Comments on: PDF Email Spam on the rise http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/ A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas. Tue, 24 Nov 2009 21:02:50 -0600 http://wordpress.org/?v=2.8.6 hourly 1 By: Stefan http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-163873 Stefan Fri, 17 Aug 2007 15:15:04 +0000 http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-163873 Wow, you have just narrowed it down to a block of 33.5 million addresses :P Wow, you have just narrowed it down to a block of 33.5 million addresses :P

]]> By: Julie http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-163097 Julie Wed, 08 Aug 2007 12:01:49 +0000 http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-163097 more on PDF offending spam emails traced to 210.233.109.31 et.al is OrgName: Asia Pacific Network Information Centre OrgID: APNIC Address: PO Box 2131 City: Milton StateProv: QLD PostalCode: 4064 Country: AU ReferralServer: whois://whois.apnic.net NetRange: 210.0.0.0 - 211.255.255.255 CIDR: 210.0.0.0/7 NetName: APNIC-CIDR-BLK2 NetHandle: NET-210-0-0-0-1 Parent: NetType: Allocated to APNIC NameServer: NS1.APNIC.NET NameServer: NS3.APNIC.NET NameServer: NS4.APNIC.NET NameServer: NS-SEC.RIPE.NET NameServer: TINNIE.ARIN.NET NameServer: DNS1.TELSTRA.NET Comment: This IP address range is not registered in the ARIN database. Comment: For details, refer to the APNIC Whois Database via Comment: WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry Comment: for the Asia Pacific region. APNIC does not operate networks Comment: using this IP address range and is not able to investigate Comment: spam or abuse reports relating to these addresses. For more Comment: help, refer to http://www.apnic.net/info/faq/abuse Comment: RegDate: 1996-07-01 Updated: 2005-05-20 OrgTechHandle: AWC12-ARIN OrgTechName: APNIC Whois Contact OrgTechPhone: +61 7 3858 3100 I hope this helps your search more on PDF offending spam emails traced to 210.233.109.31 et.al

is

OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU

ReferralServer: whois://whois.apnic.net

NetRange: 210.0.0.0 – 211.255.255.255
CIDR: 210.0.0.0/7
NetName: APNIC-CIDR-BLK2
NetHandle: NET-210-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: NS-SEC.RIPE.NET
NameServer: TINNIE.ARIN.NET
NameServer: DNS1.TELSTRA.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/info/faq/abuse
Comment:
RegDate: 1996-07-01
Updated: 2005-05-20

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3100

I hope this helps your search

]]> By: Julie http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-163096 Julie Wed, 08 Aug 2007 11:52:39 +0000 http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-163096 I noticed that the spammer is using (no subject) in the subject field or references to invoice, trading, portfolio and in the full header ( @uyvt ) which is a derivative of PDS file format used for binary images block this in your spam filter these cretans are jamming up my filter on a daily basis I noticed that the spammer is using
(no subject) in the subject field or references to
invoice, trading, portfolio and in the full header
( @uyvt ) which is a derivative of PDS file format used for binary images block this in your spam filter these cretans are jamming up my filter on a daily basis

]]> By: Securityphreak http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-162605 Securityphreak Fri, 03 Aug 2007 06:13:21 +0000 http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-162605 The larger anti spam software package already effectively filter out PDF spam, also depending on their false positives recognition capability. Here's an interesting article about PDF spam. It's a vendor white paper but informative nonetheless. http://www.gfi.com/whitepapers/pdf-and-image-spam.pdf The larger anti spam software package already effectively filter out PDF spam, also depending on their false positives recognition capability.

Here’s an interesting article about PDF spam. It’s a vendor white paper but informative nonetheless.

http://www.gfi.com/whitepapers/pdf-and-image-spam.pdf

]]> By: Perliukai #332 : nežinau.lt http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-162018 Perliukai #332 : nežinau.lt Thu, 26 Jul 2007 07:30:41 +0000 http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-162018 [...] kad plinta naujo tipo el. pašto šiukšlės (brukalai?) – su prisegtais PDF failais, kurių viduje - šiukšlintojų „komerciniai pasiūlymai“ ir aibės bet kokio teksto, skirto [...] [...] kad plinta naujo tipo el. pašto šiukšlės (brukalai?) – su prisegtais PDF failais, kurių viduje – šiukšlintojų „komerciniai pasiūlymai“ ir aibės bet kokio teksto, skirto [...]

]]> By: pdf email spams · TimblsBlog.com, the tech and gadget blog http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-161745 pdf email spams · TimblsBlog.com, the tech and gadget blog Tue, 24 Jul 2007 15:26:57 +0000 http://www.ghacks.net/2007/07/24/pdf-email-spam-on-the-rise/#comment-161745 [...] spams in the form of PDF files. it’s obviously not completely new, but i like the fact that Ghacks have sum up its [...] [...] spams in the form of PDF files. it’s obviously not completely new, but i like the fact that Ghacks have sum up its [...]

]]>