From geoff.brown at talk21.com Tue Nov 11 21:58:32 2008 From: geoff.brown at talk21.com (Geoff Brown) Date: Tue, 11 Nov 2008 20:58:32 +0000 (GMT) Subject: [anti-abuse-wg] Fw: Re: Fw: Even presidents use it (KMM81093521V2514L0KM) Message-ID: <314429.87529.qm@web87108.mail.ird.yahoo.com> I'm getting this spam email can you take a look at it please --- On Tue, 11/11/08, Geoff Brown wrote: From: Geoff Brown Subject: Fw: Re: Fw: Even presidents use it (KMM81093521V2514L0KM) To: abuse at ornage.es Date: Tuesday, 11 November, 2008, 8:41 PM --- On Tue, 11/11/08, Yahoo! Mail wrote: From: Yahoo! Mail Subject: Re: Fw: Even presidents use it (KMM81093521V2514L0KM) To: "Geoff Brown" Date: Tuesday, 11 November, 2008, 11:21 AM Hello, Thank you for writing to Yahoo! Mail. I understand your frustration in receiving unsolicited email. While we investigate all reported violations against the Yahoo! Terms of Service (TOS), in this particular case the message you received was not sent through the Yahoo! Mail system. Yahoo! has no control over activities outside its service, and therefore we cannot take action. You may try contacting the sender's email provider, by identifying the sender's domain and contacting the administrator of that domain. The sender's provider should be in a better position to take appropriate action against the sender's account. The email message itself does contain some information relating to the sender's identity. Yahoo! includes the originating Internet Protocol (IP) address in the full Internet headers of all messages sent through Yahoo! Mail, so that we will have information regarding the origin of messages sent through our system. The originating IP address should be located in the very last "Received" line of the full Internet headers and corresponds to the sender's Internet Service Provider (ISP). Please see the following URL for more assistance: http://help.yahoo.com/help/us/mail/spam/spam-05.html Once you have identified the IP address, you can conduct an IP lookup to determine which ISP provides this person with Internet access. One such lookup tool you may want to try is: http://www.arin.net/whois/ You can then attempt to contact that ISP to report any abuse activities occurring within their service. In addition, please visit the following website for useful tools to combat spam: http://antispam.yahoo.com/ Please let me know if you still need assistance so I may assist you further. Your patience during this process is greatly appreciated. Thank you again for contacting Yahoo! Mail. Regards, Elmer Yahoo! Customer Care 54980104 For assistance with all Yahoo! services please visit: http://help.yahoo.com/ Original Message Follows: ------------------------- Hi I'm getting this spam - allegedly from my own email address - I haven't tried to unsubscribe due to the nature of the message - and I doubt the authenticity - they can't even spell special. Even presidents use it Monday, 10 November, 2008 2:27 AM >From geoff.brown at talk21.com Mon Nov 10 02:27:24 2008 Return-Path: Authentication-Results: mta802.mail.ird.yahoo.com from=talk21.com; domainkeys=neutral (no sig) Received: from 85.60.43.16 (EHLO 215.pool85-60-19.dynamic.orange.es) (85.60.43.16) by mta802.mail.ird.yahoo.com with SMTP; Mon, 10 Nov 2008 02:27:22 +0000 To: Subject: Even presidents use it From: ?? View contact details MIME-Version: 1.0 Importance: High Content-Type: text/html Content-Length: 2015 --- On Mon, 10/11/08, geoff.brown at talk21.com wrote: From: geoff.brown at talk21.com Subject: Even presidents use it To: geoff.brown at talk21.com Date: Monday, 10 November, 2008, 2:27 AM If you are unable to see the message below, click here to view. You have received this message because you opted in to receives ClickCulture pecial offers via email. Login to your member account to edit your email subscription . Click here to unsubscribe. PLEASE DO NOT REPLY - This is being sent from an unattended mailbox. Copyright ? 2008 ClickCulture, Inc. All rights reserved. 3739-210 NATIONAL DR, Raleigh, NC 27612 -------------- next part -------------- An HTML attachment was scrubbed... URL: From thor at anta.net Thu Nov 13 12:16:15 2008 From: thor at anta.net (Thor Kottelin) Date: Thu, 13 Nov 2008 13:16:15 +0200 Subject: [anti-abuse-wg] Fw: Re: Fw: Even presidents use it In-Reply-To: <20081113110004.594.87697.Mailman@postboy.ripe.net> References: <20081113110004.594.87697.Mailman@postboy.ripe.net> Message-ID: > Date: Tue, 11 Nov 2008 20:58:32 +0000 (GMT) > From: Geoff Brown > To: anti-abuse-wg at ripe.net > Subject: [anti-abuse-wg] Fw: Re: Fw: Even presidents use it > I'm getting this spam email can you take a look at it please > Received: > from 85.60.43.16 (EHLO 215.pool85-60-19.dynamic.orange.es) > (85.60.43.16) > by mta802.mail.ird.yahoo.com with SMTP; Mon, 10 Nov 2008 02:27:22 > +0000 I suggest writing to abuse at es.francetelecom.com. For the future, I suggest using Spamcop, as it will analyze and report junk mail for you. -- Thor Kottelin http://www.anta.net/ From brian.nisbet at heanet.ie Thu Nov 13 17:59:42 2008 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Thu, 13 Nov 2008 16:59:42 +0000 Subject: [anti-abuse-wg] Fw: Re: Fw: Even presidents use it (KMM81093521V2514L0KM) In-Reply-To: <314429.87529.qm@web87108.mail.ird.yahoo.com> References: <314429.87529.qm@web87108.mail.ird.yahoo.com> Message-ID: <491C5CFE.50603@heanet.ie> As has been pointed out, the relevant ISP is a more useful approach to take as the Anti-Abuse WG is not tasked with dealing with individual instances of spam, etc. The RIPE NCC FAQ on network abuse reporting is a very useful guide to read: http://www.ripe.net/info/faq/abuse/index.html Regards, Brian. Geoff Brown wrote: > > I'm getting this spam email can you take a look at it please > > > --- On *Tue, 11/11/08, Geoff Brown //* wrote: > > From: Geoff Brown > Subject: Fw: Re: Fw: Even presidents use it (KMM81093521V2514L0KM) > To: abuse at ornage.es > Date: Tuesday, 11 November, 2008, 8:41 PM > > > > --- On *Tue, 11/11/08, Yahoo! Mail //* wrote: > > From: Yahoo! Mail > Subject: Re: Fw: Even presidents use it (KMM81093521V2514L0KM) > To: "Geoff Brown" > Date: Tuesday, 11 November, 2008, 11:21 AM > > Hello, > > Thank you for writing to Yahoo! Mail. > > I understand your frustration in receiving unsolicited email. While we > investigate all reported violations against the Yahoo! Terms of Service > (TOS), in this particular case the message you received was not > sent > through the Yahoo! Mail system. > > Yahoo! has no control over activities outside its service, and therefore > we cannot take action. You may try contacting the sender's > email > provider, by identifying the sender's domain and contacting the > administrator of that domain. The sender's provider should be in a > better position to take appropriate action against the sender's account. > > The email message itself does contain some > information relating to the > sender's identity. Yahoo! includes the originating Internet Protocol > (IP) address in the full Internet headers of all messages sent through > Yahoo! Mail, so that we will have information regarding the origin of > messages sent through our system. The originating IP address should be > located in the very last "Received" line of the full Internet headers > and corresponds to the sender's Internet Service Provider (ISP). > > Please see the following URL for more > assistance: > > http://help.yahoo.com/help/us/mail/spam/spam-05.html > > Once you have identified the IP address, you can conduct an IP lookup to > determine which ISP provides this > person with Internet access. One such > lookup tool you may want to try is: > > http://www.arin.net/whois/ > > You can then attempt to contact that ISP to report any abuse activities > occurring within their service. > > In addition, please visit the > following website for useful tools to > combat spam: > > http://antispam.yahoo.com/ > > Please let me know if you still need assistance so I may assist you > further. > > Your patience during this process is greatly appreciated. > > Thank you again for contacting Yahoo! Mail. > > Regards, > > Elmer > > Yahoo! Customer Care > > 54980104 > > For assistance with all Yahoo! services please visit: > > http://help.yahoo.com/ > > > > > Original Message > Follows: > ------------------------- > > Hi I'm getting this spam - allegedly from my own email address - I > haven't tried to unsubscribe due to the nature of the message - and I > doubt the > authenticity - they can't even spell special. > Even presidents use it > Monday, 10 November, 2008 2:27 AM > > From geoff.brown at talk21.com Mon Nov 10 02:27:24 2008 > > > > > > Return-Path: > > > > > > > > > Authentication-Results: > > > > mta802.mail.ird.yahoo.com from=talk21.com; domainkeys=neutral (no sig) > > > > > Received: > > > > from 85.60.43.16 (EHLO 215.pool85-60-19.dynamic.orange.es) > (85.60.43.16) > by mta802.mail.ird.yahoo.com with SMTP; Mon, 10 Nov 2008 02:27:22 > +0000 > > > > To: > > > > > > > > Subject: > > > > Even presidents use > it > > > > From: > > > > > View contact details > > > > > MIME-Version: > > > > 1.0 > > > > > Importance: > > > > High > > > > Content-Type: > > > > text/html > > > > Content-Length: > > > > 2015 > --- On Mon, 10/11/08, geoff.brown at talk21.com > > wrote: > From: geoff.brown at talk21.com > Subject: Even presidents use it > To: geoff.brown at talk21.com > Date: Monday, 10 November, 2008, 2:27 AM > > > > If you are unable to see the message below, click here to view. > > > > > > > > > You have received this message because you opted in to receives > ClickCulture pecial > offers via email. Login to your member account to > > edit your email subscription > . > Click > here to > > > unsubscribe. > > PLEASE DO NOT REPLY - This is being sent > from an unattended mailbox. > Copyright ? 2008 ClickCulture, Inc. All rights reserved. > 3739-210 > NATIONAL DR, Raleigh, NC 27612 > > > > > > > > > >