CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

spam(at)uce.gov is dieing.

 
Post new topic   Reply to topic       All -> FavForums -> Knujon General Discussion [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Jason_m

Guest
IP: 66.114.*.*






PostPosted: Sat Dec 22, 2007 4:09 am    Post subject: spam(at)uce.gov is dieing.
Reply with quote

I've been getting lots of timeout bouncbacks from trying to forward spam to spam(at)uce.gov. At times upwards to 75 percent failure rate.

Back to top
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1113
Location: USA

PostPosted: Sat Dec 22, 2007 7:01 am    Post subject:
Reply with quote

Not today, but 2-3 days ago I was....

I forwarded the messages to

Code:
abuserejects

that would be @at
Code:
coldrain.net


In a way, that could be a good sign Razz People being pro-active, and forwarding their spam to their (and hopefully other services too) - instead of just deleting it....? Smile

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Jason_m

Guest
IP: 66.114.*.*






PostPosted: Mon Dec 31, 2007 4:13 am    Post subject: suspended submissions to the ftc
Reply with quote

I guess the ftc's servers are being overloaded. But anyway, when this happens, I suspend submissions to that address. Not only is it near useless since most are failing anyway, but the server has to wait the full timeout before finally failing it - which holds up the cue.

Back to top
brewt

SIRT Handler
Premium Member

Joined: May 29, 2007
Posts: 792
Location: USA
MIRT Premium

PostPosted: Mon Dec 31, 2007 9:38 am    Post subject:
Reply with quote

Knujon sends to this address on your behalf.

http://www.knujon.com/sendusspam.html wrote:
All items sent to Knujon are also forwarded to the FTC(uce.gov).


So the solution to your issue seems to be: stop sending to this address.

Back to top
View users profile Send private message
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2889

Premium

PostPosted: Mon Dec 31, 2007 3:28 pm    Post subject:
Reply with quote

I got an amusing bounce. I had coppied spam@uce.gov when I sent a report to a registrar. In order to get through the registrar's filters, I had to change all the decimal points in the URLs and IP addresses to " -dot- "

My messages apparently got through to the registrars, but bounced from uce.gov with complaints about a "dot-stuffed message."

Back to top
View users profile Send private message
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1113
Location: USA

PostPosted: Mon Dec 31, 2007 5:49 pm    Post subject:
Reply with quote

do all the knujon addresses dump to the spam@uce.gov address? I have a feeling they may...

I usually send to my personal address and whatever the main topic is (either rx, fakes, depositscam, etc).



Maybe they need a sneakernet delivery instead? hehe. the mailserver(s) just can't cope I guess.

I've been forwarding the "delay" messages (yes, the bounces from uce are for the most part "delay" messages, stating the delivery will be retried for 5 days or somesuch) to the abuserejects until someone deems it not necessary Smile

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1113
Location: USA

PostPosted: Fri Jan 04, 2008 2:12 am    Post subject:
Reply with quote

I haven't been closely monitoring the "delays" and "fails" but here's a slightly varied message I received today....

Quote:
----- The following addresses had permanent fatal errors -----
spam@uce.gov
(reason: 550 5.7.1 <spam@uce.gov>... Relaying denied. IP name lookup failed [209.198.81.49])
(expanded from: <rx@coldrain.net>)

----- Transcript of session follows -----
... while talking to spammy2.uce.gov.:
>>> DATA
<<< 550 5.7.1 <spam@uce.gov>... Relaying denied. IP name lookup failed [209.198.81.49]
550 5.1.1 spam@uce.gov... User unknown
<<< 503 5.0.0 Need RCPT (recipient)

Final-Recipient: RFC822; rx@coldrain.net
X-Actual-Recipient: RFC822; spam@uce.gov
Action: failed
Status: 5.7.1
Remote-MTA: DNS; spammy2.uce.gov
Diagnostic-Code: SMTP; 550 5.7.1 <spam@uce.gov>... Relaying denied. IP name lookup failed [209.198.81.49]
Last-Attempt-Date: Thu, 3 Jan 2008 21:05:40 -0500


Perhaps they couldn't cope with Knujon's relaying of the spam messages; and so finally shut off accepting spam from knujon?

No big deal here really, since I have SpamCop set to forward public reports to spam@uce.gov anyways; and haven't received any fails on that front (though SpamCop may drop them in the bit-bucket....? Who knows hehehe).

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1113
Location: USA

PostPosted: Fri Feb 08, 2008 3:09 am    Post subject:
Reply with quote

And it's happening again Smile

Quote:
**********************************************
** THIS IS A WARNING MESSAGE ONLY **
** YOU DO NOT NEED TO RESEND YOUR MESSAGE **
**********************************************

The original message was received at Thu, 7 Feb 2008 10:28:46 -0500 (EST)
from host49.duncable.cust.sover.net [209.198.81.49]

----- Transcript of session follows -----
uce@pug.ftc.gov... Deferred: Connection reset by localhost.uce.gov.
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old

Final-Recipient: RFC822; spam@uce.gov
X-Actual-Recipient: RFC822; uce@pug.ftc.gov
Action: delayed
Status: 4.4.2
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from localhost.uce.gov.
Last-Attempt-Date: Thu, 7 Feb 2008 19:23:58 -0500 (EST)
Will-Retry-Until: Tue, 12 Feb 2008 10:28:46 -0500 (EST)


Not too bad, I've yet to receive any "Fail" messages from spam@uce...

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
epgeek

Guest
IP: 205.172.*.*






PostPosted: Wed Mar 19, 2008 2:51 pm    Post subject: Posting to spam(at)uce.gov
Reply with quote

Who cares? I've sent 1000+ spam emails to spam(at)uce.gov and have never seen any action. Have these bureaucrats with their bloated federal budget accomplished anything in the war on Spam??

Back to top
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2889

Premium

PostPosted: Wed Mar 19, 2008 2:59 pm    Post subject:
Reply with quote

spam at uce.gov is just documenting spam, not investigating it. They don't claim to investigate it. Other agencies like SEC do say they follow up.

Back to top
View users profile Send private message
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1113
Location: USA

PostPosted: Thu Mar 20, 2008 5:33 pm    Post subject: Re: Posting to spam(at)uce.gov
Reply with quote

epgeek wrote:
Who cares? I've sent 1000+ spam emails to spam(at)uce.gov and have never seen any action. Have these bureaucrats with their bloated federal budget accomplished anything in the war on Spam??
Im guessing once the government has a spammer "in holding" they will THEN go through the spam@uce.gov database(s) and attempt to match fingerprints and such....between the data they confiscated at the time of arrest, with the data submitted to them via this address.

So, in due time, your spam contributions sent to this address COULD be aiding a spammer in getting taken down Wink

Atleast, that's one way I think of it....I mean, how else can these news reporting sites and anti-spammer sites, etc. figure out a spammer has sent some thousands of messages...? Surely there must be data-footprints left behind within the messages, from the machines they've hijacked, etc.\

I can't find any links at the moment, but I know we've seen and read them in news releases, press releases, etc...they tend to quote some "high number" of either infected machines, numbers of messages transmitted, etc.


Of course, not everyone reports to the SEC/FTC though...so who knows, the numbers could even be higher.

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
epgeek

Guest
IP: 205.172.*.*






PostPosted: Tue May 13, 2008 6:41 pm    Post subject: collecting evidence against spammers?
Reply with quote

It's a really nice thought that maybe the feds are taking all this input and building a case against the spammers. However its just as likely that these civil serpents are totally clueless and offer spam@uce.gov as a worthless placebeo.

Back to top
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2889

Premium

PostPosted: Wed May 14, 2008 6:33 pm    Post subject:
Reply with quote

I don't know about spam at uce.gov, but askdoj at usdoj.gov occasionally bounces due to a full mailbox, so they aren't just blackholing them.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Knujon General Discussion All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer