Jump to content


  • Content Count

  • Joined

  • Last visited

Everything posted by navybuff

  1. navybuff

    Not Parsing Iran IP Addresses

    Thanks. good info. Will do as you suggest....
  2. hxxp://withfulls.com/ & hxxp://trevormuss.com/ are both the same IP address and indicate they are in Iran at For 3 days I have been getting 50 or 60 emails per day and not a single one has parsed correctly and produced the correct (or any for that matter) IP address. If I traceroute and do a whois I have no problems discovering the details, why is SC not doing this? Thanks, Delivered-To: x Received: by with SMTP id q4cs1061321huf; Sun, 31 Dec 2006 06:35:12 -0800 (PST) Received: by with SMTP id y10mr1634774huf.1167575712412; Sun, 31 Dec 2006 06:35:12 -0800 (PST) Return-Path: <extractnow[at]glrts.com> Received: from -1208540152 ([]) by mx.google.com with SMTP id 23si22047106hud.2006.; Sun, 31 Dec 2006 06:35:12 -0800 (PST) Received-SPF: neutral (google.com: is neither permitted nor denied by best guess record for domain of extractnow[at]glrts.com) Received: from glrts.com (-1208384152 [-1209492208]) by gratefuljazz.com (Qmailv1) with ESMTP id 9F27A5A838 for <x>; Sun, 31 Dec 2006 07:30:25 -0500 Date: Sun, 31 Dec 2006 07:30:25 -0500 From: "Subscriber J. Hiatus" <extractnow[at]glrts.com> X-Mailer: The Bat! (v2.00.9) Personal X-Priority: 3 Message-ID: <0265153700.20061231073025[at]glrts.com> To: x Subject: Tired of your health problems? MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Virus-Scanned: by AMaViS perl-11 mion With Viagra and Cialis pills from Canada Pharmacy store! There is no need to pay more just buy erectile dysfunction medications online at lowest prices on the web. hxxp://trevormuss.com/ ----------------------------------------- Delivered-To: x Received: by with SMTP id q4cs1068837huf; Sun, 31 Dec 2006 09:41:49 -0800 (PST) Received: by with SMTP id g11mr1655242hue.1167586909826; Sun, 31 Dec 2006 09:41:49 -0800 (PST) Return-Path: <potter[at]godart.net> Received: from 146562432 ([]) by mx.google.com with SMTP id 2si19286013hue.2006.; Sun, 31 Dec 2006 09:41:49 -0800 (PST) Received-SPF: neutral (google.com: is neither permitted nor denied by best guess record for domain of potter[at]godart.net) Received: from godart.net (144914200 [143736640]) by goll.net (Qmailv1) with ESMTP id D2A0DEF84C for <x>; Sun, 31 Dec 2006 12:43:56 -0500 Date: Sun, 31 Dec 2006 12:43:56 -0500 From: "Hearting L. Outstaying" <potter[at]godart.net> X-Mailer: The Bat! (v2.00.3) Personal X-Priority: 3 Message-ID: <1753533029.20061231124356[at]godart.net> To: x Subject: Pharmacy for everyone MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 7bit X-AntiVirus: Checked by Dr.Web (hxxp://www.drweb.net) The most powerful medicines for you! Augmetin - $4.8 - FDA-approved antibiotic for both acute bacterial sinusitis (ABS) and community-acquired pneumonia (CAP). Hangover Pills - $35.99 Uncle Rummies Hangover Pills are an all-natural dietary supplement providing protection from the "morning after" symptoms experienced after prolonged or excessive alcohol consumption. If taken as directed, Uncle Rummie's Hangover Helper can completely eliminate unpleasant side-effects such as headaches, nausea and dehydration. Augmetin - $4.8 - FDA-approved antibiotic for both acute bacterial sinusitis (ABS) and community-acquired pneumonia (CAP). Vlragra Soft Tabs - $3.86 - are mint flavored soft tablets for the treatment of male erectile dysfunction. They are equivalent to regular Vlragra, however due to their soft formulation, they are absorbed directly into the bloodstream. As such, they contain a much smaller dosage of Sildenafil Citrate to achieve the same result. All-Natural Magnesium Oxide - $35.99 - All-Natural Magnesium Oxide is a rich source of elemental magnesium, an essential mineral. Magnesium plays a role in many vital body functions, including protein biosynthesis, as well as bone and muscle formation, and as a cofactor in hundreds of enzymatic reactions. and more! our site hxxp://withfulls.com/ dfglirsjiel X1NFTVdEVFV0UlxTWlgbUl1e ONLY!
  3. The web interface for reporting is almost unusable. Average 40 to 50 seconds per spam. This time is increased if a User Notification is used. Numerous Sigalarms over the past few days. I noticed it about a week ago. There are times that is appears normal but they are few and far between. It appears that it is not related to traffic or system load because I have had the same problems in the middle of the night (2am PST). comments? See this Thread: Slowness
  4. navybuff

    Spamcop is BACK !!!!

    Thanks guys, great job, web based reporting is back to normal, or even better than normal.
  5. navybuff

    Spamcop is BACK !!!!

    Actually as the day goes on things are better but not 100% yet, sorry, jumped the gun here...
  6. navybuff

    Spamcop is BACK !!!!

    Not even a little peek? Too bad if that is tue....
  7. navybuff

    Slow Web Interface Processing

    Thanks Don, I knew you guys were hot on this...., Long time guy.
  8. As a side note here, I too have never tried the Webmail reporting and it is indeed MUCH faster if you are using the quick report option, THANKS! However, there is no option to add user (Z) notifications This morning the web interface for reporting is almost impossible to use, over 1 minute per email to report. Lets do the math: 300 emails a day X 365 days = 109,500 emails X 1 minute = 109,900 minutes = 1825 hours = 76 days I don't think so... The problem appears to be in the query that checks for the existence of the devnull.spamcop.net function or something like that. The severe slowdown happens when a value is entered into the User Notification field. I have noticed that certain addresses are slower than others, for instance; sprint.net almost always times out (sigalrm). I have seen it complete the process (actually sent the user notifications) and still continue to timeout and end up in sigalrm, with the results showing that all emails have been sent; they are actually listed as such. My question is: Is spamcop trying to discourage user-copied emails? Comments?
  9. As a matter of fact it was about that time, started on Tuesday I think... --- 89,338 Reports and Counting ---
  10. In addition to the "can not log into" problem, there is also a problem with adding user notifications: When one adds additional addresses the time to process the spam goes out of sight, and most of the time ending with "got sigalarm, taking too long to process, aborted.". Then the results page shows that all the default "checked off" addresses have indeed been sent and only the user entered addresses caused the time out. Whatever was done a few days ago is what caused this to happen, comments?
  11. What is going on with the servers, it has never taken this long to process spam??? And yes, it is on your end, not mine. Thanks
  12. navybuff

    [Resolved] Slow Processing Again

    My intention was to generate some feedback and I got it.... Anyway, it has been fun, thanks for the comments... 83000 + Reports and counting....
  13. navybuff

    [Resolved] Slow Processing Again

    Not quite sure what you mean, are YOU helping ME? No matter, whatever was done today in the maintenance shutdown corrected the problem... So I guess that kinda' puts it on YOUR end huh? (meaning spamcop) Sorry for the miss-placed post, where should it have been posted? 83,000 + reports and counting ....
  14. Well, I think they have done it, 90% of the spam I get now has no master or untraceable. However I can easily trace the mail to the originating IP but spam cop can't or is untraceable (can not resolve) by spamcop, any thoughts as to the future, my yearly fees are due... http://www.spamcop.net/sc?id=z989307171z0d...4b0c8cffd35e61z 80,000 + reports Sent
  15. navybuff


    Excellent response, thanks everyone, sign me up for another year....!!!! 82000 and counting
  16. navybuff


    Well, its pretty simple, spamertized SITES are NOT getting reported. The source of the mail is, that is not a problem, but the real issues are the sites themselves. These hosting companies are at the core of spam issues in my opinion, they are the ones making the money and giving these spammer a place to do their dirty deeds.. If you look at the above link again you will see that spamcop and cannot resolve http]://adahfr.losscenter.info/?18199725 Here is the resolution as I have found it: www.adahfr.losscenter.info IP Address : Location: Italy WHOIS: inetnum: - netname: TIWS-SMART-3 descr: Telecom Italia S.p.A. descr: Neteconomy & Smart descr: Services country: IT admin-c: BS104-RIPE tech-c: BS104-RIPE status: ASSIGNED PA remarks: ************************************************ remarks: Pay attention remarks: Any communication sent to email different remarks: from the following will be ignored! remarks: Any abuse reports, please send them to remarks: *****[at]business.telecomitalia.it remarks: ************************************************ notify: ******[at]telecomitalia.it mnt-by: TIWS-MNT changed: ******[at]telecomitalia.it 20050128 source: RIPE person: BBBEASYIP STAFF address: address: Via Val Cannuta, 250 address: I-00100 Roma address: Italy phone: +39 06 36881 e-mail: **********[at]telecomitalia.it nic-hdl: BS104-RIPE notify: **********[at]telecomitalia.it changed: ******[at]telecomitalia.it 20001019 source: RIPE % Information related to '' route: descr: INTERBUSINESS origin: AS3269 notify: *******[at]cgi.interbusiness.it mnt-by: TIWS-MNT mnt-routes: INTERB-MNT changed: ******[at]telecomitalia.it 20031023 source: RIPE So, [http]://adahfr.losscenter.info/?18199725 is still in business and sending millions of pieces of junk mail to this minute because SPAMCOP does not parse these sites and allow us to report them. Over the last few days I have noticed that other hosting companies are jumping on the band wagon and more and more spam sites are falling into the "CANNOT RESOLVE" spamcop hole. I am no expert here but if I can resolve it and report accordingly then spamcop should be able to also. Oh, and BTW, this site was hosted by China 2 days ago. Thanks, 82000 and counting
  17. navybuff

    spam with no message in the body

    I didn't notice the date, thanks..., I did PM him though
  18. navybuff

    spam with no message in the body

    HillsCap, I am interested in your code, could you send me a copy with your instructions?
  19. See: http://www.spamcop.net/sc?id=z818991693z9d...f97fc01b681f75z Discarded as fake... This site is up and running and has been for several weeks Thanks, NB SHINBIRO.COM [sHINBIRO-INFRA](Korea) Networks: [] Domains: http://digintotherhythm.com, http://deromen.com, http://sportowes.com, http://stupidpeoples.info, http://formepol.com, http://siminesto.com, http://drapors.com, http://yoquieromilk.com, http://twinatak.com, http://twinatak.com , http://idonthavethatone.com, http://mediahealthnews.info, http://strimel.info, http://sitechemist.info, http://bestnnedforhealth.info [], http://atpennstation.com, http://www.couldyoupleasehelp.com, http://anilok.com, http://www.biglampshade.com
  20. navybuff


    Good info, thanks
  21. Seems like the spammers are on to spamcop and are beating them at the game. Almost all the spam I get via spamcop is parsed with NoMaster results. I don't understand why you can not just convert the web address to an IP address and then whois that IP. I do it all the time and copy and paste the discovered info into the user comments. I believe that the target of spam reports should be equally distributed to the spamvertised website and the hosting network. In fact if you target the host and not the sender you are likely to discourage the hosting of these low life spammer sites. After all, bandwidth is money and several million complaints a day hurts...., nothing left to host :-) That's my 2 cents, try not to beat me up too much here, I am busy reporting spammers ....
  22. This guy is getting away with big time spamming. The source is being parsed but the domain is not.... Any Ideas? Seems like if it is reported correctly one time then SC should cache the results to use in the 10000 emails that follow with the same Spamvertised domain. See this: http://www.spamcop.net/sc?id=z787448268zdd...aa58b18b88351az http://joanne.pharma-plus.net/extra/xxxpersonals/ http://marko.pharma-plus.net/extra/xxxpersonals/ pharma-plus.net is IP Address in Brazil Security issues should also be addressed to cert[at]cert.br, http://www.cert.br/ Mail abuse issues should also be addressed to mail-abuse[at]cert.br Registrar: Latin American and Caribbean IP address Regional Registry IP Address: Whois results from whois.lacnic.net: % Copyright LACNIC lacnic.net % The data below is provided for information purposes % and to assist persons in obtaining information about or % related to AS and IP numbers registrations % By submitting a whois query, you agree to use this data % only for lawful purposes. % 2005-07-18 23:42:42 (BRT -03:00) inetnum: 200.128/9 status: allocated owner: Comite Gestor da Internet no Brasil ownerid: BR-CGIN-LACNIC responsible: Frederico A C Neves address: Av. das Nações Unidas, 11541, 7° andar address: 04578-000 - São Paulo - SP country: BR phone: +55 11 9119-0304 [] owner-c: CGB tech-c: CGB inetrev: 200.128/9 nserver: A.DNS.BR nsstat: 20050717 AA nslastaa: 20050717 nserver: B.DNS.BR nsstat: 20050717 AA nslastaa: 20050717 nserver: C.DNS.BR nsstat: 20050717 AA nslastaa: 20050717 nserver: D.DNS.BR nsstat: 20050717 AA nslastaa: 20050717 nserver: E.DNS.BR nsstat: 20050717 AA nslastaa: 20050717 remarks: These addresses have been further assigned to Brazilian users. remarks: Contact information can be found at the WHOIS server located remarks: at whois.registro.br or at http://whois.registro.br created: 19950104 changed: 20020902 nic-hdl: CGB person: Comite Gestor da Internet no Brasil e-mail: blkadm[at]NIC.BR address: Av. das Nações Unidas, 11541, 7° andar address: 04578-000 - São Paulo - SP country: BR phone: +55 19 9119-0304 [] created: 20020902 changed: 20050621
  23. navybuff


    Not sure what the point is here, I know it's blacklisted, why don't SC ?
  24. navybuff

    APNIC Mirror Issue (was NoMaster ???)

    I knew it was too good to be true, maybe the China network is gone forever