[nsp-sec] Spam bombed help needed

Hank Nussbacher hank at efes.iucc.ac.il
Thu Jun 19 01:46:18 EDT 2008


For the past 2 weeks, one of my email addresses has been spam bombed (1000s 
per day).  The spam looks like this:

>Received: from c-76-20-76-197.hsd1.ca.comcast.net 
>(c-76-20-76-197.hsd1.ca.comcast.net [76.20.76.197])
>         by grappa.isoc.org.il (Postfix) with ESMTP id 57130105FD
>         for <hank at isoc.org.il>; Thu, 19 Jun 2008 08:14:26 +0300 (IDT)
>Message-ID: <000a01c8d1cb$02a7e302$4f507da5 at phtte>
>From: "gerhardt hargrove" <alexendr at mobility.com>
>To: <hank at isoc.org.il>
>Date: Thu, 19 Jun 2008 03:27:01 +0000
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>         boundary="----=_NextPart_000_0007_01C8D1CB.02A20AC6"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2900.3138
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
>Status: O
>X-UID: 2718
>Content-Length: 848
>X-Keywords: 
>
>
>All meds in one place: <http://geocities.com/CourtneyStein51/>Check it here
>4 pills for FREE for EVERY customer

The URL of the spam points to some geocities site - always a different 
one.  MY spam filters spot it but it is getting annoying already and not 
relenting.  Anyone at Yahoo or anyone else know about this spambot and how 
to shut it down?

Thanks,
Hank




More information about the nsp-security mailing list