Security Incidents mailing list archives
Spoofed SPAM relayed using my email address.
From: Dennis DeDonatis <dennisd () PARAGONTECH COM>
Date: Tue, 22 Aug 2000 15:33:03 -0400
I received the following 3 bounces today. I did not generate the original emails. Have any of you on the incidents email list had this happen? I assume I was randomly chosen as a valid email from harvested address and then the spammer's email routed through "Hallym University" in Korea. I haven't had any flaming mail come to me from the people that were spammed, as I had expected, which is a good thing, I guess. :) Is there ANY way to protect against this other than not using my email address anywhere? :) I can't think of anyone I would have annoyed enough to do this on purpose. Thanks for any help you can give. :) Dennis DeDonatis +1 810-756-9100 x1216 Received: from libs1.hallym.ac.kr - 210.115.237.8 by msn.com with Microsoft SMTPSVC; Tue, 22 Aug 2000 00:37:09 -0700 Received: by libs1.hallym.ac.kr id QAA0000019226; Tue, 22 Aug 2000 16:31:46 +0900 (KST) From: <dennisd () paragontech com> Message-ID: <000063261e68$00001534$00000dd1@> To: <dessert () olympic net">"> Subject: Super Low Car Pricing, Get your quote now,..,. Date: Tue, 22 Aug 2000 01:28:28 -0400 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Errors-To: af89d0vg7a908d0af () hotpop com Reply-To: desselle () sonic net X-Mailer: Franklin Webmailer 1.0 Return-Path: dennisd () paragontech com DON'T STRESS... over buying your next car. Use the speed and power of the Internet as your portal to painless low price quotes. o Save Time o Save Money o Great Price o Choose from all makes and models Best of all, IT'S A FREE SERVICE... And it's as easy as clicking the link below: HREF=3D"http://ad.doubleclick.net/clk;555195;3452810;i?http://rd.yahoo.=com/geohome/g/*http://00032100360014.com/@www.geocities.com/Colosseum/Fiel=d/9245/auto5657.html/?http://rd.yahoo.com/M=3D77122.826220.2557699.389576/=S=3D2716149:NP/A=3D359579/?http://www.geocities.com/Colosseum/Field/9245/a= toClick Here HREF=3D"mailto:asindia () eudoramail com"To Be Removed *** Next Message: Return-Path: <dennisd () paragontech com> Received: from libs1.hallym.ac.kr (sourcenat1.bigmailbox.com [209.132.220.250]) by mailrecv5.bigmailbox.com (8.10.0/8.10.0) with ESMTP id e7M7daY11062 for <lana () cms-net com>; Tue, 22 Aug 2000 00:39:41 -0700 Received: by libs1.hallym.ac.kr id QAA0000019226; Tue, 22 Aug 2000 16:31:46 +0900 (KST) From: <dennisd () paragontech com> Message-ID: <000063261e68$00001534$00000dd1@> To: <dessert () olympic net">"> Subject: Super Low Car Pricing, Get your quote now,..,. Date: Tue, 22 Aug 2000 01:28:28 -0400 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Errors-To: af89d0vg7a908d0af () hotpop com Reply-To: desselle () sonic net X-Mailer: Franklin Webmailer 1.0 DON'T STRESS... over buying your next car. Use the speed and power of the Internet as your portal to painless low price quotes. o Save Time o Save Money o Great Price o Choose from all makes and models Best of all, IT'S A FREE SERVICE... And it's as easy as clicking the link below: HREF=3D"http://ad.doubleclick.net/clk;555195;3452810;i?http://rd. yahoo.=com/geohome/g/*http://00032100360014.com/@www.geoci ties.com/Colosseum/Fiel=d/9245/auto5657.html/?http://rd.yahoo.co m/M=3D77122.826220.2557699.389576/=S=3D2716149:NP/A=3D3 59579/?http://www.geocities.com/Colosseum/Field/9245/a=u toClick Here HREF=3D"mailto:asindia () eudoramail com"To Be Removed *** Next Message: Return-Path: <> Received: from libs1.hallym.ac.kr ([210.115.237.8]) by paragon3.paragontech.com (Post.Office MTA v3.5.3 release 223 ID# 0-53858U100L100S0V35) with SMTP id com for <dennisd () paragontech com>; Tue, 22 Aug 2000 03:39:54 -0400 Received: by libs1.hallym.ac.kr id QAA0000020845; Tue, 22 Aug 2000 16:33:57 +0900 (KST) Date: Tue, 22 Aug 2000 16:33:57 +0900 (KST) From: Mail Delivery Subsystem <MAILER- DAEMON () libs1 hallym ac kr> Subject: Returned mail: User unknown Message-Id: <200008220733.QAA0000020845 () libs1 hallym ac kr> To: <dennisd () paragontech com> Auto-Submitted: auto-generated (failure) X-PMFLAGS: 33554560 0 1 P0A1D0.CNM The original message was received at Tue, 22 Aug 2000 16:31:46 +0900 (KST) from 1Cust177.tnt1.augusta.ga.da.uu.net [63.10.55.177] ----- The following addresses had permanent fatal errors ----- <dustinj () worldnet att net> <l_10 () mo net> <dfbooth01 () worldnet att net> <jdunphy () worldnet att net> <glewis () clubi net> <samad () clubi net> ----- Transcript of session follows ----- 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 desselle () sonic net"... Unbalanced '"' 553 desselle () sonic net"... Unbalanced '"' ... while talking to gateway2.worldnet.att.net.:
RCPT To:<jdunphy () worldnet att net>
<<< 550 Invalid recipient: <jdunphy () worldnet att net> 550 <jdunphy () worldnet att net>... User unknown
RCPT To:<dfbooth01 () worldnet att net>
<<< 550 Invalid recipient: <dfbooth01 () worldnet att net> 550 <dfbooth01 () worldnet att net>... User unknown
RCPT To:<dustinj () worldnet att net>
<<< 550 Invalid recipient: <dustinj () worldnet att net> 550 <dustinj () worldnet att net>... User unknown 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 desselle () sonic net"... Unbalanced '"' 553 desselle () sonic net"... Unbalanced '"' ... while talking to mail.mo.net.:
RCPT To:<l_10 () mo net>
<<< 550 <l_10 () mo net>... User unknown 550 <l_10 () mo net>... User unknown 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 desselle () sonic net"... Unbalanced '"' 553 desselle () sonic net"... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 <dessert () olympic net">... Unbalanced '"' 553 <dessert () olympic net">... Unbalanced '<' 553 desselle () sonic net"... Unbalanced '"' 553 desselle () sonic net"... Unbalanced '"' ... while talking to news.clubi.net.:
RCPT To:<samad () clubi net>
<<< 550 5.1.1 <samad () clubi net>... User unknown 550 <samad () clubi net>... User unknown
RCPT To:<glewis () clubi net>
<<< 550 5.1.1 <glewis () clubi net>... User unknown 550 <glewis () clubi net>... User unknown ----- Original message follows ----- Return-Path: <dennisd () paragontech com> Received: by libs1.hallym.ac.kr id QAA0000019226; Tue, 22 Aug 2000 16:31:46 +0900 (KST) From: <dennisd () paragontech com> Message-ID: <000063261e68$00001534$00000dd1@> To: <dessert () olympic net">"> Subject: Super Low Car Pricing, Get your quote now,..,. Date: Tue, 22 Aug 2000 01:28:28 -0400 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal Errors-To: af89d0vg7a908d0af () hotpop com Reply-To: desselle () sonic net"" X-Mailer: Franklin Webmailer 1.0 <HTML> <BODY> <FONT face=3D"MS Sans Serif"> <FONT size=3D2> <FONT color=3D"#000000"> DON'T STRESS... over buying your next car. <BR> Use the speed and power of the Internet as <BR> your portal to painless low price quotes. <BR> <BR> o Save Time<BR> o Save Money<BR> o Great Price<BR> o Choose from all makes and models<BR> <BR> Best of all, IT'S A FREE SERVICE...<BR> <BR> And it's as easy as clicking the link below:<BR> <BR> <a HREF=3D"http://ad.doubleclick.net/clk;555195;3452810;i?http://rd. yahoo .= com/geohome/g/*http://00032100360014.com/@www.geocities.com /Colosseum/ Fiel= d/9245/auto5657.html/?http://rd.yahoo.com/M=3D77122.826220.25 57699.389 576/= S=3D2716149:NP/A=3D359579/?http://www.geocities.com/Colosse um/Field/92 45/a= uto5657.html">Click Here</a><BR> <BR> <BR> <BR> <A HREF=3D"mailto:asindia () eudoramail com">To Be Removed</a><BR> <BR> </FONT></FONT></BODY></HTML> *** End of messages
Current thread:
- Spoofed SPAM relayed using my email address. Dennis DeDonatis (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Vince Vielhaber (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Mardy Hutchinson (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Bjorn Djupvik (Aug 23)
- Message not available
- Re: Spoofed SPAM relayed using my email address. Dennis DeDonatis (Aug 23)
- <Possible follow-ups>
- Re: Spoofed SPAM relayed using my email address. Andrea Adams (Aug 22)
- Re: Spoofed SPAM relayed using my email address. Danyial Burnett (Aug 23)