tag:blogger.com,1999:blog-11374951.post111672038840445238..comments2023-07-28T16:05:09.574+00:00Comments on iDeceive: Pump and Dump: CWTDSpotterhttp://www.blogger.com/profile/12687960542974310602noreply@blogger.comBlogger3125tag:blogger.com,1999:blog-11374951.post-1117154982719602022005-05-27T00:49:00.000+00:002005-05-27T00:49:00.000+00:00Three more have arrived. The first was sent from 6...<B>Three</B> more have arrived. The first was sent from 63.146.40.33 (WHOIS: Qwest Communications, delegated to New Knoxville Telephone, Ohio, USA) on Thu, 26 May 2005 01:58:34 -0000. The second was sent from 220.87.74.124 (WHOIS: Kornet, Korea) on Thu, 26 May 2005 05:30:35 -0000. The third was sent from 220.89.214.8 (WHOIS: Kornet, Korea again) on Thu, 26 May 2005 11:57:51 -0000. None of these source addresses have reverse DNS addresses configured. No wonder refusing mail from such hosts is a popular anti-spam technique.Spotterhttps://www.blogger.com/profile/12687960542974310602noreply@blogger.comtag:blogger.com,1999:blog-11374951.post-1117071269700324892005-05-26T01:34:00.000+00:002005-05-26T01:34:00.000+00:00Another instance has arrived, sent from 203.252.19...Another instance has arrived, sent from 203.252.199.139 (WHOIS: SookMyung Women`s university, Seoul, Korea) on Wed, 25 May 2005 06:08:14 -0000.Spotterhttps://www.blogger.com/profile/12687960542974310602noreply@blogger.comtag:blogger.com,1999:blog-11374951.post-1116809548473634142005-05-23T00:52:00.000+00:002005-05-23T00:52:00.000+00:00This is starting to look a lot more like tradition...This is starting to look a lot more like traditional pump and dump now -- two more CWTD spams have arrived. One was received from 61.51.63.87 (WHOIS: China Network Communications Group Corporation, Beijing province network) on Sun, 22 May 2005 13:48:37 -0000; the other was received from 62.84.24.156 (WHOIS: Telia MultiCom Dati AS, Latvia) on Sun, 22 May 2005 17:09:13 -0000.Spotterhttps://www.blogger.com/profile/12687960542974310602noreply@blogger.com