1. Forum
  2. Usenet
  3. NEWS.ADMIN.NET-ABUSE.USEN

  • Re: @@NCM Eternal September NoCem Bot-spam NoCeM notice (19 articles) 1

    From Adam W.@21:1/5 to [email protected] on Fri Oct 27 20:04:55 2023
    [email protected] wrote:

    Notice-ID: Eternal September NoCem Bot-spam.1698436802
    @@BEGIN NCM BODY
    <7e6c97d2-c@7f4-4df4-937d-da13f45b65f1> de.soc.misc <98599686-a@1c8-4955-bdbd-71d42c36b6ea> de.rec.sport.misc <ba96bd92-9@02e-4f10-8aef-7e3974d3ab42> de.sci.misc

    Looks like you changed something, Ray :)

    Something's wrong with these IDs. @ is inserted at the fixed position, and
    last character of the identifier (and @, and FQDN) is missing.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ray Banana@21:1/5 to All on Sat Oct 28 04:25:54 2023
    Thus spake [email protected]d (Adam W.)

    [email protected] wrote:
    Notice-ID: Eternal September NoCem Bot-spam.1698436802
    @@BEGIN NCM BODY
    <7e6c97d2-c@7f4-4df4-937d-da13f45b65f1> de.soc.misc
    <98599686-a@1c8-4955-bdbd-71d42c36b6ea> de.rec.sport.misc
    <ba96bd92-9@02e-4f10-8aef-7e3974d3ab42> de.sci.misc
    Looks like you changed something, Ray :)
    Something's wrong with these IDs. @ is inserted at the fixed position, and last character of the identifier (and @, and FQDN) is missing.

    If you take a closer look at these articles, you will find more
    indications that these articles are generated by a bot.

    There are thousands of these in de.*

    Please mail me for details. When I posted my observations about the
    From: addresses in this group, they were changed within 2 hours.

    --
    Пу́тін — хуйло́
    http://www.eternal-september.org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adam W.@21:1/5 to Ray Banana on Sat Oct 28 22:48:32 2023
    Ray Banana <[email protected]> wrote:

    Please mail me for details. When I posted my observations about the
    From: addresses in this group, they were changed within 2 hours.

    Hm, so spammers read this group... hopefully Thai ones don't.

    BTW, in recent NoCeMs I found a couple of false-positives:

    <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Spiros Bousbouras@21:1/5 to Adam W. on Sun Oct 29 02:39:44 2023
    On Sat, 28 Oct 2023 22:48:32 -0000 (UTC) [email protected]d (Adam W.) wrote:
    Ray Banana <[email protected]> wrote:

    Please mail me for details. When I posted my observations about the
    From: addresses in this group, they were changed within 2 hours.

    Hm, so spammers read this group... hopefully Thai ones don't.

    Perhaps it's a coincidence ?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adam W.@21:1/5 to Spiros Bousbouras on Sun Oct 29 04:43:56 2023
    Spiros Bousbouras <[email protected]> wrote:

    Hm, so spammers read this group... hopefully Thai ones don't.

    Perhaps it's a coincidence ?

    Maybe yes, maybe not. Why take chances?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)