Security Incidents mailing list archives
Spoofed SPAM relayed using my email address.
From: Dennis DeDonatis <dennisd () PARAGONTECH COM>
Date: Tue, 22 Aug 2000 15:33:03 -0400
I received the following 3 bounces today. I did not generate the original emails.
Have any of you on the incidents email list had this happen?
I assume I was randomly chosen as a valid email from harvested
address and then the spammer's email routed through "Hallym
University" in Korea.
I haven't had any flaming mail come to me from the people that
were spammed, as I had expected, which is a good thing, I guess.
:)
Is there ANY way to protect against this other than not using my
email address anywhere? :)
I can't think of anyone I would have annoyed enough to do this on
purpose.
Thanks for any help you can give. :)
Dennis DeDonatis
+1 810-756-9100 x1216
Received: from libs1.hallym.ac.kr - 210.115.237.8 by msn.com with Microsoft SMTPSVC;
Tue, 22 Aug 2000 00:37:09 -0700
Received: by libs1.hallym.ac.kr id QAA0000019226; Tue, 22 Aug 2000 16:31:46 +0900 (KST)
From: <dennisd () paragontech com>
Message-ID: <000063261e68$00001534$00000dd1@>
To: <dessert () olympic net">">
Subject: Super Low Car Pricing, Get your quote now,..,.
Date: Tue, 22 Aug 2000 01:28:28 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
Errors-To: af89d0vg7a908d0af () hotpop com
Reply-To: desselle () sonic net
X-Mailer: Franklin Webmailer 1.0
Return-Path: dennisd () paragontech com
DON'T STRESS... over buying your next car.
Use the speed and power of the Internet as
your portal to painless low price quotes.
o Save Time
o Save Money
o Great Price
o Choose from all makes and models
Best of all, IT'S A FREE SERVICE...
And it's as easy as clicking the link below:
HREF=3D"http://ad.doubleclick.net/clk;555195;3452810;i?http://rd.yahoo.=com/geohome/g/*http://00032100360014.com/@www.geocities.com/Colosseum/Fiel=d/9245/auto5657.html/?http://rd.yahoo.com/M=3D77122.826220.2557699.389576/=S=3D2716149:NP/A=3D359579/?http://www.geocities.com/Colosseum/Field/9245/a=
toClick Here
HREF=3D"mailto:asindia () eudoramail com"To Be Removed
*** Next Message:
Return-Path: <dennisd () paragontech com>
Received: from libs1.hallym.ac.kr (sourcenat1.bigmailbox.com
[209.132.220.250])
by mailrecv5.bigmailbox.com (8.10.0/8.10.0) with ESMTP id
e7M7daY11062
for <lana () cms-net com>; Tue, 22 Aug 2000 00:39:41 -0700
Received: by libs1.hallym.ac.kr id QAA0000019226; Tue, 22 Aug
2000 16:31:46 +0900 (KST)
From: <dennisd () paragontech com>
Message-ID: <000063261e68$00001534$00000dd1@>
To: <dessert () olympic net">">
Subject: Super Low Car Pricing, Get your quote now,..,.
Date: Tue, 22 Aug 2000 01:28:28 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
Errors-To: af89d0vg7a908d0af () hotpop com
Reply-To: desselle () sonic net
X-Mailer: Franklin Webmailer 1.0
DON'T STRESS... over buying your next car.
Use the speed and power of the Internet as
your portal to painless low price quotes.
o Save Time
o Save Money
o Great Price
o Choose from all makes and models
Best of all, IT'S A FREE SERVICE...
And it's as easy as clicking the link below:
HREF=3D"http://ad.doubleclick.net/clk;555195;3452810;i?http://rd.
yahoo.=com/geohome/g/*http://00032100360014.com/@www.geoci
ties.com/Colosseum/Fiel=d/9245/auto5657.html/?http://rd.yahoo.co
m/M=3D77122.826220.2557699.389576/=S=3D2716149:NP/A=3D3
59579/?http://www.geocities.com/Colosseum/Field/9245/a=u
toClick Here
HREF=3D"mailto:asindia () eudoramail com"To Be Removed
*** Next Message:
Return-Path: <>
Received: from libs1.hallym.ac.kr ([210.115.237.8])
by paragon3.paragontech.com (Post.Office MTA v3.5.3
release 223
ID# 0-53858U100L100S0V35) with SMTP id com
for <dennisd () paragontech com>; Tue, 22 Aug 2000
03:39:54 -0400
Received: by libs1.hallym.ac.kr id QAA0000020845; Tue, 22 Aug
2000 16:33:57 +0900 (KST)
Date: Tue, 22 Aug 2000 16:33:57 +0900 (KST)
From: Mail Delivery Subsystem <MAILER-
DAEMON () libs1 hallym ac kr>
Subject: Returned mail: User unknown
Message-Id: <200008220733.QAA0000020845 () libs1 hallym ac kr>
To: <dennisd () paragontech com>
Auto-Submitted: auto-generated (failure)
X-PMFLAGS: 33554560 0 1 P0A1D0.CNM
The original message was received at Tue, 22 Aug 2000 16:31:46
+0900
(KST) from 1Cust177.tnt1.augusta.ga.da.uu.net [63.10.55.177]
----- The following addresses had permanent fatal errors -----
<dustinj () worldnet att net> <l_10 () mo net>
<dfbooth01 () worldnet att net>
<jdunphy () worldnet att net> <glewis () clubi net>
<samad () clubi net>
----- Transcript of session follows -----
553 <dessert () olympic net">... Unbalanced '"'
553 <dessert () olympic net">... Unbalanced '<'
553 <dessert () olympic net">... Unbalanced '"'
553 <dessert () olympic net">... Unbalanced '<'
553 desselle () sonic net"... Unbalanced '"'
553 desselle () sonic net"... Unbalanced '"'
... while talking to gateway2.worldnet.att.net.:
RCPT To:<jdunphy () worldnet att net>
<<< 550 Invalid recipient: <jdunphy () worldnet att net> 550 <jdunphy () worldnet att net>... User unknown
RCPT To:<dfbooth01 () worldnet att net>
<<< 550 Invalid recipient: <dfbooth01 () worldnet att net> 550 <dfbooth01 () worldnet att net>... User unknown
RCPT To:<dustinj () worldnet att net>
<<< 550 Invalid recipient: <dustinj () worldnet att net> 550 <dustinj () worldnet att net>... User unknown 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 desselle () sonic net"... Unbalanced '"' 553 desselle () sonic net"... Unbalanced '"' ... while talking to mail.mo.net.:
RCPT To:<l_10 () mo net>
<<< 550 <l_10 () mo net>... User unknown 550 <l_10 () mo net>... User unknown 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 desselle () sonic net"... Unbalanced '"' 553 desselle () sonic net"... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 desselle () sonic net"... Unbalanced '"' 553 desselle () sonic net"... Unbalanced '"' ... while talking to news.clubi.net.:
RCPT To:<samad () clubi net>
<<< 550 5.1.1 <samad () clubi net>... User unknown 550 <samad () clubi net>... User unknown
RCPT To:<glewis () clubi net>
<<< 550 5.1.1 <glewis () clubi net>... User unknown 550 <glewis () clubi net>... User unknown ----- Original message follows ----- Return-Path: <dennisd () paragontech com> Received: by libs1.hallym.ac.kr id QAA0000019226; Tue, 22 Aug 2000 16:31:46 +0900 (KST) From: <dennisd () paragontech com> Message-ID: <000063261e68$00001534$00000dd1@> To: <dessert () olympic net">"> Subject: Super Low Car Pricing, Get your quote now,..,. Date: Tue, 22 Aug 2000 01:28:28 -0400 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Errors-To: af89d0vg7a908d0af () hotpop com Reply-To: desselle () sonic net"" X-Mailer: Franklin Webmailer 1.0 <HTML> <BODY> <FONT face=3D"MS Sans Serif"> <FONT size=3D2> <FONT color=3D"#000000"> DON'T STRESS... over buying your next car. <BR> Use the speed and power of the Internet as <BR> your portal to painless low price quotes. <BR> <BR> o Save Time<BR> o Save Money<BR> o Great Price<BR> o Choose from all makes and models<BR> <BR> Best of all, IT'S A FREE SERVICE...<BR> <BR> And it's as easy as clicking the link below:<BR> <BR> <a HREF=3D"http://ad.doubleclick.net/clk;555195;3452810;i?http://rd. yahoo .= com/geohome/g/*http://00032100360014.com/@www.geocities.com /Colosseum/ Fiel= d/9245/auto5657.html/?http://rd.yahoo.com/M=3D77122.826220.25 57699.389 576/= S=3D2716149:NP/A=3D359579/?http://www.geocities.com/Colosse um/Field/92 45/a= uto5657.html">Click Here</a><BR> <BR> <BR> <BR> <A HREF=3D"mailto:asindia () eudoramail com">To Be Removed</a><BR> <BR> </FONT></FONT></BODY></HTML> *** End of messages
Current thread:
- Spoofed SPAM relayed using my email address. Dennis DeDonatis (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Vince Vielhaber (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Mardy Hutchinson (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Bjorn Djupvik (Aug 23)
- Message not available
- Re: Spoofed SPAM relayed using my email address. Dennis DeDonatis (Aug 23)
- <Possible follow-ups>
- Re: Spoofed SPAM relayed using my email address. Andrea Adams (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Danyial Burnett (Aug 23)