[Dshield] RE: Message #3 - Abuse E-mail Contact Addresses

Jim rodgersj at charter.net
Sun Mar 3 02:56:55 GMT 2002


Gary,

Regarding your message in this thread (#3). Try http://www.abuse.net/lookup.phtml
You have to enter the domain name (no IP addresses). If an abuse contact is listed,
it will display. There are several WHOIS sites that may also have good contact information.
Each is a bit different, some use IP addresses only (ARIN, RIPE) some use domain name only, some use either, http://www.geektools.com/cgi-bin/proxy.cgi, and my personal favorite,
http://visualroute.visualware.co.uk/ (this one does a traceroute on IP or domain name and will give WHOIS info as well).

Hope the info is useful ...

Jim

"The only secure computer is the one unplugged and locked away in a safe"

-----Original Message-----
From: list-admin at dshield.org [mailto:list-admin at dshield.org]On Behalf Of
list-request at dshield.org
Sent: Tuesday, February 19, 2002 8:14 AM
To: list at dshield.org
Subject: Dshield digest, Vol 1 #475 - 13 msgs


Send Dshield mailing list submissions to
	list at dshield.org

To subscribe or unsubscribe via the World Wide Web, visit
	http://www1.dshield.org/mailman/listinfo/list
or, via email, send a message with subject or body 'help' to
	list-request at dshield.org

You can reach the person managing the list at
	list-admin at dshield.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Dshield digest..."


Today's Topics:

   1. RE: Attacks getting in (Tim Watts)
   2. RE: I am sending three or four of these because the hac
       kers block my emails (dsb at rlxtechnologies.com)
   3. automated email address for abuse reports (Gary L. Hennigan)
   4. Re: automated email address for abuse reports (Ed Truitt)
   5. How old can logs be nad other Q's ? (Tim)
   6. Re: -LONG- [Dshield] I am sending three or four of these because the hackers block my emails (John Sage)
   7. Re: automated email address for abuse reports (Johannes B. Ullrich)
   8. Re: How old can logs be nad other Q's ? (Johannes B. Ullrich)
   9. Re: -LONG- [Dshield] I am sending three or four of these because
       the hackers block my emails (Johannes B. Ullrich)
  10. RE: -LONG- [Dshield] I am sending three or four of these because
       the hackers block my emails (Paul Marsh)

--__--__--

Message: 1
Date: Mon, 18 Feb 2002 09:29:04 -0800
From: "Tim Watts" <timwatts at builddirect.com>
To: <list at dshield.org>
Subject: [Dshield] RE: Attacks getting in
Reply-To: list at dshield.org

Thanks for the comments Doug, seems I was feeling a bit paranoid.

I've felt pretty comfy about the security in our network, but when I was
seeing so many attacks against one machine in particular, I was thinking
it had been hacked on some way.

I was thinking maybe the ip for that machine had been posted somewhere
or something, other than that I was thinking it was just some script
kiddies trying to hack a random ip.

Thanks, Tim
Director, Information Technology


--__--__--

Message: 2
From: dsb at rlxtechnologies.com
To: list at dshield.org
Subject: RE: [Dshield] I am sending three or four of these because the hac
	kers block my emails
Date: Mon, 18 Feb 2002 14:21:30 -0600
Reply-To: list at dshield.org

Ok, since nobody else has bit on this one, yet...

The actual details you've provided us do not include enough information for
us to do much analysis for you.  I'm a little suspicious of your tech's
conclusion for that same reason.

What you have listed is a handful of IP address, which can be looked up with
freely available tools on the net.

Here's the lookup information for the first IP:

venus:~> whois -h whois.apnic.net 203.65.234.11

% Rights restricted by copyright. See
http://www.apnic.net/db/dbcopyright.html
% (whois7.apnic.net)

inetnum:     203.65.224.0 - 203.65.255.255
netname:     UNET
descr:       Universal Joint Network Technologies Co.,Ltd
country:     TW
admin-c:     DL45-AP
tech-c:      DL45-AP
mnt-by:      MAINT-TWNIC-NS
changed:     snw at www.edu.tw 19980914
source:      APNIC

person:      Donald Lin
address:     3F, No.27, Sec. 1, Hang Chow South Rd.
address:     Taipei, Taiwan
country:     TW
phone:       +886-2-23213000
fax-no:      +886-2-23955750
e-mail:      donald at unet.net.tw
nic-hdl:     DL45-AP
mnt-by:      MAINT-TWNIC-NS
changed:     snw at www.edu.tw 980912
source:      APNIC

inetnum:     203.65.234.0 - 203.65.234.255
netname:     STATUS-NET
descr:       Status Internet Co., Ltd.
descr:       Suite 1, 5F, No.3, Lane 41, Loh-Yei Street
descr:       Taipei Taiwan
country:     TW
admin-c:     JT-TW
tech-c:      JT-TW
remarks:     This information has been partially mirrored by APNIC from
remarks:     TWNIC. To obtain more specific information, please use the
remarks:     TWNIC whois server at whois.twnic.net.
mnt-by:      TWNIC-AP
changed:     kevin at unet.net.tw 19991119
source:      TWNIC

person:      Jeff Tsao
address:     Status Internet Co., Ltd.
address:     Suite 1, 5F, No.3, Lane 41, Loh-Yei Street
address:     Taipei Taiwan
country:     TW
phone:       +886-2-2738-4957
e-mail:      service at status.com.tw
nic-hdl:     JT-TW
remarks:     This information has been partially mirrored by APNIC from
remarks:     TWNIC. To obtain more specific information, please use the
remarks:     TWNIC whois server at whois.twnic.net.
changed:     hostmaster at twnic.net 19990923
source:      TWNIC

Here's the lookup for the 2nd IP:

venus:~> whois -h whois.apnic.net 210.82.124.78

% Rights restricted by copyright. See
http://www.apnic.net/db/dbcopyright.html
% (whois6.apnic.net)

inetnum:     210.82.124.0 - 210.82.124.255
netname:     MEISHANGWANG
descr:       Meishang Online Networks
descr:       Beijing
country:     CN
admin-c:     JZ84-AP
tech-c:      JZ84-AP
mnt-by:      MAINT-CN-ZM28
changed:     daihy at china-netcom.com 20011028
source:      APNIC

person:      jun zhang
address:     beijing
country:     CN
phone:       +86-010-88093588
e-mail:      zhangjun5 at china-netcom.com
nic-hdl:     JZ84-AP
mnt-by:      MAINT-CN-ZM28
changed:     daihy at china-netcom.com 20011018
source:      APNIC

The third:

venus:~> whois -h whois.arin.net 130.232.80.209
University of Turku (NET-NORDU2)
   Computing Centre
   SF-20014 Turku
   FI

   Netname: TURBO
   Netblock: 130.232.0.0 - 130.232.255.255

   Coordinator:
      Aarnio, Esa  (EA49-ARIN)  esa at UTU.FI
      +358 2 3335926

   Domain System inverse mapping provided by:

   NS1.UTU.FI                   130.232.1.1
   NS2.UTU.FI                   130.232.1.22
   NS-SECONDARY.FUNET.FI        128.214.248.132

   Record last updated on 15-May-1996.
   Database last updated on  17-Feb-2002 19:56:02 EDT.

And finally, the fourth:

venus:~> whois -h whois.arin.net 209.48.29.227
Business Internet, Inc. (NET-ICIX-MD-BLK14)
   3625 Queen Palm Drive
   Tampa, FL 33619
   US

   Netname: ICIX-MD-BLK14
   Netblock: 209.48.0.0 - 209.49.255.255
   Maintainer: IMBI

   Coordinator:
      Business Internet, Inc.  (ZI44-ARIN)  ipreq at icix.net
      240-616-2000

   Domain System inverse mapping provided by:

   NS.DIGEX.NET                 64.245.20.14
   NS2.DIGEX.NET                64.245.43.14

   Record last updated on 02-Jan-2001.
   Database last updated on  17-Feb-2002 19:56:02 EDT.

So, in all...you've provided addresses that trace back to addresses in
Japan, China, Finland, and an ISP named Digex.  Unfortunately, that's just
about all we can tell, since you didn't provide us any more information,
like what services were being accessed, or packet logs.  My guess is that
you probably aren't 100% sure what these are, or how to provide them, so my
suggestions are:

a) get good antivirus software installed (like Norton, or Sophos)
b) install personal firewall software--you can download some of this for
free (like ZoneAlarm.)  
c) contact your own Internet provider to discuss your problems, and what may
be done to help further protect you.

As much as I'd like to, I really can't comment on most of your message
(Satanic group, brother, sons, your father Ron White, John Heary, preying on
vulnerable internet people, Japanese Porn people, Brandy Collins,
Summerville, gangsters, or how, in the big picture, they made you buy 9
computers.  Your message is somewhat unclear, and doesn't really tie these
pieces into a picture of what is happening to you for us.  If you are able
to provide more details, we can probably provide more assistance.

If you provide more details, we'd be happy to help you further.

-db

Dave Brookshire
email dsb at rlxtechnologies.com
voice +1 (281) 863 2115





-----Original Message-----
From: Flora Gedenberg [mailto:cheerful at oregontrail.net]
Sent: Sunday, February 17, 2002 3:29 AM
To: list at dshield.org
Subject: [Dshield] I am sending three or four of these because the
hackers block my emails


It's a Satanic group. My brother and sons are involved, and someone named R=
on White, and John Heary.

They prey the ineternet for people who are vulernable and then hack into th=
eir computers.

They send virus's and the whole bit.  My Tech on my web site said they are =
a group of Japanese Porn people, and they keep him busy all the time.

I am sick and tired of them. It used to be Brandy Collins from Summerville =
Oregon. They are gangsteres and they can whip up a new ISP number as fast a=
s it takes to blow your nose.

Any suggestions?
Flora Gedenberg
Here are a few of the numbers they've been using. It used to be my dad, but=
 he died, so now it's also my brother and my sons, and these other jackass'=
s.
I'm not kidding they've made me buy 9 computers.

?
IP: 203.65.234.11
Node: COM1=20=20=20=20=20=20=20=20=20=20=20
Group: DOMAIN=20=20=20=20=20=20=20=20=20
NetBIOS: COM1           =01
MAC: 0004769A9C93
DNS: COM1

[210.82.124.78]
No additional details have been discovered about this Intruder.
IP: 203.65.234.11
Node: COM1=20=20=20=20=20=20=20=20=20=20=20
Group: DOMAIN=20=20=20=20=20=20=20=20=20
NetBIOS: COM1           =01
MAC: 0004769A9C93
DNS: COM1

IP: 130.232.80.209
DNS: rtpc9.abo.fi

IP: 209.48.29.227
DNS: Red.scosys.com




[[ Attachement of type text/html deleted]]

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/list


--__--__--

Message: 3
Date: Mon, 18 Feb 2002 16:43:38 -0700
From: "Gary L. Hennigan" <gary at ieee.org>
To: list at dshield.org
Subject: [Dshield] automated email address for abuse reports
Reply-To: list at dshield.org

Can someone tell me how DShield obtains the email address to send
Fightback reports to? Is it automated based on the "Contact E-mail"
field when you query an address on the DShield web site, for example,
"http://dev.dshield.org/ipinfo.php?ip=x.x.x.x"?

The reason I ask is that I'm a Comcast customer and if you query a
Comcast IP there is no "Contact E-mail", but if you read the text
returned as part of the query you see the abuse address listed as
abuse at comcastpc.com. I'm afraid that my entries of Comcast abusers
won't be reported via Fightback because of this. Of course I've
reported a couple of Code Red/Nimda infected systems myself, with no
result so far, but a report from DShield with more than one target
might be more effective. Assuming, of course, DShield can find the
abuse address buried in the registry.

Thanks,
Gary


--__--__--

Message: 4
From: "Ed Truitt" <ed.truitt at etee2k.net>
To: <list at dshield.org>
Subject: Re: [Dshield] automated email address for abuse reports
Date: Mon, 18 Feb 2002 19:58:11 -0600
Reply-To: list at dshield.org

I won't swear to it, but my guess is that they are either getting the
contact information from the WHOIS lookup, or (more likely) from abuse.net
(I found comcastpc.com's contact address there.)

Cheers,
Ed Truitt
PGP fingerprint:  5368 D25E 468C A250 9833  CCD6 DBAE 9C25 02F9 0AB9
http://www.etee2k.net
http://www.bsatroop148.org

"Note to spammers:  my 'delete' key is connected to YOUR ISP.
 Also, if you send me UCE, I reserve the right to post your spew
on my Web site, with the appropriate color commentary, so that
others may have a good laugh at your expense."
----- Original Message -----
From: "Gary L. Hennigan" <gary at ieee.org>
To: <list at dshield.org>
Sent: Monday, February 18, 2002 5:43 PM
Subject: [Dshield] automated email address for abuse reports


> Can someone tell me how DShield obtains the email address to send
> Fightback reports to? Is it automated based on the "Contact E-mail"
> field when you query an address on the DShield web site, for example,
> "http://dev.dshield.org/ipinfo.php?ip=x.x.x.x"?
>
> The reason I ask is that I'm a Comcast customer and if you query a
> Comcast IP there is no "Contact E-mail", but if you read the text
> returned as part of the query you see the abuse address listed as
> abuse at comcastpc.com. I'm afraid that my entries of Comcast abusers
> won't be reported via Fightback because of this. Of course I've
> reported a couple of Code Red/Nimda infected systems myself, with no
> result so far, but a report from DShield with more than one target
> might be more effective. Assuming, of course, DShield can find the
> abuse address buried in the registry.
>
> Thanks,
> Gary
>
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/list
>


--__--__--

Message: 5
Date: Tue, 19 Feb 2002 15:57:41 +1100
From: Tim <tim.tuck at penrith.net>
To: dshield <list at dshield.org>
Subject: [Dshield] How old can logs be nad other Q's ?
Reply-To: list at dshield.org

Hi all,

I was just parsing out  my logs and I have logs starting about Jun 2001,
is it still worthwhile submitting these old logs ?

If not, where should I start from ? - beginning of this year ?

Can I submit a log bigger than 1Mb, some of these logs are a bit big ?

Do any of you guys filter your BC addr for smurfs ?

Half the size of my logs is due to continued smurfs from all over the planet!

cheers

Tim


--__--__--

Message: 6
Date: Mon, 18 Feb 2002 23:45:24 -0800
From: John Sage <jsage at finchhaven.com>
To: list at dshield.org
Subject: Re: -LONG- [Dshield] I am sending three or four of these because the hackers block my emails
Reply-To: list at dshield.org

On Mon, Feb 18, 2002 at 02:21:30PM -0600, dsb at rlxtechnologies.com wrote:
> Ok, since nobody else has bit on this one, yet...

Bit? heh..

hook, line, and sinker...

<sir-snip-alot>

> As much as I'd like to, I really can't comment on most of your message
> (Satanic group, brother, sons, your father Ron White, John Heary, preying on
> vulnerable internet people, Japanese Porn people, Brandy Collins,
> Summerville, gangsters, or how, in the big picture, they made you buy 9
> computers.

Lunatic drivel.

...IMHO, of course.

Here's why, courtesy of google:

> -----Original Message-----
> From: Flora Gedenberg [mailto:cheerful at oregontrail.net]
> Sent: Sunday, February 17, 2002 3:29 AM
> To: list at dshield.org
> Subject: [Dshield] I am sending three or four of these because the
> hackers block my emails

Given a seach for "cheerful at oregontrail.net":

NetForum - Messages In Topic: Spiritual Warfare
... Topic Posted by: Flora (cheerful at oregontrail.net ) Date Posted: Thu Aug 21 17:34:01
1997 Topic Description: This Prayer gives me great joy when I say it dayly ...
www.biblenet.net/cgi-bin/forum/apologetics/a/3--31 - 6k - Cached - Similar pages

Forum: Apologetics
Topic: Spiritual Warfare
Topic Posted by: Flora
(cheerful at oregontrail.net)
Date Posted: Thu Aug 21 17:34:01 1997
Topic Description: This Prayer gives me great joy when I say it dayly. I am sharing it with you.  

I have been battling witch craft for 33 years, and it's been a dayly struggle, and I've been beaten to a pulp for years at a time, but since I've said this prayer dayly I am full of joy and hope. It's one of the most powerful prayers I've ever prayed in my life. Prayer for Spiritual Warfare I proclaim Jesus Christ, Lord or all the adventures, circumstances, and  difficulties of today. In the name of the Lord Jesus Christ, by the power of  His Blood, in the authority of His Word given to me as a Christian, I bind and reject you Satan, and I command you to leave! I seal this place, and all the members of my family, my relatives, and possessions, in the blood of our Lord Jesus Christ. I bind and reject all familiar spirits, all companion spirits, and all carnal  spirits, spirits of affliction, and all ministering spirits. I bind and reject all spirits in the air, in the wind, in the fire, in the water, under the water, in the netherworld, in the elements and in all satanic forces of nature. I bind and I  reject all spirits of confusion, all spirits of division, all spirits of disruption, and all spirits of fear, worry, and anxiety, all spirits of disbelief, spirits of unforgiveness, resentment, and anger, spirits of deaf and dumb, spirit of   disobedience, spirit of games, spirit of control, and spirit of retaliation. I bind and I reject all spirits and aspects and attributes of these spirits. I bind and reject all interlocking spirits. I command that there will be no communication between you or anyone else. I command that you leave quietly and immediately go to the foot of the cross of our Lord Jesus Christ. I break and dissolve every curse, spell, hex, evil wishes, evil desires,  andhereditary seals. I come against all Satanic vows, Satanic pacts, Satanic sacrifices, voodoo practices, mind control, and Eastern religion practices. In  the name of our Lord Jesus Christ, I break, and dissolve all links with false prophets, false visionaries, false mystics, and with psychics, clairvoyance, astrologers, mediu!
ms, seers
rds, Tarot Cards, and occult games of all kinds.  Come Holy Spirit and fill this place, corner to corner, ceiling to floor. Saint Michael, Saint Gabriel, Saint Raphael and all the Holy Archangels come and fight this battle for me. I ask the help of all the Holy Angels, Holy   Dominations, Holy Powers, Holy Thrones, Holy Principalities, and my Guardian Angel - Be my shield of defense against all evil spirits. I ask this in     the name of our Lord Jesus Christ by the power of His Blood, in the authority given to me as a Christian.  Lord Jesus, I ask today for an in-filling of the Holy Spirit. Fill all the empty  spaces within me with your peace, your love, your healing, and your joy. I  also ask for an increase and release of all the gifts, power, and fruits of the Holy Spirit. The Gift of Wisdom, Word of Knowledge, Gift of Faith, Gift of Healing, Miracles, Prophecy, Discernment of Spirits, Gift of Tongues, Interpretation of Tongues, Deliverance, Inner Healing, the Gift of Teaching,  Gift of Evangelization, the Gift of Service, the Gift of Encouragement, Gift  of Leadership, the Gift of Preaching, and the Gifts of Joy and Laughter so  that I may use these gifts cheerfully and enjoy the abundant life You have promised. Amen. Amen 



Global Prayer Warriors~December 30
... you. Keeping you in my prayers- love,Roxanne sent by Donna cheerful at oregontrail.net
URGENT have two satanist's who for about two months were bringing me food. ...
www.globalprayerwarriors.org/dec30.html - 21k - Cached - Similar pages
[ More results from www.globalprayerwarriors.org ]

cheerful at oregontrail.net   URGENT
have two satanist's who for about two
months were bringing me food. I got
terribly terribly sick, and I almost
died twice.  God or Angels or Intuition
what ever you want to call it, told
me not to eat their food, and as sure as
I'm sittin here, I didn't know they
were Satanist’s but as soon as I quit
eating their food I was almost over
nite better. I'm fine health wise right
now. My problem now, is I am afraid
they are going to drug me, and pour
alcohol on me, and put me in a car
someplace and maybe do me in or have me
arrested for drunken driving.  I am
an alcoholic, but have not touched one
drop for 13 years. These people hate
me so bad, because I honestly do pray
for others, and I dedicate my life to
Christ and praying and encouraging
others.  Will You please for  about a
week or so put me on your daily prayer
list, unless you don't feel the urge
to pray of course there are those who
need prayer also but would you at least
cover my house, my body, and my mind
with the power of the spoken word I
myself speak out loud. I need covered by
the word and prayer.  I fear not but
must always lean on the prayer of
others just like Christ and Paul asks
us to .Thank you ahead of time. Flora



Global Prayer Warriors~December 18
... the blessing be all with you. In his Name, Nora Flora Gedenberg cheerful at oregontrail.net
Would you please put me on the list for prayer? As you know I've lost ...
www.globalprayerwarriors.org/dec18.html - 10k - Cached - Similar pages

Flora Gedenberg cheerful at oregontrail.net
Would you please put me on the list for
prayer?   As you know I've lost nine
computers due to satanic people who despise
me, because  I pray for others.  They despise
me, and they send me virus's all the time also.
I just bougt another computer, although used,
is the only computer I have. They are at it
again?  I ask that my computer and prayer
ministry for others be protected by Christ.
thanks
flora



Pardon my scepticism, but...

- John

-- 
Most people don't type their own logfiles;  but, what do I care?


--__--__--

Message: 7
Date: Tue, 19 Feb 2002 07:09:31 -0500 (EST)
From: "Johannes B. Ullrich" <jullrich at sans.org>
To: list at dshield.org
Subject: Re: [Dshield] automated email address for abuse reports
Reply-To: list at dshield.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> > Can someone tell me how DShield obtains the email address to send
> > Fightback reports to? Is it automated based on the "Contact E-mail"
> > field when you query an address on the DShield web site, for example,
> > "http://dev.dshield.org/ipinfo.php?ip=x.x.x.x"?

We do use whois as our 'first guess' source for email addresses. Once
an email bounces, we intervene manually, but are falling a bit behind.
Some people suggested reverse lookups or abuse.com. Reverse lookups 
(in-addr.arpa zone) work "so-so"... Many large ISPs do not setup 
reverse lookups by default (e.g. Qwest in the US).

Back to Comcast: I have no idea why this address is missing. It could be
a simple typo when updating it. Even if it bounced (happens from time
to time that an address bounces even if its valid), it should still be
in our database, but marked as 'bounced'.

The basic process is:
1st - take (technical) contact from whois
2nd - look manually at whois for 'burried' email addresses in
      comment field
3rd - try abuse at domain
4th - other manual ways... it depends on the particular ISP how
      persistent we are. If it is a 'big source', I may try to
      find some contact on the ISPs homepage. But that can be
      time consuming.

We also regularly receive updates from ISPs directly.


- -- 
- -------
jullrich at sans.org                    Join http://www.DShield.org
                          Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8ckB9wWQP+4im9DYRApDjAJ9r6LdIX8XvQCvZ2qx7O4Rn/faHtgCeKq5X
zlo9CrP5R+G5+YckSK7j54w=
=dLUL
-----END PGP SIGNATURE-----


--__--__--

Message: 8
Date: Tue, 19 Feb 2002 07:25:55 -0500 (EST)
From: "Johannes B. Ullrich" <jullrich at sans.org>
To: dshield <list at dshield.org>
Subject: Re: [Dshield] How old can logs be nad other Q's ?
Reply-To: list at dshield.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> I was just parsing out  my logs and I have logs starting about Jun 2001,
> is it still worthwhile submitting these old logs ?

we keep logs of up to one month in our current, searchable, database.
Older logs are moved to an archive. 

> Can I submit a log bigger than 1Mb, some of these logs are a bit big ?

1MByte is good. Everything above 10MByte will be cut off.


- -- 
- -------
jullrich at sans.org                    Join http://www.DShield.org
                          Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8ckRVwWQP+4im9DYRAs2/AJ9h+0QoIBc3o5AYORBQPuCxLnovsACeJFOM
64bpO2nAZqYOTp5YxT/bfVY=
=6i4W
-----END PGP SIGNATURE-----


--__--__--

Message: 9
Date: Tue, 19 Feb 2002 07:34:06 -0500 (EST)
From: "Johannes B. Ullrich" <jullrich at sans.org>
To: list at dshield.org
Subject: Re: -LONG- [Dshield] I am sending three or four of these because
 the hackers block my emails
Reply-To: list at dshield.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> Here's why, courtesy of google:
...
> Topic: Spiritual Warfare
> 
> Pardon my scepticism, but...
> 
> - John
> 

Thanks for taking the time John. I am trying to make this list
as 'lightly moderated' as possible. I will allow newbie questions
which show a "lack of understanding". After all, people have to
start somewhere. The post that started this thread did however
have a hard time squeezing through my bad language filter. 


- -- 
- -------
jullrich at sans.org                    Join http://www.DShield.org
                          Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8ckZAwWQP+4im9DYRAnraAKCK2u/9jq3GwZuE2KMi1VTn0+mJtQCcCEPh
u8oMOEgInCB69OTsa7gZt5Y=
=2lRG
-----END PGP SIGNATURE-----


--__--__--

Message: 10
From: Paul Marsh <pmarsh at nmefdn.org>
To: "'list at dshield.org'" <list at dshield.org>
Subject: RE: -LONG- [Dshield] I am sending three or four of these because 
	the hackers block my emails
Date: Tue, 19 Feb 2002 08:00:34 -0500
Reply-To: list at dshield.org

I thought they stopped putting Peyote in the water out there????????

-----Original Message-----
From: John Sage [mailto:jsage at finchhaven.com]
Sent: Tuesday, February 19, 2002 2:45 AM
To: list at dshield.org
Subject: Re: -LONG- [Dshield] I am sending three or four of these
because the hackers block my emails


On Mon, Feb 18, 2002 at 02:21:30PM -0600, dsb at rlxtechnologies.com wrote:
> Ok, since nobody else has bit on this one, yet...

Bit? heh..

hook, line, and sinker...

<sir-snip-alot>

> As much as I'd like to, I really can't comment on most of your message
> (Satanic group, brother, sons, your father Ron White, John Heary, preying
on
> vulnerable internet people, Japanese Porn people, Brandy Collins,
> Summerville, gangsters, or how, in the big picture, they made you buy 9
> computers.

Lunatic drivel.

...IMHO, of course.

Here's why, courtesy of google:

> -----Original Message-----
> From: Flora Gedenberg [mailto:cheerful at oregontrail.net]
> Sent: Sunday, February 17, 2002 3:29 AM
> To: list at dshield.org
> Subject: [Dshield] I am sending three or four of these because the
> hackers block my emails

Given a seach for "cheerful at oregontrail.net":

NetForum - Messages In Topic: Spiritual Warfare
... Topic Posted by: Flora (cheerful at oregontrail.net ) Date Posted: Thu Aug
21 17:34:01
1997 Topic Description: This Prayer gives me great joy when I say it dayly
...
www.biblenet.net/cgi-bin/forum/apologetics/a/3--31 - 6k - Cached - Similar
pages

Forum: Apologetics
Topic: Spiritual Warfare
Topic Posted by: Flora
(cheerful at oregontrail.net)
Date Posted: Thu Aug 21 17:34:01 1997
Topic Description: This Prayer gives me great joy when I say it dayly. I am
sharing it with you.  

I have been battling witch craft for 33 years, and it's been a dayly
struggle, and I've been beaten to a pulp for years at a time, but since I've
said this prayer dayly I am full of joy and hope. It's one of the most
powerful prayers I've ever prayed in my life. Prayer for Spiritual Warfare I
proclaim Jesus Christ, Lord or all the adventures, circumstances, and
difficulties of today. In the name of the Lord Jesus Christ, by the power of
His Blood, in the authority of His Word given to me as a Christian, I bind
and reject you Satan, and I command you to leave! I seal this place, and all
the members of my family, my relatives, and possessions, in the blood of our
Lord Jesus Christ. I bind and reject all familiar spirits, all companion
spirits, and all carnal  spirits, spirits of affliction, and all ministering
spirits. I bind and reject all spirits in the air, in the wind, in the fire,
in the water, under the water, in the netherworld, in the elements and in
all satanic forces of nature. I bind and I  reject all spirits of confusion,
all spirits of division, all spirits of disruption, and all spirits of fear,
worry, and anxiety, all spirits of disbelief, spirits of unforgiveness,
resentment, and anger, spirits of deaf and dumb, spirit of   disobedience,
spirit of games, spirit of control, and spirit of retaliation. I bind and I
reject all spirits and aspects and attributes of these spirits. I bind and
reject all interlocking spirits. I command that there will be no
communication between you or anyone else. I command that you leave quietly
and immediately go to the foot of the cross of our Lord Jesus Christ. I
break and dissolve every curse, spell, hex, evil wishes, evil desires,
andhereditary seals. I come against all Satanic vows, Satanic pacts, Satanic
sacrifices, voodoo practices, mind control, and Eastern religion practices.
In  the name of our Lord Jesus Christ, I break, and dissolve all links with
false prophets, false visionaries, false mystics, and with psychics,
clairvoyance, astrologers, mediu!
ms, seers
rds, Tarot Cards, and occult games of all kinds.  Come Holy Spirit and fill
this place, corner to corner, ceiling to floor. Saint Michael, Saint
Gabriel, Saint Raphael and all the Holy Archangels come and fight this
battle for me. I ask the help of all the Holy Angels, Holy   Dominations,
Holy Powers, Holy Thrones, Holy Principalities, and my Guardian Angel - Be
my shield of defense against all evil spirits. I ask this in     the name of
our Lord Jesus Christ by the power of His Blood, in the authority given to
me as a Christian.  Lord Jesus, I ask today for an in-filling of the Holy
Spirit. Fill all the empty  spaces within me with your peace, your love,
your healing, and your joy. I  also ask for an increase and release of all
the gifts, power, and fruits of the Holy Spirit. The Gift of Wisdom, Word of
Knowledge, Gift of Faith, Gift of Healing, Miracles, Prophecy, Discernment
of Spirits, Gift of Tongues, Interpretation of Tongues, Deliverance, Inner
Healing, the Gift of Teaching,  Gift of Evangelization, the Gift of Service,
the Gift of Encouragement, Gift  of Leadership, the Gift of Preaching, and
the Gifts of Joy and Laughter so  that I may use these gifts cheerfully and
enjoy the abundant life You have promised. Amen. Amen 



Global Prayer Warriors~December 30
... you. Keeping you in my prayers- love,Roxanne sent by Donna
cheerful at oregontrail.net
URGENT have two satanist's who for about two months were bringing me food.
...
www.globalprayerwarriors.org/dec30.html - 21k - Cached - Similar pages
[ More results from www.globalprayerwarriors.org ]

cheerful at oregontrail.net   URGENT
have two satanist's who for about two
months were bringing me food. I got
terribly terribly sick, and I almost
died twice.  God or Angels or Intuition
what ever you want to call it, told
me not to eat their food, and as sure as
I'm sittin here, I didn't know they
were Satanist's but as soon as I quit
eating their food I was almost over
nite better. I'm fine health wise right
now. My problem now, is I am afraid
they are going to drug me, and pour
alcohol on me, and put me in a car
someplace and maybe do me in or have me
arrested for drunken driving.  I am
an alcoholic, but have not touched one
drop for 13 years. These people hate
me so bad, because I honestly do pray
for others, and I dedicate my life to
Christ and praying and encouraging
others.  Will You please for  about a
week or so put me on your daily prayer
list, unless you don't feel the urge
to pray of course there are those who
need prayer also but would you at least
cover my house, my body, and my mind
with the power of the spoken word I
myself speak out loud. I need covered by
the word and prayer.  I fear not but
must always lean on the prayer of
others just like Christ and Paul asks
us to .Thank you ahead of time. Flora



Global Prayer Warriors~December 18
... the blessing be all with you. In his Name, Nora Flora Gedenberg
cheerful at oregontrail.net
Would you please put me on the list for prayer? As you know I've lost ...
www.globalprayerwarriors.org/dec18.html - 10k - Cached - Similar pages

Flora Gedenberg cheerful at oregontrail.net
Would you please put me on the list for
prayer?   As you know I've lost nine
computers due to satanic people who despise
me, because  I pray for others.  They despise
me, and they send me virus's all the time also.
I just bougt another computer, although used,
is the only computer I have. They are at it
again?  I ask that my computer and prayer
ministry for others be protected by Christ.
thanks
flora



Pardon my scepticism, but...

- John

-- 
Most people don't type their own logfiles;  but, what do I care?

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/list


[[ Attachement of type text/html deleted]]



--__--__--

_______________________________________________
Dshield mailing list
Dshield at dshield.org
http://www1.dshield.org/mailman/listinfo/list


End of Dshield Digest




More information about the list mailing list