[48405] in North American Network Operators' Group
Re: zombienet spam fingerprint
daemon@ATHENA.MIT.EDU (E.B. Dreger)
Sat Jun 1 13:42:55 2002
Date: Sat, 1 Jun 2002 17:42:46 +0000 (GMT)
From: "E.B. Dreger" <eddy+public+spam@noc.everquick.net>
To: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.20.0206011711450.2919-100000@www.everquick.net>
Errors-To: owner-nanog-outgoing@merit.edu
ED> Date: Sat, 1 Jun 2002 17:31:35 +0000 (GMT)
ED> From: E.B. Dreger
ED> Received: from $crackedvictimfqhn$ ([$crackedvictimip$] helo=compuserve.com)
ED> by $destinationmx$ with smtp (Exim 3.03 #41)
ED> id 17DZf2-0004m5-00
ED> for $addr; Fri, 31 May 2002 00:48:52 +0100
ED> The interesting things are X-Mailer, Subject, and the fact
...and "helo=compuserve.com".
Sorry to reply to my own post. Got distracted and omitted that.
--
Eddy
Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@brics.com>
To: blacklist@brics.com
Subject: Please ignore this portion of my mail signature.
These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@brics.com>, or you are likely to
be blocked.
