Spam from weird IP 118.189.136.119

2003-06-16 Thread Pascal Gloor
Getting SPAM from 118.189.136.119 relayed by rr.com ? this network is not allocated, nor announced. I have been looking everywhere to find if it has been announced (historical bgp update databases, like RIS RIPE / CIDR REPORT / etc..)... I didnt found anything this probably mean rr.com is

Re: Spam from weird IP 118.189.136.119

2003-06-16 Thread Frank Louwers
Received: from [118.189.136.119] by smtp-server1.cfl.rr.com with NNFMP; what's the next/previous line? (The one just above it) Kind Regards, Frank Louwers -- Openminds bvbawww.openminds.be Tweebruggenstraat 16 - 9000 Gent - Belgium

Re: Spam from weird IP 118.189.136.119

2003-06-16 Thread jlewis
On Mon, 16 Jun 2003, Frank Louwers wrote: Received: from [118.189.136.119] by smtp-server1.cfl.rr.com with NNFMP; ^ what's the next/previous line? (The one just above it) ditto. I think you've been fooled by

Re: Spam from weird IP 118.189.136.119

2003-06-16 Thread Richard D G Cox
On Mon, 16 Jun 2003 17:33:11 +0200, Pascal Gloor [EMAIL PROTECTED] wrote: | Getting SPAM from 118.189.136.119 relayed by rr.com ? | | this network is not allocated, nor announced. I have been looking everywhere | to find if it has been announced (historical bgp update databases, like RIS | RIPE

Re: Spam from weird IP 118.189.136.119

2003-06-16 Thread Matthew Sweet
Look carefully at the headers again. I have seen a few like this running around. The IP listed is not actually an IP, but marked as a supposed FQDN. The ones I have seen appear to originate out of brazil for the most part. I do not have a sample handy at the moment, but if someone wants it (for

Re: Spam from weird IP 118.189.136.119

2003-06-16 Thread Richard D G Cox
On Mon, 16 Jun 2003 15:47 (UT), [EMAIL PROTECTED] wrote: | I've never heard of the NNFMP protocol It's the latest spammer exploit the Network Nonsense - Fools Most People exploit. You've not been hit by that one yet, then? On Mon, 16 Jun 2003 17:47 (UT), Wayne Tucker [EMAIL PROTECTED] wrote:

Re: Spam from weird IP 118.189.136.119

2003-06-16 Thread John Brown
PROTECTED] On Behalf Of Richard D G Cox Sent: Monday, June 16, 2003 9:32 PM To: [EMAIL PROTECTED] Subject: Re: Spam from weird IP 118.189.136.119 On Mon, 16 Jun 2003 17:33:11 +0200, Pascal Gloor [EMAIL PROTECTED] wrote: | Getting SPAM from 118.189.136.119 relayed by rr.com

RE: Spam from weird IP 118.189.136.119

2003-06-16 Thread Lars Higham
:[EMAIL PROTECTED] On Behalf Of Richard D G Cox Sent: Monday, June 16, 2003 9:32 PM To: [EMAIL PROTECTED] Subject: Re: Spam from weird IP 118.189.136.119 On Mon, 16 Jun 2003 17:33:11 +0200, Pascal Gloor [EMAIL PROTECTED] wrote: | Getting SPAM from 118.189.136.119 relayed by rr.com