[ahimsa-tech] Andorra & OVL [Fwd: Spamvertisement Complaint]
jeff moe
jeff at indymedia.org
Fri Dec 8 12:14:13 PST 2006
Hey, looks like Andorra & Ovl have been getting spammed and people are sending
out mails linking to it or something.
Can someone who can admin these sites remove the spam?
Thanks,
-Jeff
P.S. The downtime for 30 minutes or so today was scheduled by FRII, but I
didn't see the message until after I heard about the downtime. I'm a bit behind
on some of my email...
-------- Original Message --------
Subject: Spamvertisement Complaint
Date: Mon, 4 Dec 2006 18:37:18 -0700 (MST)
From: FRII NOC <noc at frii.com>
Hello Jeff,
I'm not totally sure what to make of this complaint. If you could, please take
a look at it and let us know what you think. This is the third report that
we've received on this issue. in the last few days.
Thank you,
Jesse Epstein
--
Network Operations Center
Front Range Internet, Inc.
noc at frii.com - 866-FRII-NOC
Return-Path: <abuse at frii.com>
>X-Original-To: billing at frii.com
>Delivered-To: billing at frii.com
>Received: by deimos01.frii.com (Postfix, from userid 15378)
> id A492E239EEB; Mon, 4 Dec 2006 18:09:25 -0700 (MST)
>X-Original-To: abuse at frii.net
>Delivered-To: abuse at frii.net
>Received: from ma103.mailarmory.com (ma103.mailarmory.com [216.17.128.131])
> by deimos01.frii.com (Postfix) with ESMTP id 953E4239EB9
> for <abuse at frii.net>; Mon, 4 Dec 2006 18:09:25 -0700 (MST)
>Received: from filter (localhost.frii.com [127.0.0.1])
> by localhost.mailarmory.com (MailArmory) with ESMTP id 732E2E1686
> for <abuse at frii.net>; Mon, 4 Dec 2006 18:09:25 -0700 (MST)
>Received: from sc-smtp1-bulkmx.soma.ironport.com (sc-smtp1-bulkmx.soma.ironport.com [204.15.82.123])
> by ma103.mailarmory.com (MailArmory) with ESMTP id 6301AE164C
> for <abuse at frii.net>; Mon, 4 Dec 2006 18:09:23 -0700 (MST)
>Received: from sc-app4.spamcop.net ([204.15.82.23])
> by sc-smtp1-bulkmx.soma.ironport.com with SMTP; 04 Dec 2006 17:09:22 -0800
>Received: from [66.82.9.89] by spamcop.net
> with HTTP; Tue, 05 Dec 2006 01:09:22 GMT
>From: Karl Baldwin <2048960278 at reports.spamcop.net>
>To: abuse at frii.net
>Subject: [SpamCop (http://ovl.indymedia.org/print.php?id=14175) id:2048960278]Data posted to form 1 of http://mountain-lodging.c..
>Precedence: list
>Message-ID: <rid_2048960278 at msgid.spamcop.net>
>Date: Tue, 5 Dec 2006 00:31:27 +0000
>X-SpamCop-sourceip: 198.65.247.175
>X-Mailer: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 1.1.4322)
> via http://www.spamcop.net/ v1.603
>X-Mailarmory-Spam: yes
>Mailarmory-Level: ******
>Mailarmory-Category: spam (6)
>Mailarmory-Filter-Date: Mon, 04 Dec 2006 18:09:25 -0700 (MST)
>Mailarmory-Details: U2FsdGVkX1/KZwkK3ksJPKTyyiemv4FKqnELvjpFvZZzivj+PFLwmXRSHjAq6JNz0UtSRE57Hx/NvoIAxZPMEg==
>
>[ SpamCop V1.603 ]
>This message is brief for your comfort. Please use links below for details.
>
>Spamvertised web site: http://andorra.indymedia.org/news/2006/12/4820.php
>http://www.spamcop.net/w3m?i=z2048960270ze0634ef6e311e4564b5b85ef358c3364z
>[ Additional links on andorra.indymedia.org: ]
>http://andorra.indymedia.org/news/2006/12/4822.php]buy
>http://andorra.indymedia.org/news/2006/12/4817.php#viagra
>http://andorra.indymedia.org/news/2006/12/4820.php
>http://andorra.indymedia.org/news/2006/12/4817.php
>http://andorra.indymedia.org/news/2006/12/4819.php#calls
>http://andorra.indymedia.org/news/2006/12/4820.php#ultram
>http://andorra.indymedia.org/news/2006/12/4819.php
>http://andorra.indymedia.org/news/2006/12/4822.php
>http://andorra.indymedia.org/news/2006/12/4818.php
>http://andorra.indymedia.org/news/2006/12/4819.php]buy
>http://andorra.indymedia.org/news/2006/12/4818.php#phentermine
>http://andorra.indymedia.org/news/2006/12/4821.php#celexa
>http://andorra.indymedia.org/news/2006/12/4820.php]buy
>http://andorra.indymedia.org/news/2006/12/4821.php]celexa[/url
>http://andorra.indymedia.org/news/2006/12/4818.php]buy
>http://andorra.indymedia.org/news/2006/12/4821.php
>http://andorra.indymedia.org/news/2006/12/4822.php#carisoprodol
>http://andorra.indymedia.org/news/2006/12/4817.php]buy
>http://andorra.indymedia.org/news/2006/12/4820.php is 216.17.145.77; Tue, 05 Dec 2006 01:05:22 GMT
>
>Spamvertised web site: http://ovl.indymedia.org/print.php?id=14175
>http://www.spamcop.net/w3m?i=z2048960278z214dd8a6675b1e5aa23543d5c56ac31fz
>[ Additional links on ovl.indymedia.org: ]
>http://ovl.indymedia.org/print.php?id=14175]tadalafil[/url
>http://ovl.indymedia.org/print.php?id=14175
>http://ovl.indymedia.org/print.php?id=14176]buy
>http://ovl.indymedia.org/print.php?id=14176#meridia
>http://ovl.indymedia.org/print.php?id=14177
>http://ovl.indymedia.org/print.php?id=14177]wellbutrin[/url
>http://ovl.indymedia.org/print.php?id=14177#wellbutrin
>http://ovl.indymedia.org/print.php?id=14175#tadalafil
>http://ovl.indymedia.org/print.php?id=14176
>http://ovl.indymedia.org/print.php?id=14175 is 216.17.145.83; Tue, 05 Dec 2006 01:05:20 GMT
>
>[ Additional comments from recipient ]
>> This jerk is spam bombing me though my website's feedback form. Can you cut him off??
>[ Offending message ]
>Return-Path: <webadmin at mountain-lodging.com>
>Received: from n118.sc0.cp.net (64.97.160.108) by n164.sc0.cp.net (7.2.066)
> id 452ED1F500B291FB for x; Tue, 5 Dec 2006 00:31:28 +0000
>Received: from mountain-lodging.com (198.65.247.175) by n118.sc0.cp.net (7.2.069.1)
> id 4574A9490002C354 for x; Tue, 5 Dec 2006 00:31:27 +0000
>Received: from mountain-lodging.com (localhost [127.0.0.1])
> by mountain-lodging.com (8.13.6.20060614/8.13.1) with ESMTP id kB50VQij094920
> for <x>; Tue, 5 Dec 2006 00:31:26 GMT
>Received: (from webadmin at localhost)
> by mountain-lodging.com (8.13.6.20060614/8.13.1/Submit) id kB50VQtB094919;
> Tue, 5 Dec 2006 00:31:26 GMT
>Date: Tue, 5 Dec 2006 00:31:26 GMT
>From: Web Admin <webadmin at mountain-lodging.com>
>Message-Id: <2006___________________4919 at mountain-lodging.com>
>To: x
>Content-Transfer-Encoding: 8bit
>Content-Type: Text/plain; charset=windows-1252
>Subject: Data posted to form 1 of http://mountain-lodging.com/feedback.htm
>MIME-Version: 1.0
>
>*******************************************************************************
>Category:
>Name: paxil
>Title: paxil
>Company:
>Address:
>Telephone:
>FAX:
>Email: aeaiolias at mail.net
>Remote Name: anjut.info
>
>Comments:
>
>eaikaoa http://andorra.indymedia.org/news/2006/12/4817.php#viagra
>http://andorra.indymedia.org/news/2006/12/4818.php#phentermine
>http://andorra.indymedia.org/news/2006/12/4819.php#calls
>http://andorra.indymedia.org/news/2006/12/4820.php#ultram
>http://andorra.indymedia.org/news/2006/12/4821.php#celexa
>http://andorra.indymedia.org/news/2006/12/4822.php#carisoprodol
>http://sf.indymedia.org/mail.php?id=1733220#paxil
>http://sf.indymedia.org/print.php?id=1733221#acyclovir
>http://sf.indymedia.org/print.php?id=1733222#fioricet
>http://ovl.indymedia.org/print.php?id=14175#tadalafil
>http://ovl.indymedia.org/print.php?id=14176#meridia
>http://ovl.indymedia.org/print.php?id=14177#wellbutrin
>http://houston.indymedia.org/print.php?id=54764#soma
>http://houston.indymedia.org/print.php?id=54765#tramadol
>http://houston.indymedia.org/print.php?id=54766#zoloft
><a href=http://andorra.indymedia.org/news/2006/12/4817.php>buy viagra</a> <a href=http://andorra.indymedia.org/news/2006/12/4818.php>buy phentermine</a> <a href=http://andorra.indymedia.org/news/2006/12/4819.php>buy calls</a> <a href=http://andorra.indymedia.org/news/2006/12/4820.php>buy ultram</a> <a href=http://andorra.indymedia.org/news/2006/12/4821.php>celexa</a>
><a href=http://andorra.indymedia.org/news/2006/12/4822.php>buy carisoprodol</a> <a href=http://sf.indymedia.org/mail.php?id=1733220>buy paxil</a> <a href=http://sf.indymedia.org/print.php?id=1733221>buy acyclovir</a> <a href=http://sf.indymedia.org/print.php?id=1733222>buy fioricet</a> <a href=http://ovl.indymedia.org/print.php?id=14175>tadalafil</a>
><a href=http://ovl.indymedia.org/print.php?id=14176>buy meridia</a> <a href=http://ovl.indymedia.org/print.php?id=14177>wellbutrin</a>
><a href=http://houston.indymedia.org/print.php?id=54764>buy soma</a> <a href=http://houston.indymedia.org/print.php?id=54765>buy tramadol</a> <a href=http://houston.indymedia.org/print.php?id=54766>zoloft</a>
>[url=http://andorra.indymedia.org/news/2006/12/4817.php]buy viagra[/url] [url=http://andorra.indymedia.org/news/2006/12/4818.php]buy phentermine[/url] [url=http://andorra.indymedia.org/news/2006/12/4819.php]buy calls[/url] [url=http://andorra.indymedia.org/news/2006/12/4820.php]buy ultram[/url] [url=http://andorra.indymedia.org/news/2006/12/4821.php]celexa[/url]
>[url=http://andorra.indymedia.org/news/2006/12/4822.php]buy carisoprodol[/url] [url=http://sf.indymedia.org/mail.php?id=1733220]buy paxil[/url] [url=http://sf.indymedia.org/print.php?id=1733221]buy acyclovir[/url] [url=http://sf.indymedia.org/print.php?id=1733222]buy fioricet[/url] [url=http://ovl.indymedia.org/print.php?id=14175]tadalafil[/url]
>[url=http://ovl.indymedia.org/print.php?id=14176]buy meridia[/url] [url=http://ovl.indymedia.org/print.php?id=14177]wellbutrin[/url]
>[url=http://houston.indymedia.org/print.php?id=54764]buy soma[/url] [url=http://houston.indymedia.org/print.php?id=54765]buy tramadol[/url] [url=http://houston.indymedia.org/print.php?id=54766]zoloft[/url]
>
>
[FRII Reference: FRIIref#903802 - 243318]
Monitoring FRII's network 24/7/365.
More information about the ahimsa-tech
mailing list