Apr
06
PumbaStick, or Take Two of “That which we don’t do”
Pre-consciously inspired by Vernon Schryver, an entity had these things to say today:
Feb
15
Suomen Perintätoimisto Oy: Spammer protected by TeliaSonera
As of November, Suomen Perintätoimisto have been contaminating the customer servers of TeliaSonera (inet.fi) with their spam. They openly admit the use of a purchased list from Bisnode.
TeliaSonera abuse response: “B2B spam is legal.” Perhaps so, but do you want your entire customer base to suffer because you allow a spammer to abuse the facilities used by everyone? Besides, the processing of outdated and erroneous personal information is illegal, and the spamming of natural persons is illegal as well.
The hosts involved are in 62.71.2.0/24.
Oct
20
KeyUp / Sivona / DSN / Spam-Sauvola
Please find enclosed a few recordings of harassing telephone calls made from +358-41-3633495, the registered telephone number in keyup.fi, Dysnomia Oy. The voice does not belong to “Katariina”, obviously, so it’s “Niklaus”, and even though their Finnish is not native (rather Estonian-influenced), it clearly isn’t spoken by Kenyans either (w.r.t. the registered owners of Dysnomia Oy) or Arabs (w.r.t. Mohammed Sahran, the registered owner of dsn.fi, one of their spamming domains).
Aug
11
Streamsend: ESP Spams for Its Own Marketing Department
Streamsend, the ESP service of ISP EZ Publishing, is sending bulk email to an email address that hasn’t been live since the 1990s. The email advertises EZ Publishing webhosting and development services.
Apr
09
March 2016 in Spamtraps: ESPs and Social Networks
ESP mail seen in spamtraps March 2016
Coming in a little late this month. The percentage of ESP sent mail vs all mail seen in the spamtraps is only 0.6% this month; it has to do both with seeing less ESP mail (about 80% of last month’s figures), and a huge increase in botnet spam. Technically, this is a top 11 list this month because Topica and Oracle Marketing Cloud managed to match spam counts so closely that a comparison would be meaningless.
Mar
04
February 2016 in Spamtraps: ESPs
(And a word about some social networks)
ESP mail seen in spamtraps February 2016
Do remember to read this ’til the bitter end… it’s a tad longer than usual.
Let’s start the post that includes spam from MAAWG 36 week (hi y’all! great catching up with you!) with the standard stuff. Somewhere during the latter part of the month, we collated all of Oracle Marketing Cloud into one; no more separate Responsys, Eloqua and RightNow. Having said that, the contributions from the latter two are so small as to be practically meaningless.
The percentage of ESP sent mail vs all mail seen in the spamtraps is 1.5% this month.
Dec
17
Effortia, a British ESP, and an anonymous Finnish spamming service
Growmail.co.uk will probably have reason to take a look at hulabaloo.net / huippudiili.net (two anonymized domains sending materials in Finnish) now that asuntojenmyynti.fi used their services to spam. It would be interesting to see the contents of the FI-LISTA.
Nov
27
Effortia goes Denmark
Snakker du dansk, Ville? Oh, but you don’t need to, ‘cuz your Danish collaborator is a guy from Helsinki.
Sep
15
Effortia Oy / Asuntojenmyynti.fi
Spamming once again, this time through the anonymous Huipputarjous.biz who have managed to obtain services from Elastic Email. Going steadily towards the lowest end of bottom feeding spam service providers. (This is not aimed at Elastic; rather Huipputarjous.biz and all of the other anonymous “all the businesses in the YTJ must have participated in an online competition that nobody has heard of and only started last week” spammers.)
Spamming from 162.254.227.0/25.