Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 [2] 3 4 5 Thema versenden
Sehr heißes Thema (Mehr als 25 Antworten) Svetlana <nebesnaya55@yahoo.co.uk> (Gelesen: 17026 mal)
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5269
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #15 - 15. Dezember 2010 um 20:06
 
@ vierauge

Spoiler:
Blöde Kuh  Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5269
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #16 - 27. Dezember 2010 um 21:36
 
Hello my dear!!Thank you for letter!!I waiitng for to see you ,fall in love and stay together for all life!!Yes I think we dont know each others and for to know each othesr better you coming to me,yes,I just thinking and writing to you about it,I thought about you all day long non stop;) and I thought that we dont know each others but after this your letter I can feel that we are connected and it is our destiny for us , I have very very big hope that we was born for each thers and God gave the chanse to us for to be happy together ,I was today n Chirch and prayed for us,you know,my grandpa was prist;) I like to go to Chrirch sometime not often ,but whan I feel that I want;) And you? Did you been for Christmass in Chirch?
My dear I waiting for your letter!!!
YOurs baby
 
Spoiler:
Return-Path: <nebesnaya55@yahoo.co.uk>
Delivery-date: Mon, 27 Dec 2010 14:46:06 +0100
Received: from [195.4.92.27] (helo=17.mx.freenet.de) by 0.mbox4.freenet.de with esmtpa (ID exim) (Exim 4.72 #3) id 1PXDOo-000347-IR for ; Mon, 27 Dec 2010 14:46:06 +0100
Received: from nm7-vm1.bullet.mail.ird.yahoo.com ([77.238.189.223]:44487) by 17.mx.freenet.de with smtp (port 25) (Exim 4.72 #3) id 1PXDOo-0005DI-CU for ; Mon, 27 Dec 2010 14:46:06 +0100
Received: from [77.238.189.53] by nm7.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2010 13:46:06 -0000
Received: from [212.82.108.241] by tm6.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2010 13:46:06 -0000
Received: from [127.0.0.1] by omp1006.mail.ird.yahoo.com with NNFMP; 27 Dec 2010 13:46:06 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 146640.35800.bm@omp1006.mail.ird.yahoo.com
Received: (qmail 34421 invoked by uid 60001); 27 Dec 2010 13:46:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1293457565; bh=hAXNSv1RV/VmU+9T2afAZ9Jtl2MnRYT65V8bmhMnzm0=; -Version:Content-Type; GVD+8fUoOpr3o=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;  s=s1024; d=yahoo.co.uk;  -Version:Content-Type;  dFskmZIB9tr2E=;
Message-ID: <891701.31114.qm@web29106.mail.ird.yahoo.com>
X-YMail-OSG: rgpaSmgVM1nd_nqDmM6Q5lN3U_WeAIihMAOe.kpX_wqZ5h3 v3K1YS1Am_.kvOZsS.g2G9LDFqE0BrpfzAGlrINgsz3cjkQgXGDCkh1ZMG0E jare9X_1KZz._HIIiOxhXFn6wWTrwEacSltXr6O02Q2WxUGs1cP4UfcvkkNi Jzfgz8.wwKdjxf_.h9Aux5hN2HxcZb5ZWUx0rneDW58us5I5OBeKsfALju_8 6tbPHnYz1dhQAUUIXkYLfoCLVwn.yz3.mPX7nbaL6Akn.VMSOdHSN.VlZFMw -
Received: from [213.227.247.142] by web29106.mail.ird.yahoo.com via https; Mon, 27 Dec 2010 13:46:05 GMT
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
Date: Mon, 27 Dec 2010 13:46:05 +0000 (GMT)
From: "Svetlana Bybine" <nebesnaya55@yahoo.co.uk>
Subject: RE: Svetlana
To: 
In-Reply-To: <0A641304FD9B4FD0940DA7181C72E98E@your0595711724>
MIME-Version: 1.0
Content-Type: multipart/alternative;
     boundary="----=_NextPart_000_0016_01CBA5D5.5D064460"
X-Warning: yahoo.co.uk is listed at postmaster.rfc-ignorant.org
X-SpamFlt-Status: Not Detected
X-KASFlt-Status: {received from trusted sender <nebesnaya55@yahoo.co.uk>: white list}
X-KASFlt-Status: Envelope from:
X-KASFlt-Status: Version: 4.4.2 (May 26 2010 17:02:10)
X-KASFlt-Status: Method: white email list
X-KASFlt-Status: Status: trusted
X-KASFlt-Status: Rate: 0
X-KASFlt-Status: Profiles 18174 [Dec 27 2010]
X-SpamFlt-Phishing: Not Detected
X-Warning: yahoo.co.uk is listed at abuse.rfc-ignorant.org
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994
X-purgate-ID: 149285::1293457566-00002B5A-7BF25642/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 



wenn das kein Scam ist, fresse ich den Besen  Zwinkernd

vor allem nach dem letztem Brief
  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11787
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #17 - 28. Dezember 2010 um 08:44
 
Mail kommt über Nikolaev.

Code
Alles auswählen
213.227.247.142 - Geo Information
IP Address 213.227.247.142
Host 213.227.247.142
Location  UA, Ukraine
City Nikolaev, 16 -
Organization Nikolaev
ISP Farlep-Invest OJSC
AS Number AS6703 Farlep-Invest OJSC
 



Zitat:
Date: Mon, 27 Dec 2010 13:46:05 +0000 (GMT)
From: "Svetlana Bybine" <nebesnaya55@yahoo.co.uk>
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30401
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #18 - 28. Dezember 2010 um 15:21
 
Headhunter schrieb on 27. Dezember 2010 um 21:36:
wenn das kein Scam ist, fresse ich den BesenZwinkernd

vor allem nach dem letztem Brief

Der Brief hat einen ganz anderen Schreibstil! Sieht fast danach aus, als ob da jetzt jemand anderes am Computer sitzt.
Auch stört mich bei der Geschichte der englische Yahoo-Account!
  
Zum Seitenanfang
 
IP gespeichert
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5269
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #19 - 01. Januar 2011 um 22:07
 
Happy New Year to you! I been with family we celibrated New Year together,we cook all together all day tasty and unussial dishes and my sister with her boyfriend bring a lot fireworks it was great but dangurace cause one of firework whan we light it come strait to her boyfriend and if he did not moove at this second it could come strait to hes leg and it could be very bad...On the neighbor has managed to break to itself a nose a New Year's pie. How such in general it is possible? In his family have arranged the cheerful game which purpose was to eat as much as possible pie put on a floor, without concerning with his hands. Players bent over a plate and pinched a cake like a dog to rough delight of all present. The head of the family wasn't kept and has failed a head in a pie. At falling the man has broken to itself a nose about a plate.And you? Is everybody ok there are?
Here very cold and I dreaming about summer,I dont know why but after New Year I mean second day I feel a little sad as it is show that time go so fast;( And how do you feel?
I going home as busses drive rare...
I kiss you tenderly and waiting for your letter!
Svetlana

Spoiler:
X-Kaspersky: Checking 
X-Kaspersky: Checking 
X-Kaspersky: Checking 
Return-Path: <nebesnaya55@yahoo.co.uk>
Delivery-date: Sat, 01 Jan 2011 21:57:57 +0100
Received: from [195.4.92.12] (helo=2.mx.freenet.de) by 1.mbox4.freenet.de with esmtpa (ID exim) (Exim 4.72 #3) id 1PZ8WS-0000ta-UW ; Sat, 01 Jan 2011 21:57:56 +0100
Received: from nm11-vm1.bullet.mail.ird.yahoo.com ([77.238.189.205]:31801) by 2.mx.freenet.de with smtp (port 25) (Exim 4.72 #3) id 1PZ8VI-0001H0-MY for ; Sat, 01 Jan 2011 21:56:44 +0100
Received: from [77.238.189.232] by nm11.bullet.mail.ird.yahoo.com with NNFMP; 01 Jan 2011 20:56:44 -0000
Received: from [212.82.108.118] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 01 Jan 2011 20:56:44 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 01 Jan 2011 20:56:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 325511.51596.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 37934 invoked by uid 60001); 1 Jan 2011 20:56:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1293915404; bh=CXbsBA1ZrCY3p8RMjJN+JHudQsQPD56vYmQEvgZZbhQ=; -Version:Content-Type; HryxzyDS6LP6g=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;  s=s1024; d=yahoo.co.uk;  -Version:Content-Type;  Za7KfnXfgNkdg=;
Message-ID: <113678.37927.qm@web29113.mail.ird.yahoo.com>
X-YMail-OSG: swfXBf8VM1lvOdhBdaa9M6p6EMGOULg1CtfVXmHILCTGmj6 fhI81VDEtVM6saQcFc0dng5x6l_nCkjBatxFT_IKtY6iR_1MJp0Y9P1kinMA cBKFhxXn5Pev9cu8tZ1N4r9PNmFCYlYgUIbS84uWawWEO9lncFPmJ0jEEjBT 6yTLFZFATMGFIszb16jD5HXZtT1JtYKd_Mcz3DMNwO0vsXixZAIqmtN9EROQ 04inKD7IPIcGPP05wTRiyTAZTlrP0Z5qxznOWTEEAAgTgCOVlxfWY1q_nSlY -
Received: from [95.134.101.161] by web29113.mail.ird.yahoo.com via https; Sat, 01 Jan 2011 20:56:43 GMT
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
Date: Sat, 1 Jan 2011 20:56:43 +0000 (GMT)
From: "Svetlana Bybine" <nebesnaya55@yahoo.co.uk>
Subject: RE: Svetlana
To: 
In-Reply-To: <2C742B9D81EF479B94E9D3A42EB60A8F@your0595711724>
MIME-Version: 1.0
Content-Type: multipart/alternative;
     boundary="----=_NextPart_000_0039_01CBA9FF.5C219350"
X-Warning: yahoo.co.uk is listed at postmaster.rfc-ignorant.org
X-SpamFlt-Status: Not Detected
X-KASFlt-Status: {received from trusted sender <nebesnaya55@yahoo.co.uk>: white list}
X-KASFlt-Status: Envelope from:
X-KASFlt-Status: Version: 4.4.2 (May 26 2010 17:02:10)
X-KASFlt-Status: Method: white email list
X-KASFlt-Status: Status: trusted
X-KASFlt-Status: Rate: 0
X-Warning: yahoo.co.uk is listed at abuse.rfc-ignorant.org
X-KASFlt-Status: Profiles 18270 [Jan 01 2011]
X-SpamFlt-Phishing: Not Detected
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994
X-purgate-ID: 149285::1293915404-00000BA1-1C832FED/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 


 
  
Zum Seitenanfang
 
IP gespeichert
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5269
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #20 - 01. Januar 2011 um 22:13
 
Kommt über Kiev

Code
Alles auswählen
95.134.101.161 - Geo Information
IP Address 	95.134.101.161
Host 	161-101-134-95.pool.ukrtel.net
Location 	UA UA, Ukraine
City 	Lvov, 15 -
Organization 	Ukrtelecom IP network
ISP 	JSC Ukrtelecom
AS Number 	AS6849 JSC UKRTELECOM,
Latitude 	49°83'33" North
Longitude 	24°00'00" East
Distance 	796.73 km (495.06 miles) 



Zitat:
Date: Sat, 1 Jan 2011 20:56:43 +0000 (GMT)
From: "Svetlana Bybine" <nebesnaya55@yahoo.co.uk>
Subject: RE: Svetlana
« Zuletzt geändert: 01. Januar 2011 um 22:35 von Headhunter »  
Zum Seitenanfang
 
IP gespeichert
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5269
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #21 - 10. Januar 2011 um 21:28
 
I kiss you
 
Spoiler:
Return-Path: <nebesnaya55@yahoo.co.uk>
Delivery-date: Mon, 10 Jan 2011 09:23:42 +0100
Received: from [195.4.92.16] (helo=6.mx.freenet.de) by 0.mbox4.freenet.de with esmtpa (ID exim) (Exim 4.72 #3) id 1PcD2U-0004po-9m for ; Mon, 10 Jan 2011 09:23:42 +0100
Received: from nm9.bullet.mail.ird.yahoo.com ([77.238.189.35]:42750) by 6.mx.freenet.de with smtp (port 25) (Exim 4.72 #3) id 1PcD2U-0006B1-24 for ; Mon, 10 Jan 2011 09:23:42 +0100
Received: from [77.238.189.51] by nm9.bullet.mail.ird.yahoo.com with NNFMP; 10 Jan 2011 08:23:41 -0000
Received: from [212.82.108.252] by tm4.bullet.mail.ird.yahoo.com with NNFMP; 10 Jan 2011 08:23:41 -0000
Received: from [127.0.0.1] by omp1017.mail.ird.yahoo.com with NNFMP; 10 Jan 2011 08:23:41 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 845683.20993.bm@omp1017.mail.ird.yahoo.com
Received: (qmail 62458 invoked by uid 60001); 10 Jan 2011 08:23:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1294647821; bh=bc3Z3mNF2c7QgEsRsrdICMObGTZFMvmYYm6/0p0Gzkg=; -Version:Content-Type; qAZzNmlHq8chQ=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;  s=s1024; d=yahoo.co.uk;  -Version:Content-Type;  lKbAJa/zh857c=;
Message-ID: <749223.53853.qm@web29103.mail.ird.yahoo.com>
X-YMail-OSG: WFARaKsVM1kKck7ODUX7nH3hJPWze1W3KB7H9kp2nn3gB26 Os.qDC.ycAPq5r_H3O8Vt4075zC82FhyZrkJTCiNTN1sDpeSvml6oESC6F1k smVqUbn5N165KOy6a_2VyvHq2_SzTsMlYPnAGhyo81hrzjFpNkbAquthVJyG NqcMt9v1.8n_67SgWiWnUbSQ.fxgbFS.PHZ7Hcm_ctarxe5X.17rRCAgT4Yq XVVkHfWTj4984xbfj8.Z0DyuVjaue.cWV4VXvArVoKiS9nWTsW5f2MuUHhOk -
Received: from [95.134.12.85] by web29103.mail.ird.yahoo.com via https; Mon, 10 Jan 2011 08:23:41 GMT
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
Date: Mon, 10 Jan 2011 08:23:41 +0000 (GMT)
From: "Svetlana Bybine" <nebesnaya55@yahoo.co.uk>
Subject: RE: Svetlana
To: 
In-Reply-To: <85FDFF2E63B448D6B22A1035FDE45A4E@your0595711724>
MIME-Version: 1.0
Content-Type: multipart/alternative;
     boundary="----=_NextPart_000_002A_01CBB0E4.9190A940"
X-SpamFlt-Status: Not Detected
X-KASFlt-Status: {received from trusted sender <nebesnaya55@yahoo.co.uk>: white list}
X-KASFlt-Status: Envelope from:
X-KASFlt-Status: Version: 4.4.2 (May 26 2010 17:02:10)
X-KASFlt-Status: Method: white email list
X-KASFlt-Status: Status: trusted
X-KASFlt-Status: Rate: 0
X-KASFlt-Status: Profiles 18345 [Jan 09 2011]
X-Warning: yahoo.co.uk is listed at postmaster.rfc-ignorant.org
X-SpamFlt-Phishing: Not Detected
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994
X-Warning: yahoo.co.uk is listed at abuse.rfc-ignorant.org
X-purgate-ID: 149285::1294647822-00001DC9-0F092627/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 

  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11787
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #22 - 11. Januar 2011 um 00:36
 
Mail kommt über Sumy.

Code
Alles auswählen
95.134.12.85 - Geo Information
IP Address 95.134.12.85
Host 85-12-134-95.pool.ukrtel.net
Location  UA, Ukraine
City Sumy, 21 -
Organization Ukrtelecom IP network
ISP JSC Ukrtelecom
AS Number AS6849 JSC UKRTELECOM,
 



Zitat:
Date: Mon, 10 Jan 2011 08:23:41 +0000 (GMT)
From: "Svetlana Bybine" <nebesnaya55@yahoo.co.uk>
  
Zum Seitenanfang
 
IP gespeichert
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5269
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #23 - 11. Januar 2011 um 17:24
 
vierauge schrieb on 11. Januar 2011 um 00:36:
Mail kommt über Sumy.

die hat auch bald ganz Ukraine durch!!
  
Zum Seitenanfang
 
IP gespeichert
 
Wesermann
Forum Administrator
*****
Offline


I love Anti-Scam

Beiträge: 34918
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #24 - 11. Januar 2011 um 18:03
 
@ rexmundi

Die soll Dir mal schreiben, wo sie wohnen will.

Hier gehts quer durch da kann was nicht stimmen. 
Entweder sie ist oft auf Reisen, dann könnte man das vielleicht noch erklären oder das die Einlieferung über Yahoo willkürlich stattfinden. Allerdings würde dann die Einlieferung über Nikolaev keinen Sinn ergeben, weil es eine völlig andere IP ist. 

Sobald wir eine Wohnortangabe haben, kann die gute dann wohl auch umziehen. Denn egal  wo sie wohnen will mindestens eine Einlieferung passt eh nicht zum Wohnort.

Die 2. Erklärung wäre mobile Einlieferung, werde mir das mal anschauen.
« Zuletzt geändert: 12. Januar 2011 um 16:35 von Wesermann »  
Zum Seitenanfang
 
IP gespeichert
 
Wesermann
Forum Administrator
*****
Offline


I love Anti-Scam

Beiträge: 34918
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #25 - 11. Januar 2011 um 18:27
 
Also alle Mails, die eine 95. IP haben, weden über den gleichen Anbieter UKRTELNET
Ukrtelecom IP eingeliefert, eintweder über Sumy oder Lviv bzw. zentral über Kiew.
Die Mail die über Nikolaev (213. IP) kommt über einen anderen Anbieter. (Alkar Teleport technical staff) Einen Hinweis, dass die auch mobiles Internet anbieten habe ich allerdings nicht gefunden.
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30401
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #26 - 12. Januar 2011 um 16:35
 
Es gibt jetzt verschiedene Varianten:
die 95er IP ist der Heimcomputer, auf dem eine besseres Übersetzungsprogramm installiert ist. Die verschiedene Herkunft innerhalb des Verbreitungsgebietes des Providers lässt sich durch die IP-Knappheit begründen und sollte uns keine grauen Haare machen.

Die 213er IP zeigt ein völlig anderes Bild. Da scheint ein saumäßig schlechtes Übersetzungsprogramm am Werk zu sein (wenn überhaupt) und will so garnicht zu den anderen Mails passen.

Code
Alles auswählen
IPv4-adress:  213.227.247.142

inetnum:    213.227.247.128 - 213.227.247.255
netname:    AT-LL
descr:    Nikolaev
country:    UA
admin-c:    AT4476-RIPE
tech-c:   AT4476-RIPE
status:   ASSIGNED PA
mnt-by:   FARLEP-INVEST-MNT

role:     Alkar Teleport technical staff
address:    Dniepropetrovsk, Ukraine
 



Was es mit diesem Alkar aufsich hat, kann ich auch nicht sagen. Zur Zeit habe ich da eine Filmdownloadseite und eine Gamesseite gefunden. Ich vermute, dass es da aber noch einen Freemailer geben sollte, über den diese Mail gekommen ist.

Laut robtex hat aber auch Alkar für verschiedene Regionen eigene IP-Kreise. Möglich, dass Nikolaev tatsächlich die Herkunftsregion ist.
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30401
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #27 - 12. Januar 2011 um 16:45
 
Wir kommen der Sache wohl langsam näher. Ich muss jetzt allerdings herausfinden, was sich hinter GOLClient verbirgt, eine Software von Alkar Teleport entwickelt wurde.
Ich habe da eine Userseite gefunden, auf denen die Gäste, die GOLClient benutzen, zwar nicht namentlich aufgeführt sind, dafür aber die auf deren Rechnern installierte Software.
« Zuletzt geändert: 12. Januar 2011 um 16:52 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Wesermann
Forum Administrator
*****
Offline


I love Anti-Scam

Beiträge: 34918
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #28 - 12. Januar 2011 um 16:53
 
@ Uli

Also wenn man bei What is my IP die IP aus Nikolaev eingibt, dann bekommt man die Auskunft, dass der Anbieter 3 Mal in Blacklist gelistet ist

spam.dnsbl.sorbs.net
b.barracudacentral.org
dnsbl-3.uceprotect.net

Zitat:
UCEPRORECT
Summary
Status:      Active
Terms:      Free
Zones:      3
Website:      www.uceprotect.net
Removal:      www.uceprotect.net/en/index.php?m=7&s=0
Lookup:      www.uceprotect.net/en/rblcheck.php
Contact:      www.uceprotect.net/en/index.php?m=8&s=0
Background

uceprotect.net is a DNS blacklisting service that is comprised of three distinct zones: dnsbl-1.uceprotect.net, dnsbl-2.uceprotect.net, and dnsbl-3.uceprotect.net. Each zone has different listing criteria, all of which are extremely important to understand before using any zone within the service. While DNS blacklists by nature can be controversial, uceprotect.net is perhaps one of the most controversial of them all.

uceprotect.net works with over 50 other partners to help them gather information on servers that have been seen sending spam. Every tactic is used to locate which servers are sending spam, from spamtraps to third party reports, each of the 50 partners untimely communicates their findings back to useprotect.net. From there, useprotect.net will determine which of their three zones the IP address should be listed in.

useprotect.net is unforgiving with their listing policy, with a core belief that "people learn by consequence". As a result of uceprotect.net's unforgiving listing polices, there is significant misinformation about their service written at other sources. uceprotect.net does not charge for delisting, delisting happens automatically as soon as spam has ceased, and no special treatment is given to partners or anyone in particular with regard to listing or delisting. uceprotect.net does have an expedited delisting service in which there is a fee, though it is only applicable to certain levels of listings.
Listing criteria

Listing in useprotct.net is somewhat unique compared to other DNS blacklists, due to the three distinct listing zones that are made available. Zones range from level one to level thee. Level one contains individual IP addressees, level two listings are escalations to containing subnets surrounding level one addresses, and level three, contains even larger subnets surrounding level two listings. This listing criteria essentially covers the broadest range of IP addresses possible.

If a set of IP addresses is seen spamming, it will start with a listing in the level one list. If within seven days, that spam has not stopped, the listing will escalate to contain much broader ranges of IP addresses. Essentially a level one listing may contain up to 255 IP addresses; if that is escalated to a level two listing, the number of IP addresses may be as high as tens of thousands. Finally, if still no action is taken against the spammers, a level three listing can potentially block IP ranges that contain entire service providers, which could mean hundreds of thousands of listed IP addresses.

In all cases, it only takes spam to stop for a total of seven days, in which case the listing will be removed. Though, with such large ranges being blocked, it can often be near impossible to stop all spam from hundreds of thousands of hosts for a period of seven days. Even if such a feat were possible, as soon as another spam was detected, the listing process would start all over again.
Zones
dnsbl-1.uceprotect.net

This is uceprotect.net's primary first level zone. If you find yourself in this blacklist, it generally means your server has inadvertently been sending spam. Track down the source of the spam, prevent it from happening again, and your IP will be delisted in seven days.
dnsbl-2.uceprotect.net

This is uceprotect.net's secondary level zone. Allocations less than /26 will be automatically be removed if no additional abuse is detected. Allocations of /25 will be allowed to expire only if there are less than two IP addresses listed in the level one blacklist.

A /24 range will expire if four or less IP addresses remain in Level one.

useprotect.net uses a formula for all further delisting calculations within the level two zone:

(Netmask - 1) = Abuser IP's + (Abuser IP's at Netzmask + 1)

For example, a /23 network range will be removed when nine or less IP addresses remain, a /22 network range will be removed if fourteen or less IP addresses remain, and a /21 network range will be removed if twenty-four or less IP addresses remain.

Furthermore, in order for a network range to be removed from a level two listing, that IP address must have already been removed from a level one listing.

Level two listings can usually only be removed at the request of your upstream service provider.
dnsbl-3.uceprotect.net

This is uceprotect.net's third level zone. If after all the above listings in level two and level one have been worked out, and a level three listing still remains, the best you can do is complain to the ASN for which spam continues to come from, or take your business elsewhere. There is nothing an end server administrator can do to influence uceprotect.net's level three blacklist zone.
Removal Process

As an end user administrator of an email server, you can become delisted out of the level one uceprotect.net DNS blacklist by simply correcting the spam that was seen to come from your server, and waiting seven days. If seven days is too long of a wait, for a fee of 50 Euros per IP address, you can have your addresses immediately removed.

Naturally delisting in seven days, or even paid delisting, can only happen for IP space in which you are in control of. If your IP address is a leased or shared IP address, and part of a larger network, the network owner will have to work with uceprotect.net for delisting. uceprotect.net's policy is that it is not your responsibility to do the work of your upstream provider; the upstream must be the one to correct the problem.

A level two delisting will usually require significant work, as well as policy change on how spam is dealt with on behalf of the upstream that is providing leased or shared IP services. A level three delisting will be much like a level two delisting, however, the most challenging of all. As level three listings are comprised of large ISP's, it may be impossible to have them make the needed changes to meet uceprotect.net's delisting criteria. In those cases, you can search out a new provider, or chose to no longer support this particular DNS blacklist.
Related Articles

    * Check to see if an IP is blacklisted
    * What is a DNSBL (blacklist)?
    * Ask for help to diagnose and resolve listing issues
« Zuletzt geändert: 12. Januar 2011 um 16:56 von Wesermann »  
Zum Seitenanfang
 
IP gespeichert
 
ChrisCross
Ex-Mitglied


Re: Svetlana <nebesnaya55@yahoo.co.uk>
Antwort #29 - 22. Januar 2011 um 00:34
 
Siehe Elena <nebesnaya579@yahoo.com> Beitrag #13 !!!!!!
« Zuletzt geändert: 03. März 2011 um 04:20 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1 [2] 3 4 5
Thema versenden
Link zu diesem Thema