Recently I have had a deluge of junkmail, and I have a pretty good idea who it is. One of emails (below), from LeadFactory.com, included the IP address of the person who subscribed me.
I had a hunch, considering, one, a lot of it is right-wing U.S. and Israeli email (of which related articles I've been editing lately) and, two, it's the first junkmail I've ever received at this address. So I plugged the address into Wikipedia and whatta ya know, a probable sock puppet who has been especially abusive to me recently: http://en.wikipedia.org/w/index.php?title=Special: Contributions&target=155.84.57.253
You might also like to check out some of the sock puppet's responses to requests to stop vandalism and 3RR: http://en.wikipedia.org/wiki/User_talk:155.84.57.253
I also did a geographic trace on the IP and they're from Houston Texas.
Can this IP address be permanently banned or something? Is there anyone who can check the address against other usernames?
Christiaan
From: reply@LeadFactory.com Subject: Welcome to LeadFactory! (1113341886.13.28781) Date: 12 April 2005 10:38:06 pm BST To: christiaan at last-straw.net Received-Spf: none (No spf1 record for (phl13.note.com) ) client-ip=207.106.91.43; envelope-from=lf_sub@phl13.note.com; X-Default-Received-Spf: pass (Last token {a} (res=PASS)) client-ip=207.106.91.43; envelope-from=lf_sub@phl13.note.com; Received: from phl13.note.com (unverified [207.106.91.43]) by serverlogistics.com (SurgeMail 2.2c9) with ESMTP id 1899996 for <christiaan at last-straw.net>; Tue, 12 Apr 2005 14:38:12 -0700 PDT Received: (from lf_sub@localhost) by phl13.note.com (8.11.6/8.11.6) id j3CLc6q28834; Tue, 12 Apr 2005 17:38:06 -0400 Return-Path: lf_sub@phl13.note.com Message-Id: 200504122138.j3CLc6q28834@phl13.note.com X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) X-Remote-Host: X-Remote-Address: 155.84.57.253 X-Lb-Comment: LF Subscription Welcome; complaints to abuse@LeadFactory.com X-Mailer: robosub from LeadFactory.com (v. 1.02) X-Server: High Performance Mail Server - http://surgemail.com X-Rcpt-To: <christiaan at last-straw.net> X-Spamdetect-Info: This message may be spam see http://www.smitespam.com for more information X-Spamdetect: ****: 4.578000 Opt-in=0.7,Information on how to work at home (2)=0.1,Message talks about earning money=1.5,From: does not include a real name=0.3,SpamUrl=2.0 X-Spamurl: leadfactory.com X-Ip-Stats: No info recorded yet X-External-Ip: 207.106.91.43
This email is to notify you that a subscription request has been received through our LeadFactory system, to the email publication(s) listed below.
Each publisher will acknowledge your subscription to their list separately by email, with their own instructions for cancelling future messages.
You have NOT been subscribed to any list belonging to us (LeadFactory) as a result of this subscription request, and will thus receive NO future emails from us (LeadFactory).
If someone else used LeadFactory to subscribe you to the lists below without your permission, please accept our apologies and forward a copy of this entire email to abuse@LeadFactory.com to be unsubscribed.
=====
SUBSCRIPTIONS REQUESTED
Multiple Streams of Income -- Free wealth creation training newsletter by Robert G. Allen, best selling author of "Nothing Down" and "Creating Wealth"!
Six Figure Income With NO RECRUITING -- NOT a money doubler! This is an ethical, well established company and has already given out over $79 MILLION in commissions! Start with as little as $10.
The Internet Checklist Newsletter -- Internet-Checklist.com reveals internet marketing tips that will help you start & improve your internet business. Invest time & money in yourself.
e-Course: How To Be A Business Consultant -- TopLine Business Solutions CEO Martin Howey gives you "Secrets Revealed: How To Make $100K In 90 Days As A Professional Business Consultant!"
PushButtonHealth.com: Niche Marketing News -- Bryan Winters' highly-acclaimed course, "From Kia to Corvette: My Secret to Success", helps you start or boost your own home-based business! No AOL Addresses Please
Cash In On The Internet Explosion -- Discover how you can build a massive e-business with lightning speed, regardless of your experience, by using our cutting edge, automated system.
=====
SUBSCRIPTION INFORMATION
Subscriber: christiaan at last-straw.net Name: Christiaan Briggs IP Address: 155.84.57.253 Hostname: Date/Time: Tue Apr 12 21:38:06 GMT 2005
=== Subscriptions powered by LeadFactory... http://LeadFactory.com/leads/?initsub
[LeadFactory opt-in email is sent by note.com LLC P.O. Box 234, Jenkintown, PA 19046-0234 (USA). Complaints go to abuse@LeadFactory.com or +1 (215) 576 6800. Please mention subscriber id # 1113341886.13.28781 .]
=== Turn Unused or Overlooked Space on Your Website Into Profits! http://LeadFactory.com/pub/?lf_welc ===
Yes, a developer can check for all other users that share this IP address (sockpuppets). #mediawiki on freenode usually has a bunch of them, and #wikipedia might also have some hanging around.
You should report them to the FTC/FCC (I think it's the FTC, but I'm not sure). How did they get your email? Did you email them back after they [[Special:Emailuser]]'d you?
If you could trace them back to a user on wikipedia, then it looks like you probably caught the actual guy rather than a proxy :D
Blog: http://frazzydee.ca
-----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS d? s:- a--- C+++ UL++ P+ L+ E---- W++ N+ o+ K+ w+ O? M-- V? PS++ PE Y PGP++ t 5-- X+ R tv b++ DI++ D+ G++ e- h! !r !z ------END GEEK CODE BLOCK------
Christiaan Briggs wrote:
Recently I have had a deluge of junkmail, and I have a pretty good idea who it is. One of emails (below), from LeadFactory.com, included the IP address of the person who subscribed me.
I had a hunch, considering, one, a lot of it is right-wing U.S. and Israeli email (of which related articles I've been editing lately) and, two, it's the first junkmail I've ever received at this address. So I plugged the address into Wikipedia and whatta ya know, a probable sock puppet who has been especially abusive to me recently: http://en.wikipedia.org/w/index.php?title=Special: Contributions&target=155.84.57.253
You might also like to check out some of the sock puppet's responses to requests to stop vandalism and 3RR: http://en.wikipedia.org/wiki/User_talk:155.84.57.253
I also did a geographic trace on the IP and they're from Houston Texas.
Can this IP address be permanently banned or something? Is there anyone who can check the address against other usernames?
Christiaan
From: reply@LeadFactory.com Subject: Welcome to LeadFactory! (1113341886.13.28781) Date: 12 April 2005 10:38:06 pm BST To: christiaan at last-straw.net Received-Spf: none (No spf1 record for (phl13.note.com) )
client-ip=207.106.91.43; envelope-from=lf_sub@phl13.note.com; X-Default-Received-Spf: pass (Last token {a} (res=PASS)) client-ip=207.106.91.43; envelope-from=lf_sub@phl13.note.com; Received: from phl13.note.com (unverified [207.106.91.43]) by serverlogistics.com (SurgeMail 2.2c9) with ESMTP id 1899996 for <christiaan at last-straw.net>; Tue, 12 Apr 2005 14:38:12 -0700 PDT Received: (from lf_sub@localhost) by phl13.note.com (8.11.6/8.11.6) id j3CLc6q28834; Tue, 12 Apr 2005 17:38:06 -0400 Return-Path: lf_sub@phl13.note.com Message-Id: 200504122138.j3CLc6q28834@phl13.note.com X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) X-Remote-Host: X-Remote-Address: 155.84.57.253 X-Lb-Comment: LF Subscription Welcome; complaints to abuse@LeadFactory.com X-Mailer: robosub from LeadFactory.com (v. 1.02) X-Server: High Performance Mail Server - http://surgemail.com X-Rcpt-To: <christiaan at last-straw.net> X-Spamdetect-Info: This message may be spam see http://www.smitespam.com for more information X-Spamdetect: ****: 4.578000 Opt-in=0.7,Information on how to work at home (2)=0.1,Message talks about earning money=1.5,From: does not include a real name=0.3,SpamUrl=2.0 X-Spamurl: leadfactory.com X-Ip-Stats: No info recorded yet X-External-Ip: 207.106.91.43
This email is to notify you that a subscription request has been received through our LeadFactory system, to the email publication(s) listed below.
Each publisher will acknowledge your subscription to their list separately by email, with their own instructions for cancelling future messages.
You have NOT been subscribed to any list belonging to us (LeadFactory) as a result of this subscription request, and will thus receive NO future emails from us (LeadFactory).
If someone else used LeadFactory to subscribe you to the lists below without your permission, please accept our apologies and forward a copy of this entire email to abuse@LeadFactory.com to be unsubscribed.
=====
SUBSCRIPTIONS REQUESTED
Multiple Streams of Income -- Free wealth creation training newsletter by Robert G. Allen, best selling author of "Nothing Down" and "Creating Wealth"!
Six Figure Income With NO RECRUITING -- NOT a money doubler! This is an ethical, well established company and has already given out over $79 MILLION in commissions! Start with as little as $10.
The Internet Checklist Newsletter -- Internet-Checklist.com reveals internet marketing tips that will help you start & improve your internet business. Invest time & money in yourself.
e-Course: How To Be A Business Consultant -- TopLine Business Solutions CEO Martin Howey gives you "Secrets Revealed: How To Make $100K In 90 Days As A Professional Business Consultant!"
PushButtonHealth.com: Niche Marketing News -- Bryan Winters' highly-acclaimed course, "From Kia to Corvette: My Secret to Success", helps you start or boost your own home-based business! No AOL Addresses Please
Cash In On The Internet Explosion -- Discover how you can build a massive e-business with lightning speed, regardless of your experience, by using our cutting edge, automated system.
=====
SUBSCRIPTION INFORMATION
Subscriber: christiaan at last-straw.net Name: Christiaan Briggs IP Address: 155.84.57.253 Hostname: Date/Time: Tue Apr 12 21:38:06 GMT 2005
=== Subscriptions powered by LeadFactory... http://LeadFactory.com/leads/?initsub
[LeadFactory opt-in email is sent by note.com LLC P.O. Box 234, Jenkintown, PA 19046-0234 (USA). Complaints go to abuse@LeadFactory.com or +1 (215) 576 6800. Please mention subscriber id # 1113341886.13.28781 .]
=== Turn Unused or Overlooked Space on Your Website Into Profits! http://LeadFactory.com/pub/?lf_welc ===
WikiEN-l mailing list WikiEN-l@Wikipedia.org http://mail.wikipedia.org/mailman/listinfo/wikien-l
Thanks Faraaz. They most probably got it off this email list. Wouldn't be surprised if the puppet is subscribed.
Christiaan
On 13 Apr 2005, at 10:13 pm, Faraaz Damji wrote:
Yes, a developer can check for all other users that share this IP address (sockpuppets). #mediawiki on freenode usually has a bunch of them, and #wikipedia might also have some hanging around.
You should report them to the FTC/FCC (I think it's the FTC, but I'm not sure). How did they get your email? Did you email them back after they [[Special:Emailuser]]'d you?
If you could trace them back to a user on wikipedia, then it looks like you probably caught the actual guy rather than a proxy :D
Blog: http://frazzydee.ca
-----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS d? s:- a--- C+++ UL++ P+ L+ E---- W++ N+ o+ K+ w+ O? M-- V? PS++ PE Y PGP++ t 5-- X+ R tv b++ DI++ D+ G++ e- h! !r !z ------END GEEK CODE BLOCK------
Christiaan Briggs wrote:
Recently I have had a deluge of junkmail, and I have a pretty good idea who it is. One of emails (below), from LeadFactory.com, included the IP address of the person who subscribed me.
I had a hunch, considering, one, a lot of it is right-wing U.S. and Israeli email (of which related articles I've been editing lately) and, two, it's the first junkmail I've ever received at this address. So I plugged the address into Wikipedia and whatta ya know, a probable sock puppet who has been especially abusive to me recently: http://en.wikipedia.org/w/index.php?title=Special: Contributions&target=155.84.57.253
You might also like to check out some of the sock puppet's responses to requests to stop vandalism and 3RR: http://en.wikipedia.org/wiki/User_talk:155.84.57.253
I also did a geographic trace on the IP and they're from Houston Texas.
Can this IP address be permanently banned or something? Is there anyone who can check the address against other usernames?
Christiaan
From: reply@LeadFactory.com Subject: Welcome to LeadFactory! (1113341886.13.28781) Date: 12 April 2005 10:38:06 pm BST To: christiaan at last-straw.net Received-Spf: none (No spf1 record for (phl13.note.com) )
client-ip=207.106.91.43; envelope-from=lf_sub@phl13.note.com; X-Default-Received-Spf: pass (Last token {a} (res=PASS)) client-ip=207.106.91.43; envelope-from=lf_sub@phl13.note.com; Received: from phl13.note.com (unverified [207.106.91.43]) by serverlogistics.com (SurgeMail 2.2c9) with ESMTP id 1899996 for <christiaan at last-straw.net>; Tue, 12 Apr 2005 14:38:12 -0700 PDT Received: (from lf_sub@localhost) by phl13.note.com (8.11.6/8.11.6) id j3CLc6q28834; Tue, 12 Apr 2005 17:38:06 -0400 Return-Path: lf_sub@phl13.note.com Message-Id: 200504122138.j3CLc6q28834@phl13.note.com X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) X-Remote-Host: X-Remote-Address: 155.84.57.253 X-Lb-Comment: LF Subscription Welcome; complaints to abuse@LeadFactory.com X-Mailer: robosub from LeadFactory.com (v. 1.02) X-Server: High Performance Mail Server - http://surgemail.com X-Rcpt-To: <christiaan at last-straw.net> X-Spamdetect-Info: This message may be spam see http://www.smitespam.com for more information X-Spamdetect: ****: 4.578000 Opt-in=0.7,Information on how to work at home (2)=0.1,Message talks about earning money=1.5,From: does not include a real name=0.3,SpamUrl=2.0 X-Spamurl: leadfactory.com X-Ip-Stats: No info recorded yet X-External-Ip: 207.106.91.43
This email is to notify you that a subscription request has been received through our LeadFactory system, to the email publication(s) listed below.
Each publisher will acknowledge your subscription to their list separately by email, with their own instructions for cancelling future messages.
You have NOT been subscribed to any list belonging to us (LeadFactory) as a result of this subscription request, and will thus receive NO future emails from us (LeadFactory).
If someone else used LeadFactory to subscribe you to the lists below without your permission, please accept our apologies and forward a copy of this entire email to abuse@LeadFactory.com to be unsubscribed.
=====
SUBSCRIPTIONS REQUESTED
Multiple Streams of Income -- Free wealth creation training newsletter by Robert G. Allen, best selling author of "Nothing Down" and "Creating Wealth"!
Six Figure Income With NO RECRUITING -- NOT a money doubler! This is an ethical, well established company and has already given out over $79 MILLION in commissions! Start with as little as $10.
The Internet Checklist Newsletter -- Internet-Checklist.com reveals internet marketing tips that will help you start & improve your internet business. Invest time & money in yourself.
e-Course: How To Be A Business Consultant -- TopLine Business Solutions CEO Martin Howey gives you "Secrets Revealed: How To Make $100K In 90 Days As A Professional Business Consultant!"
PushButtonHealth.com: Niche Marketing News -- Bryan Winters' highly-acclaimed course, "From Kia to Corvette: My Secret to Success", helps you start or boost your own home-based business! No AOL Addresses Please
Cash In On The Internet Explosion -- Discover how you can build a massive e-business with lightning speed, regardless of your experience, by using our cutting edge, automated system.
=====
SUBSCRIPTION INFORMATION
Subscriber: christiaan at last-straw.net Name: Christiaan Briggs IP Address: 155.84.57.253 Hostname: Date/Time: Tue Apr 12 21:38:06 GMT 2005
=== Subscriptions powered by LeadFactory... http://LeadFactory.com/leads/?initsub
[LeadFactory opt-in email is sent by note.com LLC P.O. Box 234, Jenkintown, PA 19046-0234 (USA). Complaints go to abuse@LeadFactory.com or +1 (215) 576 6800. Please mention subscriber id # 1113341886.13.28781 .]
=== Turn Unused or Overlooked Space on Your Website Into Profits! http://LeadFactory.com/pub/?lf_welc ===
WikiEN-l mailing list WikiEN-l@Wikipedia.org http://mail.wikipedia.org/mailman/listinfo/wikien-l
WikiEN-l mailing list WikiEN-l@Wikipedia.org http://mail.wikipedia.org/mailman/listinfo/wikien-l
On 4/13/05, Christiaan Briggs christiaan@last-straw.net wrote:
Recently I have had a deluge of junkmail, and I have a pretty good idea who it is. One of emails (below), from LeadFactory.com, included the IP address of the person who subscribed me.
I had a hunch, considering, one, a lot of it is right-wing U.S. and Israeli email (of which related articles I've been editing lately) and, two, it's the first junkmail I've ever received at this address. So I plugged the address into Wikipedia and whatta ya know, a probable sock puppet who has been especially abusive to me recently: http://en.wikipedia.org/w/index.php?title=Special: Contributions&target=155.84.57.253
You might also like to check out some of the sock puppet's responses to requests to stop vandalism and 3RR: http://en.wikipedia.org/wiki/User_talk:155.84.57.253
I also did a geographic trace on the IP and they're from Houston Texas.
Can this IP address be permanently banned or something? Is there anyone who can check the address against other usernames?
Christiaan
I get a different loaction for this ip; http://www.dnsstuff.com/tools/whois.ch?ip=155.84.57.253
http://www.dnsstuff.com/tools/whois.ch?ip=155.84.57.253&email=on
(US Army Corps of Engineers?, Am I doing this wrong.)
Anyway, maybe an email to the address in the second link showing what this person is doing during company time might have some effect.
Nice one Puddl.
I was using http://www.geobytes.com/IpLocator.htm?GetLocation
Christiaan
On 13 Apr 2005, at 10:24 pm, Puddl Duk wrote:
On 4/13/05, Christiaan Briggs christiaan@last-straw.net wrote:
Recently I have had a deluge of junkmail, and I have a pretty good idea who it is. One of emails (below), from LeadFactory.com, included the IP address of the person who subscribed me.
I had a hunch, considering, one, a lot of it is right-wing U.S. and Israeli email (of which related articles I've been editing lately) and, two, it's the first junkmail I've ever received at this address. So I plugged the address into Wikipedia and whatta ya know, a probable sock puppet who has been especially abusive to me recently: http://en.wikipedia.org/w/index.php?title=Special: Contributions&target=155.84.57.253
You might also like to check out some of the sock puppet's responses to requests to stop vandalism and 3RR: http://en.wikipedia.org/wiki/User_talk:155.84.57.253
I also did a geographic trace on the IP and they're from Houston Texas.
Can this IP address be permanently banned or something? Is there anyone who can check the address against other usernames?
Christiaan
I get a different loaction for this ip; http://www.dnsstuff.com/tools/whois.ch?ip=155.84.57.253
http://www.dnsstuff.com/tools/whois.ch?ip=155.84.57.253&email=on
(US Army Corps of Engineers?, Am I doing this wrong.)
Anyway, maybe an email to the address in the second link showing what this person is doing during company time might have some effect. _______________________________________________ WikiEN-l mailing list WikiEN-l@Wikipedia.org http://mail.wikipedia.org/mailman/listinfo/wikien-l