Jump to content

Unusual Increase


dra007
 Share

Recommended Posts

Has anyone else noticed an unusual increase of spam hosted by astral.ro?

It seems to exceed 50% of the spam I have been getting lately:

Submitted: Wednesday, March 01, 2006 9:28:19 AM -0500:

Medicines before Valentine Day !!!

1675481108 ( z_User_Notification ) To: spam[at]postini.com

1675481053 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675481004 ( Forwarded spam ) To: spam[at]uce.gov

1675480958 ( 168.103.51.160 ) To: spamcop[at]imaphost.com

1675480933 ( 168.103.51.160 ) To: abuse-nonverbose[at]qwest.net

--------------------------------------------------------------------------------

Submitted: Wednesday, March 01, 2006 9:21:21 AM -0500:

She wants a better sex? All you need's here!

1675480209 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675480149 ( 217.125.0.165 ) To: spamcop[at]imaphost.com

1675480137 ( 217.125.0.165 ) To: nemesys[at]telefonica.es

--------------------------------------------------------------------------------

Submitted: Wednesday, March 01, 2006 9:14:03 AM -0500:

*****spam***** Our store is your cureall!

1675469765 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675469761 ( 142.46.74.63 ) To: spamcop[at]imaphost.com

1675469747 ( 142.46.74.63 ) To: dvernon[at]ptpbroadband.com

--------------------------------------------------------------------------------

Submitted: Wednesday, March 01, 2006 8:33:12 AM -0500:

***spam*** V1agra 20 P1lls 100 mg $99.95

1675448679 ( http://reheav.knavelip.info/?70173654 ) To: abuse[at]astral.ro

1675448676 ( 24.170.244.73 ) To: spamcop[at]imaphost.com

1675448674 ( 24.170.244.73 ) To: postmaster[at]myactv.net

Link to comment
Share on other sites

No, but I've noticed that a lot of the spamvertised sites that were on colohostinginc.com have shown up now on teleglobe.net. Horray for India's burgoning tech boom.

Anyone else notice how many spammers use interland.net(&.com) , conxion.net & algx.net?

I get all these messages from spammers that host these promotional emails that I didn't sign up for:

ALGX:

http://www.spamcop.net/sc?id=z888511708z01...fc5328f01ce4d0z

Conxion.net (I mean come on.. it's gibberish in the text to try to fudge up the parser):

http://mailsc.spamcop.net/sc?id=z887639202...136e201e3d6d0bz

Interland:

http://mailsc.spamcop.net/sc?id=z884442819...71302394311f8ez

Link to comment
Share on other sites

Ug... here's another one that seems to not care:

Parsing input: [url=http://citybestonline.com]http://citybestonline.com[/url]
Host citybestonline.com (checking ip) = 213.202.245.212
host 213.202.245.212 = 213.202.245.212.unitedcolo.de (cached)
[report history]
Routing details for 213.202.245.212
[refresh/show] Cached whois for 213.202.245.212 : abuse[at]unitedcolo.de
Using abuse net on abuse[at]unitedcolo.de
abuse net unitedcolo.de = abuse[at]unitedcolo.de, postmaster[at]unitedcolo.de
Using best contacts abuse[at]unitedcolo.de postmaster[at]unitedcolo.de
abuse[at]unitedcolo.de bounces (8 sent : 6 bounces)

Using abuse#unitedcolo.de[at]devnull.spamcop.net for statistical tracking.
postmaster[at]unitedcolo.de bounces (1051 sent : 526 bounces)

Using postmaster#unitedcolo.de[at]devnull.spamcop.net for statistical tracking.

Edited by btech
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...