<?xml version="1.0" encoding="UTF-8"?> <rss
version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
> <channel><title>peteconnolly.co.uk &#187; spam</title> <atom:link href="http://www.peteconnolly.co.uk/blog/wordpress/category/spam/feed/" rel="self" type="application/rss+xml" /><link>http://www.peteconnolly.co.uk/blog/wordpress</link> <description>Pete&#039;s Pictures</description> <lastBuildDate>Sun, 11 Dec 2011 11:08:40 +0000</lastBuildDate> <language>en</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=</generator> <item><title>Some spammer has a sense of humour</title><link>http://www.peteconnolly.co.uk/blog/wordpress/2007/11/14/some-spammer-has-a-sense-of-humour/</link> <comments>http://www.peteconnolly.co.uk/blog/wordpress/2007/11/14/some-spammer-has-a-sense-of-humour/#comments</comments> <pubDate>Wed, 14 Nov 2007 18:17:40 +0000</pubDate> <dc:creator>pete</dc:creator> <category><![CDATA[spam]]></category> <category><![CDATA[Stuff]]></category> <guid
isPermaLink="false">http://www.peteconnolly.co.uk/blog/wordpress/2007/11/14/some-spammer-has-a-sense-of-humour/</guid> <description><![CDATA[I just received this spam, surprisingly it got past the filters: ROYAL SCOTTLAND FINANCE, SOUTH QUAY PLAZA 183 MARSH WALL, LONDON, UNITED KINGDOM. Are you tired of Seeking Loans and Mortgages,have  you Been Turned down constantly By your banks and Other Financial Institutions,We give out loansto all categories of people, firms, companies, schools, churches, industries [...]]]></description> <content:encoded><![CDATA[<p>I just received this spam, surprisingly it got past the filters:</p><pre>ROYAL SCOTTLAND FINANCE,</pre><pre>SOUTH QUAY PLAZA</pre><pre>183 MARSH WALL,</pre><pre>LONDON, UNITED KINGDOM.</pre><pre>
Are you tired of Seeking Loans and Mortgages,have  you Been Turned down</pre><pre>constantly By your banks and Other Financial Institutions,We give out</pre><pre>loansto all categories of people, firms, companies, schools, churches,</pre><pre>industries etc. we give out loans at very cheap and moderate rates,We</pre><pre>are trusted,reliable and dynamic. Any interested persons should fill the</pre><pre>form below and send it to our Email:</pre><pre>  royalscottlandfinance02@yahoo.com.hK</pre><pre>
Name:.</pre><pre>Country:.</pre><pre>Address:.</pre><pre>Phone number:.</pre><pre>Current place of work:.</pre><pre>sex..</pre><pre>Loan amount needed:.</pre><pre>Loan duration:.</pre><pre>Monthly income:</pre><pre>
Yours Truly,</pre><pre>Dr. Kelvin Mclarry</pre><p>183 Marsh Wall is the address of the Financial Ombudsman Service</p><p><a
href="http://www.londononline.co.uk/profiles/61270/"><strong
style="color: #000000; text-decoration: none">Financial Ombudsman Service</strong><br
/> </a> Helplines (Head Office) based in the Marsh Wallarea of London<br
/> Tel: 0845-080 1800<br
/> Address: 183 Marsh Wall London   E14 9SR<br
/> View <a
href="http://www.londononline.co.uk/profiles/61270/">Financial Ombudsman Service&#8217;s profile</a></p><p>Got to laugh sometimes.</p> ]]></content:encoded> <wfw:commentRss>http://www.peteconnolly.co.uk/blog/wordpress/2007/11/14/some-spammer-has-a-sense-of-humour/feed/</wfw:commentRss> <slash:comments>1</slash:comments> </item> <item><title>More spam effects.</title><link>http://www.peteconnolly.co.uk/blog/wordpress/2007/06/07/more-spam-effects/</link> <comments>http://www.peteconnolly.co.uk/blog/wordpress/2007/06/07/more-spam-effects/#comments</comments> <pubDate>Thu, 07 Jun 2007 20:55:56 +0000</pubDate> <dc:creator>pete</dc:creator> <category><![CDATA[spam]]></category> <category><![CDATA[Stuff]]></category> <guid
isPermaLink="false">http://www.peteconnolly.co.uk/blog/wordpress/2007/06/07/more-spam-effects/</guid> <description><![CDATA[Tonight, I find myself on the butt end of a joe job from some bottom-dweller that wants to pump and dump German stocks. Look at that inbox &#8211; 893 emails, some of which are real but most are &#8216;returned delivery&#8217; replies. Maybe it&#8217;s for the best to configure your mail server to not even bother [...]]]></description> <content:encoded><![CDATA[<p>Tonight, I find myself on the butt end of a <a
href="http://" title="http://en.wikipedia.org/wiki/Joe_job" target="_blank">joe job</a> from some bottom-dweller that wants to pump and dump German stocks.</p><p><a
href="http://www.peteconnolly.co.uk/blog/wordpress/?attachment_id=239" rel="attachment wp-att-239" title="Joe Job"><img
src="http://www.peteconnolly.co.uk/blog/wordpress/wp-content/uploads/2007/06/joejob.png" alt="Joe Job" /></a></p><p>Look at that inbox &#8211; 893 emails, some of which are real but most are &#8216;returned delivery&#8217; replies.  Maybe it&#8217;s for the best to configure your mail server to not even bother replying these days (as I do).  With the vast majority of email being delivered being spam, and all pretence of good behaviour on the internet vanishing, I think it&#8217;s time the protocols of email delivery (notification if undeliverable) were retired.</p><p>Protocol is dead</p> ]]></content:encoded> <wfw:commentRss>http://www.peteconnolly.co.uk/blog/wordpress/2007/06/07/more-spam-effects/feed/</wfw:commentRss> <slash:comments>1</slash:comments> </item> <item><title>Terror Spam</title><link>http://www.peteconnolly.co.uk/blog/wordpress/2007/04/27/terror-spam/</link> <comments>http://www.peteconnolly.co.uk/blog/wordpress/2007/04/27/terror-spam/#comments</comments> <pubDate>Fri, 27 Apr 2007 09:56:57 +0000</pubDate> <dc:creator>pete</dc:creator> <category><![CDATA[spam]]></category> <guid
isPermaLink="false">http://www.peteconnolly.co.uk/blog/wordpress/2007/04/27/terror-spam/</guid> <description><![CDATA[Update, 13/5/07: Thanks for all the comments. It seems we&#8217;re seeing a new angle on attention getting by some saddo spammer. Lots of &#8216;petes&#8217; and &#8216;peters&#8217; hit with this around the same time, followed by &#8216;Christopher&#8217;, so maybe not quite alphabetical but still grouped. Thanks to the Petes and the Steves and the Christophers and [...]]]></description> <content:encoded><![CDATA[<p>Update, 13/5/07:</p><p>Thanks for all the comments. It seems we&#8217;re seeing a new angle on attention getting by some saddo spammer.  Lots of &#8216;petes&#8217; and &#8216;peters&#8217; hit with this around the same time, followed by &#8216;Christopher&#8217;, so maybe not quite alphabetical but still grouped.</p><p>Thanks to  the Petes and the Steves and the Christophers and Mr Tox for the feedback.  I emailed the Met Police in London to get this approach on the radar for the UK cops (no doubt they already knew about it) and also replied on a disposable account to the man himself &#8211; &#8220;Nice Man Nice man&#8221; (<a
href="mailto:%20%20be-cool-n@hotmail.com" title="bottom feeding scumbag">be-cool-n@hotmail.com</a>).  No reply from the main guy himself, maybe I&#8217;ll need to start a 419 baiting project.  I&#8217;ve already started to write a 419er friendly &#8216;please don&#8217;t kill me, take all my money but think of my donkeys&#8217; email.</p><p>Thanks  folks.  Now Google has something to work with, lets hope no-one falls for this.</p><p><em>Original Post &#8230;.. </em><br
/> Got some spam this morning with a different take on stealing my ID:  Terror!</p><blockquote><p><em>A am very Very sorry for you Pete, is a pity that this is how your life is<br
/> going to end is a pity but I will like to give you some chance to help your<br
/> self RIP. As you can see there is no need of introducing my self to you<br
/> because I<br
/> don&#8217;t have any business with you, My work as I am talking to you now is<br
/> just to kill you and a have to just do that as I have already been paid<br
/> for that.</em></p><p><em>Some one that I will not like to tell you the name came to me and told<br
/> me that he want you and the whole of your family dead and he provide us<br
/> with your name, Address and Phone Number and with my network I sent my boys<br
/> to track you down and they have done that but I told them not to kill you<br
/> that I will like to contact you and see if your life is Important to you so<br
/> I called the him back (I mean my client) and ask him of you email which I<br
/> didn&#8217;t tell him what I want to do with it and he gave it to me and I am<br
/> using it to contact you. As I am writing to you now my men are<br
/> monitoring you and there telling me every thing about you. So I will like to<br
/> know<br
/> if you Like to live or die as some one has paid for you to die. I am given<br
/> you just two days to get back to me or I will just make a call and tell my<br
/> boys to wipe you and your family out.</em></p><p><em>GOOD LUCK AS I AWAIT YOUR REPLY.</em></p></blockquote><p>Sent from Nigeria (where else!) from IP address 213.255.199.40, which resolves to Henik International Ltd.  Not much about them on google, but not bothered to chase it any further.  The server at that address seems to be a fairly open services server..</p><blockquote><p
align="left"><em>nmap -sS -v -v -P0 213.255.199.40</em></p><p><em>Starting Nmap 4.20 ( http://insecure.org ) at 2007-04-27 10:19 BST</em><br
/> <em>Initiating Parallel DNS resolution of 1 host. at 10:19</em><br
/> <em>Completed Parallel DNS resolution of 1 host. at 10:19, 0.04s elapsed</em><br
/> <em>Initiating SYN Stealth Scan at 10:19</em><br
/> <em>Scanning 213.255.199.40 [1697 ports]</em><br
/> <em>Discovered open port 25/tcp on 213.255.199.40</em><br
/> <em>Discovered open port 23/tcp on 213.255.199.40</em><br
/> <em>Discovered open port 443/tcp on 213.255.199.40</em><br
/> <em>Discovered open port 80/tcp on 213.255.199.40</em><br
/> <em>Discovered open port 53/tcp on 213.255.199.40</em><br
/> <em>Discovered open port 22/tcp on 213.255.199.40</em><br
/> <em>Discovered open port 5432/tcp on 213.255.199.40</em><br
/> <em>SYN Stealth Scan Timing: About 6.21% done; ETC: 10:28 (0:07:41 remaining)</em><br
/> <em>Discovered open port 8888/tcp on 213.255.199.40</em></p></blockquote><p>It&#8217;s a nasty, attention-getting way of entering into dialogue with the target.  I can see it working on  quite a few people, alas.  The race to the bottom continues&#8230;</p> ]]></content:encoded> <wfw:commentRss>http://www.peteconnolly.co.uk/blog/wordpress/2007/04/27/terror-spam/feed/</wfw:commentRss> <slash:comments>7</slash:comments> </item> </channel> </rss>
