Sample Spam
The following spam was heavily obfuscated. The message starts with
random phrases probably culled from other netnews articles. The
actual body of the message was mime-encoded (this has been translated.)
Spam advertises a web site at 3485631137, which translates to
207.194.130.161 -- aka "Sneeky Peeks"; hosted by bctel.net.
Path: su-news-hub1.bbnplanet.com!news.gtei.net!logbridge.uoregon.edu!
news-out.uswest.net!news.uswest.net!not-for-mail
Mime-Version: 1.0
Newsgroups: alt.binaries.nude.celebrities
Organization: iwwylyzr337om
Subject: Erotic photo of amateur female
From: Aushanique <aushanique@cs.umd.edu>
Message-Id: <rt80tn.c04.41257@qtowpdsnno.com>
Content-Type: multipart/mixed; boundary="----------=_936651289-19210-7"
Lines: 61
Date: Mon, 06 Sep 1999 18:11:03 GMT
NNTP-Posting-Host: 207.109.199.129
X-Trace: news.uswest.net 936651285 207.109.199.129 (Mon, 06 Sep 1999
15:54:45 CDT)
NNTP-Posting-Date: Mon, 06 Sep 1999 15:54:45 CDT
This is a multi-part message in MIME format...
------------=_936651289-19210-7
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Length: 793
political mudslinging.
to build for yourself using new parts. A so-called Natural Trumpet is
o In general, avoid meta-discussions about soc.culture.german.
Copyright 1997, all rights reserved.
You can unlatch this mechanism yourself by opening the RS-232
posting an article. If you are looking for an occasional babysitter in
be part of the regular Posting Team.
Disposable diapers, especially the waist/hip area where the plastic is
offer IRC connections.
is a remake of Manfred Mann's song. (See also the Police's remake.)
Good luck.
can be partitioned systematically into a 6x6x6 "cube" to implement what
on having plain .plan files.
Alan Hutchinson, "Algorithmic Learning", Oxford University Press,
done if it is translated as "starter sponge" or something like.
------------=_936651289-19210-7
Content-Type: text/html
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Length: 1705
<!-- idf3scczz1ivxhhvh8zkfn6rfnjp6tfo6vsz74y76h23yjzfsyz8l6z1ujq1c6pi2ihanghtxjxv3wavva4gh3icm9dzf3hilzs8f91dty8wvjsqu -->
<!-- 7b0pony1me43wp3oxjyzwrx4otogjidruehi1gjnuorrdugbeeaa68fu13bllpdf3ux4ahr55jwjeduss52ydhsfl416temw8k0i1so7ckqqykjqqmo34hjplkvezib82br34fbg0 -->
<body atag="#1vi" onLoad="window.open('http://3485631137/')"><!-- 7ymqocddghuz6gk2vkk6 -->
<img atag="#n7z97amn6jdie9" src="http://206.58.214.73/count/2418401.53.1">
<!-- mijqmy13y2axp1l1eyhvth19235mobeaty0gx2jw4tttuev8dd47v5hx9mjyxy8rx97ubqqgkjafy5ocjsjey1b8nv6luecrokmzbcgwwqbvwz8frrtps5xg1 -->
------------=_936651289-19210-7--
To report spam, contact abuse@uswest.net
A complete history may also be available.
General notes:
- Only a small subset of usenet (261 groups) was sampled. Only
articles that hadn't been cancelled yet were counted. Actual
spam may have been much greater.
- Heuristics that detect single-posted articles are, by their very
nature, somewhat shaky. Innocent articles may be tagged as spam
because they share certain characteristics or keywords with
actual spam. In particular, a posted spam complaint that includes
the spam in its entirety will very often be identified as spam.
- Some posts may be forgeries intended to look like they came
from Uswest.net.
- The first entry in the history file is not used to compute peak
or average spam counts, as this entry covers an unknown number of days.
This may cause an apparent disreprency between spam totals and spam
averages.
Return to top |
Return to spam summaries |
complete history
The opinions expressed on this page are solely those of Ed Falk and do
not necessarily represent those of any other organization, (although I
hope they do). I wish to thank Rahul.net for hosting this web page.
This page maintained by
Ed Falk