<br><br><div class="gmail_quote">On Tue, Jun 30, 2009 at 6:37 PM, Michael <span dir="ltr"><<a href="mailto:cozzi@cozziconsulting.com">cozzi@cozziconsulting.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Kyle Williams wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
reject <a href="http://0.0.0.0/8:*" target="_blank">0.0.0.0/8:*</a> <<a href="http://0.0.0.0/8:*" target="_blank">http://0.0.0.0/8:*</a>><br>
reject <a href="http://169.254.0.0/16:*" target="_blank">169.254.0.0/16:*</a> <<a href="http://169.254.0.0/16:*" target="_blank">http://169.254.0.0/16:*</a>><br>
reject <a href="http://127.0.0.0/8:*" target="_blank">127.0.0.0/8:*</a> <<a href="http://127.0.0.0/8:*" target="_blank">http://127.0.0.0/8:*</a>><br>
reject <a href="http://192.168.0.0/16:*" target="_blank">192.168.0.0/16:*</a> <<a href="http://192.168.0.0/16:*" target="_blank">http://192.168.0.0/16:*</a>><br>
reject <a href="http://10.0.0.0/8:*" target="_blank">10.0.0.0/8:*</a> <<a href="http://10.0.0.0/8:*" target="_blank">http://10.0.0.0/8:*</a>><br>
reject <a href="http://172.16.0.0/12:*" target="_blank">172.16.0.0/12:*</a> <<a href="http://172.16.0.0/12:*" target="_blank">http://172.16.0.0/12:*</a>><div class="im"><br>
reject 66.109.20.52:*<br>
accept *:80<br>
accept *:443<br>
accept *:43<br>
reject *:*<br>
</div></blockquote>
<br>
Kyle,<br>
<br>
One more question if you would indulge my curiosity. What service was the course of the "spam"?<br><font color="#888888">
<br>
Michael<br>
</font></blockquote></div><br><div>Here's the whole thing. Don't follow the links in this e-mail, it's not worth your time.</div><div><br></div><div><br></div><div>------------------------------------------------------------------------------------------------------------------------------------------------------</div>
<div><span class="Apple-style-span" style="border-collapse: collapse; "><div dir="ltr" lang="en-us" align="left"><font size="2" face="Tahoma"><b>From:</b> WebMaster AFBNetwork [mailto:<a href="mailto:webmaster@afbnetwork.com" target="_blank" style="color: rgb(64, 100, 128); ">webmaster@afbnetwork.com</a>] <br>
<b>Sent:</b> Tuesday, June 30, 2009 10:24 AM<br><b>To:</b> <a href="mailto:abuse@frienster.com" target="_blank" style="color: rgb(64, 100, 128); ">abuse@frienster.com</a>; <a href="mailto:help@friendster.com" target="_blank" style="color: rgb(64, 100, 128); ">help@friendster.com</a>; <a href="mailto:events@friendster.com" target="_blank" style="color: rgb(64, 100, 128); ">events@friendster.com</a><br>
<b>Cc:</b> <a href="mailto:abuse@1and1.fr" target="_blank" style="color: rgb(64, 100, 128); ">abuse@1and1.fr</a>; <a href="mailto:abuse@gmail.com" target="_blank" style="color: rgb(64, 100, 128); ">abuse@gmail.com</a>; <a href="mailto:abuse@galaxyvisions.com" target="_blank" style="color: rgb(64, 100, 128); ">abuse@galaxyvisions.com</a><br>
<b>Subject:</b> Complaint about spammers<br><b>Importance:</b> High<br></font><br></div><div></div><div><div><div><div><strong>From :</strong> <a href="mailto:webmaster@afbnetwork.com" target="_blank" style="color: rgb(64, 100, 128); ">webmaster@afbnetwork.com</a></div>
<div><strong>To :</strong> <a href="mailto:abuse@friendster.com" target="_blank" style="color: rgb(64, 100, 128); ">abuse@friendster.com</a> & <a href="mailto:help@friendster.com" target="_blank" style="color: rgb(64, 100, 128); ">help@friendster.com</a> & <a href="mailto:events@friendster.com" target="_blank" style="color: rgb(64, 100, 128); ">events@friendster.com</a></div>
<div><strong>Copy To :</strong> <a href="mailto:abuse@1an1.fr" target="_blank" style="color: rgb(64, 100, 128); ">abuse@1an1.fr</a> & <a href="mailto:abuse@gmail.com" target="_blank" style="color: rgb(64, 100, 128); ">abuse@gmail.com</a> & <a href="mailto:abuse@galaxyvisions.com" target="_blank" style="color: rgb(64, 100, 128); ">abuse@galaxyvisions.com</a></div>
</div><div> </div><div><strong>Dear Madam, Dear Sir,</strong></div><div> </div><div>I am the webmaster of <a href="http://www.afbnetwork.com/" target="_blank" style="color: rgb(64, 100, 128); ">www.afbnetwork.com</a>. My name is Alain Bippus and I also own the said site hosted by <a href="http://1and1.fr" target="_blank" style="color: rgb(64, 100, 128); ">1and1.fr</a></div>
<div>Due to harassment and spam from some of your members, I would like you to register your following members as "intensive spammers",</div><div>both by e-mail and by registering news in our web site:</div><div>
</div><div><a href="http://profiles.friendster.com/109627291" target="_blank" style="color: rgb(64, 100, 128); ">http://profiles.friendster.com/109627291</a> - NAKED CELEBRITIES<br><a href="http://profiles.friendster.com/109628091" target="_blank" style="color: rgb(64, 100, 128); ">http://profiles.friendster.com/109628091</a> - CELEBRITY SEX<br>
<a href="http://profiles.friendster.com/109629116" target="_blank" style="color: rgb(64, 100, 128); ">http://profiles.friendster.com/109629116</a> - CELEBRITY SEX TAPES<br><a href="http://profiles.friendster.com/109629302" target="_blank" style="color: rgb(64, 100, 128); ">http://profiles.friendster.com/109629302</a> - CELEBRITY FAKE FREE GALLERY<br>
<a href="http://profiles.friendster.com/109629590" target="_blank" style="color: rgb(64, 100, 128); ">http://profiles.friendster.com/109629590</a> - CELEBRITIES EXPOSED</div><div><br>These members of yours are spamming mainly throug email address <a href="mailto:triarmmex@gmail.com" target="_blank" style="color: rgb(64, 100, 128); ">triarmmex@gmail.com</a> </div>
<div>with "erydranient" as Pseudo. (most probably forger email address).</div><div>Their spam actually originate from <strong>IP address : 66.109.20.52</strong></div><div>This IP address is owned by Galaxyvisions Inc - Domain Name : <a href="http://efnet.net" target="_blank" style="color: rgb(64, 100, 128); ">efnet.net</a> - Registrar : Godaddy.com Inc.</div>
<div>All this spamming is of pornographic type, which is not accepted by us as it is clearly written in the public rules of our site.</div><div><div><div><div><div> </div><div><strong><u>COPY OF LOGS</u> :</strong></div><div>
</div><div><strong>1)- Last Access to web site :</strong></div><div> </div><div><strong>66.109.20.52 - - [30/Jun/2009:12:48:03 +0200]</strong> "GET /poster.php HTTP/1.0" 200 15290 <a href="http://afbnetwork.fr" target="_blank" style="color: rgb(64, 100, 128); ">afbnetwork.fr</a> "<a href="http://afbnetwork.fr/poster.php" target="_blank" style="color: rgb(64, 100, 128); ">http://afbnetwork.fr/poster.php</a>" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC" "-"<br>
<strong>66.109.20.52 - - [30/Jun/2009:12:48:12 +0200]</strong> "POST /poster.php HTTP/1.0" 200 15481 <a href="http://afbnetwork.fr" target="_blank" style="color: rgb(64, 100, 128); ">afbnetwork.fr</a> "<a href="http://afbnetwork.fr/poster.php" target="_blank" style="color: rgb(64, 100, 128); ">http://afbnetwork.fr/poster.php</a>" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC" "-"<br>
</div><div><strong>2)- Last Spamming mail :</strong></div><div> </div><div><strong>2009-06-30 12:48:12</strong> u39437102 4AgGp3-1MLasm18N1-0001py |< <strong>REMOTE=66.109.20.52</strong> SCRIPT=/afbnetworkcom/poster.php -- /usr/sbin/sendmail -t -i<br>
<strong>2009-06-30 12:48:12</strong> u39437102 4AgGp3-1MLasm18N1-0001py <= <a href="mailto:S=cgi-mailer-bounces-148125414@kundenserver.de" target="_blank" style="color: rgb(64, 100, 128); ">S=cgi-mailer-bounces-148125414@kundenserver.de</a> SZ=2108 D=0 SID=148125414<br>
<strong>2009-06-30 12:48:12</strong> u39437102 4AgGp3-1MLasm18N1-0001py => <a href="mailto:webmaster@afbnetwork.com" target="_blank" style="color: rgb(64, 100, 128); ">webmaster@afbnetwork.com</a> <a href="http://msmtp.kundenserver.de" target="_blank" style="color: rgb(64, 100, 128); ">msmtp.kundenserver.de</a>[172.19.35.7] 250 Message 0MKv1o-1MLasm1cJb-000cNe accepted by<a href="http://mreu1.kundenserver.de" target="_blank" style="color: rgb(64, 100, 128); ">mreu1.kundenserver.de</a></div>
<div> </div><div>Please note that the .php page of our news service is protected by program against news messages containing the word "frienster" in insensitive case,</div><div>but despite this, those news messages still succeed to reach in our base. It means that the spammers must be using some robot or program in order to short-circuit the web site control.</div>
<div> </div><div>So, we would like you to investigate the matter and take appropriate action.</div><div> </div><div>Thanks in advance.</div><div>I am at your disposal at Phone: 0033 (4) 67.23.83.70</div><div>Your faithfully,</div>
<div>Alain Bippus,</div><div><a href="mailto:webmaster@afbnetwork.com" target="_blank" style="color: rgb(64, 100, 128); ">webmaster@afbnetwork.com</a></div><div><span class="Apple-style-span" style="border-collapse: separate; "><div>
------------------------------------------------------------------------------------------------------------------------------------------------------</div><div><br></div><div>That's all they had to say. I have not heard back in regards to my reply.</div>
<div><br></div><div>- Kyle</div><div><span class="Apple-style-span" style="border-collapse: collapse; "></span></div></span></div></div></div></div></div></div></div></span></div>