I trust everyone who's left had a rewarding and happy Christmas.
Sets of Headers showing the Timezone, Source ISP? and the att.net
address they used as one of the onramps onto Groups posts were sent to
what appeared to be the source Provider where the Spoofing of our From
addresses appeared to come.
Soon after that the posts stopped-- of course the Dumb Yob put a
chill onto the group and stopped the Other **valid posts here, by his
Spoofing Software and fooling around.
If it's any consolation his history (at least under the **one
registered name) only went to **20 messages total on **17 groups --
that isn't likely correct as he posted more than 6-8 times on our group
using various 'names' of our regulars, but he also posted starting
April 2 as Kathy Hertzog.. (my reader takes out last of addresses where
I put ...s), and most of his activity was in August thru October.
kathyzo...At ATT.net was the provider I sent the headers and DNS number
to, as it looked like the most likely provider for him.
He also posted onto a Microsoft Publishing Group back in April,
then not until November when he started a Multi-group posting attack
onto alt.supp. sinusitis, medsci.homeopathy Nov.5, alt support.cancer,
alt.support.grief ****That takes a lot of Class, He must have **Bought
it somewhere (class), he didn't BRING ANY with him.. , lupus and
Heart Defects were also on his Roaming Robot list.
Hopefully ATT have taken care of it or forwarded the headers they
have to the correct ISP to make sure the Kid doesn't get another
provider before he's 30. Back to pen and paper for His school work,
then he can try to keep up....
/////////////
Anyway, I think it's gone, although trouble with some of our
multiple posts back and forth to each other on alt.supp.ep group, to
communicate what he was doing and which were fake posts (spoofs),
resulted in my Anti-Spam counts each morning being picked up by a
**reseller and, while average trash mails trapped were *30, they're now
*107, (many unreadable from Asia-- I don't even know why *they do that,
it Only makes us Target Products made there and NOT BUY ASIAN-- I tell
the stores why it's to go Back onto the shelf-- I don't buy Porn, Pills
and Trash from there, I won't buy Furniture from there either. (I know
most of the Integrated circuits etc. might start there, but those are
moving, for security too, to other countries in America or Europe
anyway.)
So an Anti-Spam and Anti VIral program is a must to **post here or
on Usenet Generally.
I Predict it'll be 2007 when Corporations start taking some of these
posters to Court for Denial of Service Attacks and 8-10 getting *major
Jail-Time plus Fines in excess of $400,000 each, will put a Deserved
Chill on any Kids who think this is a Fun way to spend a weekend.
Failing that, some of them will just start getting their own denial
of service attacks that'll make their own access useless. (We have a
'kid' on a uk astronomy group who thinks there are little green? men
building a secret civilization on Venus (300 degrees C on the
surface), and another who thinks there are similar colonies on the
Moon.)
Stay in School Kids, and finish Grade 8 Science. It'll pay off in
reduced costs later and improved chances of finding a Real Vocation.
Merry Christmas Everybody, and I hope 2007 is a Happy and Healthy
one for you all. G./
partials - 25 Dec 2006 18:27 GMT
> Sets of Headers showing the Timezone, Source ISP? and the att.net
> address they used as one of the onramps onto Groups posts were sent to
[quoted text clipped - 3 lines]
> chill onto the group and stopped the Other **valid posts here, by his
> Spoofing Software and fooling around.
Hi
That pond scum was posting via a newsgroup hosting service named Highwinds. I
had sent them the headers using their abuse reporting webpage at
http://www.highwinds-media.com/media/contact.aspx and received this following
reply from them after an exchange of emails and sending some more headers.
"Hello.
I have reported this to the provider that holds this account and asked them to
shut them off."
The ISP may have cancelled the account or terminated their newsgroup service or
they may have gotten a warning if it was the first and only offence. It all
depends on the ISP and a repeat would surely end it all. You'll find att in a
lot of tracebacks because they operate the backbone/
G. - 25 Dec 2006 21:55 GMT
> > Sets of Headers showing the Timezone, Source ISP? and the att.net
> > address they used as one of the onramps onto Groups posts were sent to
[quoted text clipped - 16 lines]
> depends on the ISP and a repeat would surely end it all. You'll find att in a
> lot of tracebacks because they operate the backbone/
Thank you.
The only headers I got, showed a different 'source' site than that,
but so long as he's off or Blacklisted is good enough.
I saw a program on TV two nights ago, about a group in the U.S. who
Hunt these, as a service to ISPs, and set Troll traps around various
websites and Newsgroups looking for them. M.soft and others are
helping (financing?) parts of this effort, as they suggested it could
damage the reputations of companies or reduce their profits if enough
people decided that the Internet was more trouble than the Results they
got from using it.
When I opened his one identity (he could have used several), he had
only been posting with that ID since about September, and only about 10
posts per month until November when the Groups sum and Posts went up to
more than 100 and 300 respectively. (I listed a few of the ones he or
his droid went onto from that one 'headers' search I did via this
Google link I use.)
Thanks anyway for finding where he was coming from. Hope he's off
or blacklisted for a longer period. (I don't understand why they'd
suggest 'if he does this again' when *I was able to list earlier the
groups he'd posted to--- it might be a Canned Response letter, but all
they have to do is open that One ID, and click on View Groups? and it
listed for me more than 30 groups he'd posted to in last ~10 days
before he found us.)
I suppose for now I'll give them the benefit of the doubt, unless
he returns. Since he was on about 30 groups, he probably wouldn't know
where any complaints came from, as there were probably a bunch from the
others as well.
Happy New Year, G./