From: dritz@execpc.REMOVE.TO.REPLY.com (David Ritz) Subject: Re: Spam report: Bahnhof.se, 24 Jan 97 (211 posts, BI = 940.58) Date: 1997/01/25 Message-ID: references: <5c5nd5$mm@engnews1.Eng.Sun.COM> <5c8bd9$fo6@engnews1.Eng.Sun.COM> <5cb1s5$4t@engnews1.Eng.Sun.COM> content-type: text/plain; charset=us-ascii organization: none at all mime-version: 1.0 reply-to: David Ritz newsgroups: news.admin.net-abuse.misc,news.admin.net-abuse.usenet In article <5cb1s5$4t@engnews1.Eng.Sun.COM>, falk@peregrine.eng.sun.com (Ed Falk) wrote: > Parameters of the search are: > > Path: indicates source was bahnhof.se > 215 sample groups with "binaries", "sex", "picture", "women" > or "sports" in the title, plus selected alt, rec and soc groups. > Crossposted to 6 or more newsgroups, or from selected senders. > Posted since my last report. > > Notes: > I received mail from an admin at Bahnhof stating that the > offending account had been tracked down and disabled. Most of > the spams reported today were received after that point, > indicating that more than one account was involved. > > Full headers mailed to postmaster@bahnhof.se > Full headers available on request. > > Only a small subset of usenet (215 groups) is sampled. Only > articles that haven't been cancelled yet are counted. Actual > spam may be much greater. > > Only crossposted articles are listed. Multi-posted articles (EMP) > are ignored. I have not written anything to detect these, but > they seem to be the minority of inappropriately-posted spam. > > Some posts may be forgeries intended to look like they came > from bahnhof.se [merciful snip] It looks like all of the account were tracked down. I only found three posts dated 25 Jan 97. These were posted through UU.NET: http://altavista.digital.com/cgi-bin/query?pg=aq&what=news&fmt=d&q=207.70.21 4.2%2Fclients%26%21%28spam%7C%22Re%3A%22%29&r=207.70.214.2%2Fclients&d0=25%2 FJan%2F97&d1=25%2FJan%2F97&text=yes Word count: 207 70 214 2 clients: about 68 Documents 1-30 of 34 matching the query, best matches first. ---------->> S C R E A M <<------------------------- 25 Jan 97 - alt.binaries.pictures.erotica.teen SCREAMERS@XXX.XXX (SCREAMERS) ---------->> S C R E A M <<------------------------- 25 Jan 97 - alt.sex.fat postmaster@netzilla.net (postmaster@netzilla.net) ---------------------------------------------------------------------- Path: gotham-globe.newsops.execpc.com!newspump.sol.net!mindspring!news.bbnplanet.c om!cpk-news-hub1.bbnplanet.com!news.sprintlink.net!news-peer.sprintlink.net! uunet!SCREAMERS From: SCREAMERS@XXX.XXX (SCREAMERS) Newsgroups: alt.binaries.pictures.erotica.teen,alt.binaries.pictures.erotica.teen.d,alt. binaries.pictures.erotica.teen.female,alt.binaries.pictures.erotica.teen.fem ale.fuck,alt.binaries.pictures.erotica.teen.female.masturbation,alt.binaries. pictures.erotica.teen.female.orgasm,alt.binaries.pictures.erotica.teen.fuck, alt.binaries.pictures.erotica.teen.male,alt.binaries.pictures.erotica.teens, alt.binaries.pictures.erotica.terry.agar,alt.binaries.pictures.erotica.thigh- highs,alt.binaries.pictures.erotica.torture,alt.binaries.pictures.erotica.tr ansvestites,alt.binaries.pictures.erotica.uncut,alt.binaries.pictures.erotic a.uniform,alt.binaries.pictures.erotica.uniforms,alt.binaries.pictures.eroti ca.unix,alt.binaries.pictures.erotica.urine,alt.binaries.pictures.erotica.vo yeurism,alt.binaries.pictures.erotica.young,alt.binaries.pictures.erotica.zi g.and.zag,alt.binaries.pictures.erotica;,alt.binaries.pictures.erotics,alt.b inaries.pictures.erotics.breasts,alt.binaries.pictures.fetish.urine Subject: ---------->> S C R E A M <<------------------------- Date: Sat, 25 Jan 1997 11:06:35 -0600 Organization: SCREAMERS Lines: 19 Message-ID: NNTP-Posting-Host: cust102.max6.minneapolis.mn.ms.uu.net Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Newsreader: Yet Another NewsWatcher 2.4.0 alt.binaries.pictures.erotica.teen:156894 alt.binaries.pictures.erotica.teen.d:29064 alt.binaries.pictures.erotica.teen.female:256700 alt.binaries.pictures.erotica.teen.female.masturbation:28560 alt.binaries.pictures.erotica.teen.female.orgasm:11007 alt.binaries.pictures.erotica.teen.fuck:35906 alt.binaries.pictures.erotica.teen.male:113192 alt.binaries.pictures.erotica.teens:14857 alt.binaries.pictures.erotica.terry.agar:4613 alt.binaries.pictures.erotica.torture:3408 alt.binaries.pictures.erotica.transvestites:27334 alt.binaries.pictures.erotica.uncut:15641 alt.binaries.pictures.erotica.uniform:16847 alt.binaries.pictures.erotica.urine:35802 alt.binaries.pictures.erotica.voyeurism:93612 alt.binaries.pictures.erotica.young:54758 alt.binaries.pictures.erotica.zig.and.zag:9013 alt.binaries.pictures.erotics.breasts:25112 IS WHAT YOU WILL BE DOING, AFTER YOU VIEW THE MOT INTENSE SITE ON THE WEB!!!!!!!!!!!!!!!! B I Z A R R E A N D U L T I M A T E P E R V E R S I O N ==================================== http://207.70.214.2/clients/biz.html ==================================== ONLY THE SICK AND TWISTED NEED APPLY!!!! :-/ ==================================== http://207.70.214.2/clients/biz.html ==================================== If you dare!!! ---------------------------------------------------------------------- I sent a mini-report to spam-complaint@uu.net, noting that the date stamp on the article was later than the message I was sending out, by at least ten hours. At this time the flood from UU.NET has begun: == http://altavista.digital.com/cgi-bin/query?pg=aq&what=news&fmt=d&q=207.70.21 4.2%2Fclients%26%21%28spam%7C%22Re%3A%22%29&r=207.70.214.2%2Fclients&d0=26%2 FJan%2F97&d1=&text=yes Word count: 207 70 214 2 clients: about 2000 Documents 1-30 of about 1000 matching the query, best matches first. A Smorgasbord Of Sex!! 26 Jan 97 - alt.binaries.pictures.erotic.senior-citizens Sex@Buffet.com (Sex Buffet) FOR THE SICK AND TWISTED ONLY!! 26 Jan 97 - alt.binaries.pictures.erotica.female.toys Sex@Buffet.com (Sex Buffet) WARNING! EXTREME HARDCORE!! 26 Jan 97 - alt.binaries.pictures.erotica.hornyrob Sex@Buffet.com (Sex Buffet) PERVERSION BEYOND IMAGINATION!! 26 Jan 97 - alt.binaries.pictures.erotica.tasteless Sex@Buffet.com (Sex Buffet) NIGHTMARISH PERVERSION!! 26 Jan 97 - alt.binaries.pictures.sex Sex@Buffet.com (Sex Buffet) EVERYTHING FROM ANAL TO URINE!!! 26 Jan 97 - alt.sex.balls Sex@Buffet.com (Sex Buffet) It's All You Can Eat Sex!! 26 Jan 97 - alt.sex.exhibitionism Sex@Buffet.com (Sex Buffet) == Congratulations to BAHNHOF.SE. Good luck to UU.NET. [They sure haven't done too well at identifying the *max6.minneapolis.mn.ms.uu.net posting-hosts being used in this round of spam.] -- David Ritz