Jump to content

Unusual Increase


dra007

Recommended Posts

Has anyone else noticed an unusual increase of spam hosted by astral.ro?

It seems to exceed 50% of the spam I have been getting lately:

Submitted: Wednesday, March 01, 2006 9:28:19 AM -0500:

Medicines before Valentine Day !!!

1675481108 ( z_User_Notification ) To: spam[at]postini.com

1675481053 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675481004 ( Forwarded spam ) To: spam[at]uce.gov

1675480958 ( 168.103.51.160 ) To: spamcop[at]imaphost.com

1675480933 ( 168.103.51.160 ) To: abuse-nonverbose[at]qwest.net

--------------------------------------------------------------------------------

Submitted: Wednesday, March 01, 2006 9:21:21 AM -0500:

She wants a better sex? All you need's here!

1675480209 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675480149 ( 217.125.0.165 ) To: spamcop[at]imaphost.com

1675480137 ( 217.125.0.165 ) To: nemesys[at]telefonica.es

--------------------------------------------------------------------------------

Submitted: Wednesday, March 01, 2006 9:14:03 AM -0500:

*****spam***** Our store is your cureall!

1675469765 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675469761 ( 142.46.74.63 ) To: spamcop[at]imaphost.com

1675469747 ( 142.46.74.63 ) To: dvernon[at]ptpbroadband.com

--------------------------------------------------------------------------------

Submitted: Wednesday, March 01, 2006 8:33:12 AM -0500:

***spam*** V1agra 20 P1lls 100 mg $99.95

1675448679 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675448676 ( 24.170.244.73 ) To: spamcop[at]imaphost.com

1675448674 ( 24.170.244.73 ) To: postmaster[at]myactv.net

Link to comment
Share on other sites

No, but I've noticed that a lot of the spamvertised sites that were on colohostinginc.com have shown up now on teleglobe.net. Horray for India's burgoning tech boom.

Anyone else notice how many spammers use interland.net(&.com) , conxion.net & algx.net?

I get all these messages from spammers that host these promotional emails that I didn't sign up for:

ALGX:

http://www.spamcop.net/sc?id=z888511708z01...fc5328f01ce4d0z

Conxion.net (I mean come on.. it's gibberish in the text to try to fudge up the parser):

http://mailsc.spamcop.net/sc?id=z887639202...136e201e3d6d0bz

Interland:

http://mailsc.spamcop.net/sc?id=z884442819...71302394311f8ez

Link to comment
Share on other sites

Ug... here's another one that seems to not care:

Parsing input: [url=http://citybestonline.com]http://citybestonline.com[/url]
Host citybestonline.com (checking ip) = 213.202.245.212
host 213.202.245.212 = 213.202.245.212.unitedcolo.de (cached)
[report history]
Routing details for 213.202.245.212
[refresh/show] Cached whois for 213.202.245.212 : abuse[at]unitedcolo.de
Using abuse net on abuse[at]unitedcolo.de
abuse net unitedcolo.de = abuse[at]unitedcolo.de, postmaster[at]unitedcolo.de
Using best contacts abuse[at]unitedcolo.de postmaster[at]unitedcolo.de
abuse[at]unitedcolo.de bounces (8 sent : 6 bounces)

Using abuse#unitedcolo.de[at]devnull.spamcop.net for statistical tracking.
postmaster[at]unitedcolo.de bounces (1051 sent : 526 bounces)

Using postmaster#unitedcolo.de[at]devnull.spamcop.net for statistical tracking.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...