2024 SPAM, BUCE Hits December, 2024 SPAM, BUCE Hits October, 2024 SPAM, BUCE Hits September, 2024 SPAM, BUCE Hits August, 2024 SPAM, BUCE Hits July, 2024 SPAM, BUCE Hits June, 2024 SPAM, BUCE Hits May, 2024 SPAM, BUCE Hits April, 2024 SPAM, BUCE Hits March, 2024 SPAM, BUCE Hits February, 2024 SPAM, BUCE Hits January, 2024 2023 SPAM, BUCE Hits December, 2023 SPAM, BUCE Hits November, 2023 SPAM, BUCE Hits October, 2023 SPAM, BUCE Hits September, 2023 SPAM, BUCE Hits August, 2023 SPAM, BUCE Hits July, 2023 SPAM, BUCE Hits June, 2023 SPAM, BUCE Hits May, 2023 SPAM, BUCE Hits April, 2023 SPAM, BUCE Hits March, 2023 SPAM, BUCE Hits February, 2023 SPAM, BUCE Hits January, 2023 2022 SPAM, BUCE Hits December, 2022 SPAM, BUCE Hits November, 2022 SPAM, BUCE Hits October, 2022 SPAM, BUCE Hits September, 2022 SPAM, BUCE Hits August, 2022 SPAM, BUCE Hits July, 2022 SPAM, BUCE Hits June, 2022 SPAM, BUCE Hits May, 2022 SPAM, BUCE Hits April, 2022 SPAM, BUCE Hits March, 2022 SPAM, BUCE Hits February, 2022 SPAM, BUCE Hits January, 2022 2021 SPAM, BUCE Hits November, 2021 2020 SPAM, BUCE Hits December, 2020 SPAM, BUCE Hits November, 2020 SPAM, BUCE Hits October, 2020 SPAM, BUCE Hits September, 2020 SPAM, BUCE Hits August, 2020 SPAM, BUCE Hits May, 2020 SPAM, BUCE Hits April, 2020 SPAM, BUCE Hits March, 2020 SPAM, BUCE Hits February, 2020 SPAM, BUCE Hits January, 2020 2019 SPAM, BUCE Hits November, 2019 SPAM, BUCE Hits October, 2019 SPAM, BUCE Hits September, 2019 SPAM, BUCE Hits August, 2019 SPAM, BUCE Hits July, 2019 SPAM, BUCE Hits June, 2019 SPAM, BUCE Hits May, 2019 Psychopathy, sadism, empathy, and the motivation to cause harm SPAM, BUCE Hits March, 2019 SPAM, BUCE Hits February, 2019 SPAM, BUCE Hits January, 2019 2018 Voice Activated Hacks And Cocaine Noodles 2017 Fake News Is Fake News Spam Statistics 2016 2016 Census Surprise Older ATO Phone scam Spam Statistics 2015 Large number of Security Vulnerabilities July 2015 Spam Statistics 2014 Spam Statistics 2013 Spam Statistics 2012 The Genie Is Out Of The Bottle Trolling For Global Rage Another Spam La Nina Year Spam Statistics June 2012 Media Temple - Back On The Radar Good Christian Men Rejoice Now It's Just Plain Old Mail Fraud Microsoft Filters Form Not Content Peak Spam Security Shmecurity The Problem Of The Living Dead Quarantine Sick MS Computers? The Spam Season Starts Soon Creepy Conroy And The Internet Crimewave Seasons Greetings For The New Decade Phishing Phriendly Outlook Don't Go There Julie! Don't Go! Not Just Famous -- But IN-Famous! Hacked - When Will They Ever Learn? The E-mail Technology Trap Google Easy Money Scams We Wish You An Unspammy Xmas Terry Swope Spam Incident (2) Webcron Seduced By The Dark Side I've Won The Lottery Again Now I'm In Who's Who American Spam Terry Swope Spam Incident (1) Seven Steps To Internet Security Keeping My Powder Dry Myluvcrush.com Security Risk Spamhaus PBL End Game For Cashblasterpro.com Cashblasterpro.com Spammers The Spam Keeps On Coming McAfee Assess Risk By TLD The Time-Honoured Aussie Sport Of Bank Bashing Now We've Got Hand Spam - What Next? Internet Cops - Who Needs Smart Users When We Have Smart Software? Good Day To Me ... From 65.54.233.98? The Empire Strikes Back Remember me? TraciLFU4775 from AIM Yahoo regrets to announce ... an outbreak of computer viruses! Gold in them thar hills Florida Spam Zombies At It Again! Plaxo - Black, Grey or White? Unreal profits from Vocalscape Outsider Trading. Blars really does hate 'em I Don't Really Hate Them (much) Tiscali repeat Polish Spam on Rye Flogging A Dead Horse
PGTS Humble Blog Thread: Internet Security/Malware/Spam
	Gerry Patterson. The world's most humble blogger
Failure is not an option. It comes bundled with Microsoft Windows
Terry Swope Spam Incident (1)
Chronogical Blog Entries: Prev: 03-Oct-2008 Browser Share Based On Agent Strings Next: 07-Oct-2008 Wall-e Boots With Mac OS X
Date: Sun, 05 Oct 2008 12:30:06 +1000 Recently I noticed this email in the assassinated folder: ----790503267796321 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable Wake up America! The Dollar is falling fast, have you hedged your bets yet? I'm here to tell you about an exciting new way to beat inflation and re= ach the next level financially. http://www.biz= plan4u.com/silver_snowball.htm Can you survive if the economy crashes? If you check this out you can l= augh as the dollar slides and cashin bigtime! The Royal Bank of Scotland has advised clients to brace for a full-fled= ged crash in global stock and credit markets over the next three months as i= nflation paralyses the major central banks. Protect yourself from inflation right now! http://www.biz= plan4u.com/silver_snowball.htm Don't wait until it is too late, you have to see this. Terry Swope ----790503267796321--

I have not fixed the mistakes in the HTML, so the above is a text copy of how it would render in w3m on a console. It may render ok in Outlook (the most popular MUA target for spammers and scammers).

Normally I don't spend too much time on the contents of the assassinated folder. However this spammer was extremely egregious. Possibly even more so then the highly aggressive Cashblaster Pro Scammers.

The Terry Swope Spammer started spamming my domain with this particular message on Thursday at 2008-10-02 00:48 UTC. After which a similar message was repeated about every three minutes. Within an hour, the IP address 216.55.169.94 was sent to the sin bin by a scheduled spam post-processing script. Nevertheless the spam engine on 216.55.169.94 continued trying to connect with the PGTS mailhub. Before too long the IP address had been listed in a major block list. And the spammer continued trying to get through. After three hours had elapsed many of the major lists in the world had listed the IP address. It now has a poor reputation, and may not be able to send email to any site that uses DNSBL technology. I presume that as with the Cashblaster Pro Scammers, they continued sending the same message over and over.

The details of the IP address 216.55.169.94 were as follows:

	Network Owner:  Abacus America Inc.
	Registered on:	1999-05-28
	Updated on:	2000-11-02
	Expires on:	unknown
	Netblock(s): 	216.55.128.0/18
	Nameserver(s): 	NS1.ABAC.COM
			NS2.ABAC.COM

	Registrant:
	   Aplus.Net Aplus.Net (DT882) support at aplus dot net
	   Aplus.Net Internet Services
	   7500 W 110th St. Suite 400
	   Overland Park,    KS    66210
	   United States
	   Phone: +1 (913) 890-7700
	   Fax: +1 (913) 890-7701

	Technical Contact (and Administrative) Contact:
	   A+ Net (AD384-ORG) support at aplus dot net
	   A+Net Internet Services
	   10350 Barnes Canyon Road
	   San Diego,    CA    92121
	   United States
	   Phone: +1 (858) 410-6900

	Domain servers in listed order:
	   ns1.abac.com   216.55.128.4
	   ns2.abac.com   216.55.144.4

Update

As I said above, the HTML in the email was broken and would not render correctly with w3m. However it might be ok on a microsoft machine (guess I'll never find out). And although the URL that the Terry Swope Spammer was trying to advertise had not been setup, It did lead me to find someone whose name was Terry Swope, who was associated with that domain.

At the time, I speculated that the Terry Swope whose profile I found might have been associated with the spam incident. This speculation appears to have been unfounded. The real Terry Swope has since contacted me. There are more details here.

Other Blog Posts In This Thread:

• Prev In Thread: 05-Sep-2008 Seven Steps To Internet Security
• Next In Thread: 08-Oct-2008 American Spam

Copyright     2008, Gerry Patterson. All Rights Reserved.