LOL...
~Joe
- Original Message -
From:
i360 Support
To: [EMAIL PROTECTED]
Sent: Sunday, October 03, 2004 11:22
PM
Subject: [Declude.JunkMail] annoying
spammer
We have
been swamped with spam from United Email Marketing.Below is a list of IP
addresses and domains used to send the crap.Sniffer does not catch
them and I can't stop them.Does anyone have a solution on how to get
rid of
them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com-
Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the
Lenders Compete Over You=20Your energies
are just mismatched these days. You will gain confidence =in your
abilities if you say no to those wanting you to do for them =instead of
for yourself. Your energies are just mismatched these days. =Who knew
that romance could be so fun? Buy flowers. Write poetry. Order
=dessert.You will attract a potential partner. Play your cards
right. The big =picture is as crucial as the small one. Consult an
expert for help. =Nothing will be as it appears. Be
careful.=20Your creative talent must be implemented in your work if
you want to =reach a higher level. What you get now is what you wanted
all along. =Your energies are just mismatched these days. You will
attract a =potential partner. Play your cards right.You find
pleasure wherever you look -- and maybe in a few surprising =places as
well. You are in a very industrious and creative cycle that =will bring
you profits and satisfaction. Avoid opposition for a little =while. As
the song says Later on you can decide whether this is the =beginning of
a permanent
change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252
--=_NextPart_000_06EA_01C4A99D.138B9190Content-Type:
text/html;charset="iso-8859-1"Content-Transfer-Encoding:
quoted-printablecharset=3Diso-8859-1">We
have been swamped with spam from =United
Email=20Marketing.Below is a list of IP addresses and =domains
used to=20send the crap. Sniffer does not catch them and I can't
=stop=20them. Does anyone have a solution on how to =get rid
of=20them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17=6205.241.69.175205.241.71.182205.241.72.177205.241.73.187=205.241.73.168205.241.68.178205.241.75.170205.241.75.176<=BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.=43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7=7.172205.241.81.186205.241.82.184204.95.128.193204.95.129=.174 uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.com=unmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.=comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc=hanger.com -
Re: [Declude.JunkMail] annoying spammer
Nope on SpamReview as far as I know. They wouldn't release the code...told me at the time they were in talks with Declude about taking it over, but Scott said nothing happened there. As soon as we have time, we're going to write one that has better support for ip and fromfile black/white lists, data extracted from custom headers, and supports internal logging to accumulate stats on potential additions to black/white lists. Darin. - Original Message - From: J Porter To: [EMAIL PROTECTED] Sent: Monday, October 04, 2004 3:08 AM Subject: Re: [Declude.JunkMail] annoying spammer Yep a REAL annoying spammer. I'm putting the Class Bs in hold as well as the first 2 or 3 letters of the domain names then reviewing with Spam Review. BTW.. didn't someone take over Spam Review? Any new versions available? Dam... we shoulda been in the registrar biz and collected the dough for all these names... LOL... ~Joe - Original Message - From: i360 Support To: [EMAIL PROTECTED] Sent: Sunday, October 03, 2004 11:22 PM Subject: [Declude.JunkMail] annoying spammer We have been swamped with spam from United Email Marketing.Below is a list of IP addresses and domains used to send the crap.Sniffer does not catch them and I can't stop them.Does anyone have a solution on how to get rid of them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com- Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over You=20Your energies are just mismatched these days. You will gain confidence =in your abilities if you say no to those wanting you to do for them =instead of for yourself. Your energies are just mismatched these days. =Who knew that romance could be so fun? Buy flowers. Write poetry. Order =dessert.You will attract a potential partner. Play your cards right. The big =picture is as crucial as the small one. Consult an expert for help. =Nothing will be as it appears. Be careful.=20Your creative talent must be implemented in your work if you want to =reach a higher level. What you get now is what you wanted all along. =Your energies are just mismatched these days. You will attract a =potential partner. Play your cards right.You find pleasure wherever you look -- and maybe in a few surprising =places as well. You are in a very industrious and creative cycle that =will bring you profits and satisfaction. Avoid opposition for a little =while. As the song says Later on you can decide whether this is the =beginning of a permanent change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190Content-Type: text/html;charset="iso-8859-1"Content-Transfer-Encoding: quoted-printablecharset=3Diso-8859-1">We have been swamped with spam from =United Email=20Marketing.Below is a list of IP addresses and =domains used to=20send the crap. Sniffer does not catch them and I can't =stop=20them. Does anyone have a solution on how to =get rid of=20them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17=6205.241.69.175205.241.71.182205.241.72.177205.241.73.187=205.241.73.168205.241.68.178205.241.75.170205.241.75.176<=BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.=43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7=7.172205.241.81.186205.241.82.184204.95.128.193204.95.129=.174 uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.com=unmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.=comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc=hanger.com - Original Message -=20From: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">Mortgage Connectors =To: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over Youhref="">http://844.umrexchanger.com/106519/[EMAIL PROTECTED].=com">src="">http://6485.umrexchanger.com/[EMAIL PROTECTE
Re: [Declude.JunkMail] annoying spammer
Yep a REAL annoying spammer. I'm putting the Class Bs in hold as well as the first 2 or 3 letters of the domain names then reviewing with Spam Review. BTW.. didn't someone take over Spam Review? Any new versions available? Dam... we shoulda been in the registrar biz and collected the dough for all these names... LOL... ~Joe - Original Message - From: i360 Support To: [EMAIL PROTECTED] Sent: Sunday, October 03, 2004 11:22 PM Subject: [Declude.JunkMail] annoying spammer We have been swamped with spam from United Email Marketing.Below is a list of IP addresses and domains used to send the crap.Sniffer does not catch them and I can't stop them.Does anyone have a solution on how to get rid of them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com- Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over You=20Your energies are just mismatched these days. You will gain confidence =in your abilities if you say no to those wanting you to do for them =instead of for yourself. Your energies are just mismatched these days. =Who knew that romance could be so fun? Buy flowers. Write poetry. Order =dessert.You will attract a potential partner. Play your cards right. The big =picture is as crucial as the small one. Consult an expert for help. =Nothing will be as it appears. Be careful.=20Your creative talent must be implemented in your work if you want to =reach a higher level. What you get now is what you wanted all along. =Your energies are just mismatched these days. You will attract a =potential partner. Play your cards right.You find pleasure wherever you look -- and maybe in a few surprising =places as well. You are in a very industrious and creative cycle that =will bring you profits and satisfaction. Avoid opposition for a little =while. As the song says Later on you can decide whether this is the =beginning of a permanent change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190Content-Type: text/html;charset="iso-8859-1"Content-Transfer-Encoding: quoted-printablecharset=3Diso-8859-1">We have been swamped with spam from =United Email=20Marketing.Below is a list of IP addresses and =domains used to=20send the crap. Sniffer does not catch them and I can't =stop=20them. Does anyone have a solution on how to =get rid of=20them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17=6205.241.69.175205.241.71.182205.241.72.177205.241.73.187=205.241.73.168205.241.68.178205.241.75.170205.241.75.176<=BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.=43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7=7.172205.241.81.186205.241.82.184204.95.128.193204.95.129=.174 uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.com=unmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.=comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc=hanger.com - Original Message -=20From: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">Mortgage Connectors =To: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over Youhref="">http://844.umrexchanger.com/106519/[EMAIL PROTECTED].=com">src="">http://6485.umrexchanger.com/[EMAIL PROTECTED]" =border=3D0>=20Your energies are just mismatched these days. =You will=20gain confidence in your abilities if you say no to those wanting you to =do for="">them instead of for yourself. Your energies are just mismatched these =days. Who=20knew that romance could be so fun? Buy flowers. Write poetry. Order=20dessert.You will attract a potential partner. Play your cards =right. The=20big picture is as crucial as the small one. Consult an expert for help. =Nothing=20will be as it appears. Be careful. Your creative talent must be=20implemented in your w
Re[2]: [Declude.JunkMail] annoying spammer
On Monday, October 4, 2004, 1:45:43 AM, Bill wrote: >> Pete, I have been forwarding this types of spam to your spam@ address for >> the past couple of days, as well, including many today. They are still BL> not >> being flagged by Sniffer - and yes, my rulebase is up to date. BL> Here is a sampling of what I have been seeing over the past 3 days: There were a few new ones in there, but most of them were already in our rulebase. I did a static test with this email and your rulebase and things looked ok on this end. I'll send you the log file from the test if you like so you can compare. I've also launched a compile of your rulebase to jump the queue and get you the newest rules as well. Perhaps you're getting hit harder than we are seeing on this end - that might help. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] annoying spammer
On Monday, October 4, 2004, 1:19:28 AM, Bill wrote: BL> - Original Message - BL> From: "Pete McNeil" <[EMAIL PROTECTED]> >> On Monday, October 4, 2004, 12:22:30 AM, i360 wrote: >> >> iS> We have been swamped with spam from United Email Marketing. >> iS> Below is a list of IP addresses and domains used to send the crap. >> >> iS> Sniffer does not catch them and I can't stop them. >> >> ??? I did some checking. >> We've had rules for most (all but 4) of these domains since about >> 10/2 on average. Is your rulebase file up to date? BL> Pete, I have been forwarding this types of spam to your spam@ address for BL> the past couple of days, as well, including many today. They are still not BL> being flagged by Sniffer - and yes, my rulebase is up to date. Yes, I've been seeing them while coding... Also from our spamtraps. Odd thing is that they are gaining rule strength - which means they are being reported back as hits in system logs. We're also not seeing duplication on this end - that is, once the rule is there we're not seeing the messages continue. This is another mystery - I hate mysteries. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
> > On Monday, October 4, 2004, 12:22:30 AM, i360 wrote: > > > > iS> We have been swamped with spam from United Email Marketing. > > iS> Below is a list of IP addresses and domains used to send the crap. > > > > iS> Sniffer does not catch them and I can't stop them. > > > > ??? I did some checking. > > We've had rules for most (all but 4) of these domains since about > > 10/2 on average. Is your rulebase file up to date? > > Pete, I have been forwarding this types of spam to your spam@ address for > the past couple of days, as well, including many today. They are still not > being flagged by Sniffer - and yes, my rulebase is up to date. Here is a sampling of what I have been seeing over the past 3 days: umrcommerce.com 204.95.131.157 umrcommerce.com 204.95.131.172 umrcommerce.com 204.95.131.49 umrcommerce.com 204.95.131.56 umrcommercial.com 204.95.131.145 umrcommercial.com 204.95.131.46 umrcommercial.com 204.95.131.56 umrconsumer.com 204.95.131.126 umrconsuming.com 204.95.131.195 umrconsuming.com 204.95.131.212 umrdealing.com 204.95.130.172 umrdealing.com 204.95.130.182 umrdealing.com 204.95.130.34 umrdelivery.com 204.95.130.80 umrendorser.com 204.95.130.157 umrendorser.com 204.95.130.199 umrexchanger.com 204.95.129.140 umrexchanger.com 204.95.129.169 umrexchanger.com 204.95.129.190 umrexchanger.com 204.95.129.38 umrexhibition.com 204.95.129.51 umrexhibition.com 204.95.129.53 umrexhibition.com 204.95.129.63 umrexhibitor.com 204.95.129.154 umrflyer.com 204.95.129.151 umrflyer.com 204.95.129.214 umrflyers.com 204.95.128.210 umrindustry.com 204.95.128.130 umrinventory.com 204.95.128.163 umrinventory.com 204.95.128.40 umrinventory.com 204.95.128.46 umrinventory.com 204.95.128.60 umrmailclient.com 204.95.128.143 umrmailclient.com 204.95.128.169 umrmailclient.com 204.95.128.176 umrmailclient.com 204.95.128.23 umrmailclient.com 204.95.128.46 umrmailclient.com 204.95.128.57 umrmarketing.com 204.95.128.144 umrmarketing.com 204.95.128.156 umrmarketing.com 204.95.128.162 umrmarketing.com 204.95.128.24 umrmarketing.com 204.95.128.38 unieblurb.com 205.241.74.150 unieblurb.com 205.241.74.158 unieblurb.com 205.241.74.43 unieblurb.com 205.241.74.80 uniebroadcast.com 205.241.74.173 uniebroadcast.com 205.241.74.179 uniebroadcast.com 205.241.74.30 uniebusiness.com 205.241.74.140 uniebusiness.com 205.241.74.143 uniebusiness.com 205.241.74.156 uniebusiness.com 205.241.74.78 uniebuying.com 205.241.73.214 uniecampaign.com 205.241.73.122 uniecampaign.com 205.241.73.149 uniecampaigner.com 205.241.73.151 uniecampaigner.com 205.241.73.40 uniecommerce.com 205.241.73.113 uniecommerce.com 205.241.73.171 uniecommerce.com 205.241.73.187 uniecommerce.com 205.241.73.48 unioutbound.com 207.43.3.223 unioutgoing.com 207.43.3.202 unioutgoing.com 207.43.3.214 unioutgoing.com 207.43.3.46 unipitch.com 207.43.3.103 unipitch.com 207.43.3.125 unipitch.com 207.43.3.127 unipitch.com 207.43.3.144 unipitch.com 207.43.3.153 unipitch.com 207.43.3.167 unipitch.com 207.43.3.214 unipitch.com 207.43.3.225 unipitch.com 207.43.3.232 unipitch.com 207.43.3.238 unipitch.com 207.43.3.35 unipitch.com 207.43.3.47 unipitcher.com 207.43.3.125 unipitcher.com 207.43.3.131 unipitcher.com 207.43.3.135 unipitcher.com 207.43.3.149 unipitcher.com 207.43.3.174 unipitcher.com 207.43.3.191 unipitcher.com 207.43.3.205 unipitcher.com 207.43.3.206 unipitcher.com 207.43.3.212 unipitcher.com 207.43.3.231 unipitcher.com 207.43.3.245 unipitcher.com 207.43.3.50 unipitcher.com 207.43.3.88 uniplugger.com 207.43.3.116 uniplugger.com 207.43.3.132 uniplugger.com 207.43.3.139 uniplugger.com 207.43.3.141 uniplugger.com 207.43.3.149 uniplugger.com 207.43.3.226 uniplugger.com 207.43.3.230 uniplugger.com 207.43.3.245 uniplugger.com 207.43.3.248 uniplugger.com 207.43.3.31 uniplugger.com 207.43.3.55 uniplugger.com 207.43.3.66 uniplugger.com 207.43.3.77 uniplugging.com 207.43.3.100 uniplugging.com 207.43.3.112 uniplugging.com 207.43.3.141 uniplugging.com 207.43.3.153 uniplugging.com 207.43.3.158 uniplugging.com 207.43.3.165 uniplugging.com 207.43.3.180 uniplugging.com 207.43.3.185 uniplugging.com 207.43.3.43 uniplugging.com 207.43.3.62 uniplugging.com 207.43.3.65 uniplugging.com 207.43.3.80 unipromoter.com 207.43.4.142 unipromoter.com 207.43.4.179 unipromoter.com 207.43.4.192 unipromoter.com 207.43.4.41 unipublicity.com 207.43.4.22 unipublicity.com 207.43.4.45 unipurchase.com 207.43.4.117 unipurchase.com 207.43.4.166 unipurchase.com 207.43.4.225 unipurchasing.com 207.43.5.111 unipurchasing.com 207.43.5.129 unipurchasing.com 207.43.5.131 unipurchasing.com 207.43.5.152 unipurchasing.com 207.43.5.153 unipurchasing.com 207.43.5.154 unipurchasing.com 207.43.5.199 unipurchasing.com 207.43.5.215 unipurchasing.com 207.43.5.23 unipurchasing.com 207.43.5.230 unipurchasing.com 207.43.5.240 unipurchasing.com 207.43.5.37 unipurchasing.com 207.43.5.44 uniseller.com 207.43.5.117 uniseller.com 207.43.5.128 uniseller.com 207.43.5.129 uniseller.com 207.43.5.149 uniseller.com 207.43.5.172 uniseller.com 207.43.5.180
Re: [Declude.JunkMail] annoying spammer
- Original Message - From: "Pete McNeil" <[EMAIL PROTECTED]> > On Monday, October 4, 2004, 12:22:30 AM, i360 wrote: > > iS> We have been swamped with spam from United Email Marketing. > iS> Below is a list of IP addresses and domains used to send the crap. > > iS> Sniffer does not catch them and I can't stop them. > > ??? I did some checking. > We've had rules for most (all but 4) of these domains since about > 10/2 on average. Is your rulebase file up to date? Pete, I have been forwarding this types of spam to your spam@ address for the past couple of days, as well, including many today. They are still not being flagged by Sniffer - and yes, my rulebase is up to date. Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] annoying spammer
Blacklist them. They have attacked with three different large blocks in the last 2 weeks. The address space is from an old provider that is no longer around (phoenix.net), possibly hijacked, possibly just simply delegated for use in spam. 204.120.224.0/19 Phoenix Data Systems/United Email Marketing/unemarketing.com (Spam House, SBL19748) [204.120.224.0 - 204.120.255.255] - 10/03/2004 205.240.144.0/21 Phoenix Data Systems/United Email Marketing/unemarketing.com (Spam House) [205.240.144.0 - 205.240.151.255] - 10/03/2004 205.241.64.0/18 Phoenix Data Systems/United Email Marketing/unemarketing.com (Spam House) [205.241.64.0 - 205.241.127.255] - 10/03/2004 207.43.0.0/18 Phoenix Data Systems/United Email Marketing/unemarketing.com (Spam House) [207.43.0.0 - 207.43.63.255] - 10/03/2004 204.95.90.0/24 Phoenix Data Systems/United Email Marketing/unemarketing.com (Spam House) [204.95.90.0 - 204.95.90.255] - 10/03/2004 204.95.128.0/20 Phoenix Data Systems/United Email Marketing/unemarketing.com (Spam House) [204.95.128.0 - 204.95.143.255] - 10/03/2004 146.145.109.8/29 Phoenix Data Systems/United Email Marketing/unemarketing.com (Spam House) [146.145.109.8 - 146.145.109.15] - 10/03/2004 Matt i360 Support wrote: We have been swamped with spam from United Email Marketing. Below is a list of IP addresses and domains used to send the crap. Sniffer does not catch them and I can't stop them. Does anyone have a solution on how to get rid of them? 207.43.11.191 207.43.11.192 207.43.12.187 205.241.69.176 205.241.69.175 205.241.71.182 205.241.72.177 205.241.73.187 205.241.73.168 205.241.68.178 205.241.75.170 205.241.75.176 207.43.11.191 207.43.11.192 207.43.9.183 207.43.8.192 207.43.6.175 207.43.4.186 205.241.76.183 205.241.77.182 205.241.77.172 205.241.81.186 205.241.82.184 204.95.128.193 204.95.129.174 uniecommerce.com=20 unpitch.com unpromotion.com unplugging.net unmtransactor.com unmpr.com unmplugger.com unnotice.com=20 unmmarketer.com unitrucking.com unipurchaser.com uniebuying.com untrucking.com untrucker.com untrafficker.com=20 unseller.com uemrbuying.com=20 uemrcommerce.com uemrenterprise.com umrmailclient.com umrexchanger.com - Original Message -=20 From: Mortgage Connectors=20 To: [EMAIL PROTECTED] Sent: Monday, October 04, 2004 3:12 AM Subject: SPAM: Make the Lenders Compete Over You =20 Your energies are just mismatched these days. You will gain confidence = in your abilities if you say no to those wanting you to do for them = instead of for yourself. Your energies are just mismatched these days. = Who knew that romance could be so fun? Buy flowers. Write poetry. Order = dessert. You will attract a potential partner. Play your cards right. The big = picture is as crucial as the small one. Consult an expert for help. = Nothing will be as it appears. Be careful.=20 Your creative talent must be implemented in your work if you want to = reach a higher level. What you get now is what you wanted all along. = Your energies are just mismatched these days. You will attract a = potential partner. Play your cards right. You find pleasure wherever you look -- and maybe in a few surprising = places as well. You are in a very industrious and creative cycle that = will bring you profits and satisfaction. Avoid opposition for a little = while. As the song says Later on you can decide whether this is the = beginning of a permanent change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20 =20 10.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable charset=3Diso-8859-1"> We have been swamped with spam from = United Email=20 Marketing. Below is a list of IP addresses and = domains used to=20 send the crap. Sniffer does not catch them and I can't = stop=20 them. Does anyone have a solution on how to = get rid of=20 them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17= 6205.241.69.175205.241.71.182205.241.72.177205.241.73.187= 205.241.73.168205.241.68.178205.241.75.170205.241.75.176<= BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.= 43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7= 7.172205.241.81.186205.241.82.184204.95.128.193204.95.129= .174 uniecommerce.com=20 unpitch.comunpromotion.comunplugging.netunmtransactor.com= unmpr.comunmplugger.comunnotice.com=20 unmmarketer.comunitrucking.comunipurchaser.comuniebuying.= comuntrucking.comuntrucker.comuntrafficker.com=20 unseller.comuemrbuying.com=20 uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc= hanger.com - Original Message -=20 From: [EMAIL PROTECTED] href="">mailto:[EMAIL PROTECTED]">Mortgage Connectors = To: [EMAIL PROTECTED] href="">mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 3:12 AM Subject: SPAM: Make the Lenders Compete Over You href=""
Re: [Declude.JunkMail] annoying spammer
On Monday, October 4, 2004, 12:22:30 AM, i360 wrote: iS> We have been swamped with spam from United Email Marketing. iS> Below is a list of IP addresses and domains used to send the crap. iS> Sniffer does not catch them and I can't stop them. ??? I did some checking. We've had rules for most (all but 4) of these domains since about 10/2 on average. Is your rulebase file up to date? _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] annoying spammer
We have been swamped with spam from United Email Marketing.Below is a list of IP addresses and domains used to send the crap.Sniffer does not catch them and I can't stop them.Does anyone have a solution on how to get rid of them?207.43.11.191207.43.11.192207.43.12.187205.241.69.176205.241.69.175205.241.71.182205.241.72.177205.241.73.187205.241.73.168205.241.68.178205.241.75.170205.241.75.176207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.77.172205.241.81.186205.241.82.184204.95.128.193204.95.129.174uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.comunmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexchanger.com- Original Message -=20From: Mortgage Connectors=20To: [EMAIL PROTECTED]Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over You=20Your energies are just mismatched these days. You will gain confidence =in your abilities if you say no to those wanting you to do for them =instead of for yourself. Your energies are just mismatched these days. =Who knew that romance could be so fun? Buy flowers. Write poetry. Order =dessert.You will attract a potential partner. Play your cards right. The big =picture is as crucial as the small one. Consult an expert for help. =Nothing will be as it appears. Be careful.=20Your creative talent must be implemented in your work if you want to =reach a higher level. What you get now is what you wanted all along. =Your energies are just mismatched these days. You will attract a =potential partner. Play your cards right.You find pleasure wherever you look -- and maybe in a few surprising =places as well. You are in a very industrious and creative cycle that =will bring you profits and satisfaction. Avoid opposition for a little =while. As the song says Later on you can decide whether this is the =beginning of a permanent change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D=20=2010.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190Content-Type: text/html;charset="iso-8859-1"Content-Transfer-Encoding: quoted-printablecharset=3Diso-8859-1">We have been swamped with spam from =United Email=20Marketing.Below is a list of IP addresses and =domains used to=20send the crap. Sniffer does not catch them and I can't =stop=20them. Does anyone have a solution on how to =get rid of=20them? size=3D2>207.43.11.191207.43.11.192207.43.12.187205.241.69.17=6205.241.69.175205.241.71.182205.241.72.177205.241.73.187=205.241.73.168205.241.68.178205.241.75.170205.241.75.176<=BR>207.43.11.191207.43.11.192207.43.9.183207.43.8.192207.=43.6.175207.43.4.186205.241.76.183205.241.77.182205.241.7=7.172205.241.81.186205.241.82.184204.95.128.193204.95.129=.174 uniecommerce.com=20unpitch.comunpromotion.comunplugging.netunmtransactor.com=unmpr.comunmplugger.comunnotice.com=20unmmarketer.comunitrucking.comunipurchaser.comuniebuying.=comuntrucking.comuntrucker.comuntrafficker.com=20unseller.comuemrbuying.com=20uemrcommerce.comuemrenterprise.comumrmailclient.comumrexc=hanger.com - Original Message -=20From: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">Mortgage Connectors =To: [EMAIL PROTECTED]href="">mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]> Sent: Monday, October 04, 2004 3:12 AMSubject: SPAM: Make the Lenders Compete Over Youhref="">http://844.umrexchanger.com/106519/[EMAIL PROTECTED].=com">src="">http://6485.umrexchanger.com/[EMAIL PROTECTED]" =border=3D0>=20Your energies are just mismatched these days. =You will=20gain confidence in your abilities if you say no to those wanting you to =do for="">them instead of for yourself. Your energies are just mismatched these =days. Who=20knew that romance could be so fun? Buy flowers. Write poetry. Order=20dessert.You will attract a potential partner. Play your cards =right. The=20big picture is as crucial as the small one. Consult an expert for help. =Nothing=20will be as it appears. Be careful. Your creative talent must be=20implemented in your work if you want to reach a higher level. What you =get now=20is what you wanted all along. Your energies are just mismatched these =days. You=20will attract a potential partner. Play your cards right.You find =pleasure wherever you look -- and maybe in a few surprising places as =well. You=20are in a very industrious and creative cycle that will bring you profits =and=20satisfaction. Avoid opposition for a little while. As the song says =Later on you=20can decide whether this is the beginning of a permanent=20change.aGVpbWlyQHRyb2xsd2ViLmNvbQ=3D=3D href="">http://844.umrexchanger.com/[EMAIL PROTECTED]">=G=20src="">http://5762.umrexchanger.com/189" border=3D0>=2010.1.1.241826112252 --=_NextPart_000_06EA_01C4A99D.138B9190-[This E-mail was scanned for
