[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (TFT) Spam / virus info
- To: tft@brainiac.com
- Subject: Re: (TFT) Spam / virus info
- From: Ed Thorn <prophesor@yahoo.com>
- Date: Thu, 9 Mar 2006 12:00:48 -0800 (PST)
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=hIU1JpHAJSz8Kgm02UPQ1TW+XqvSvJlGV/om7U6zat8jUgQFQxcCsWhh8utwuR70D87AArYo/gfKgFeKEDRDYh+GF5Uf6nj4PmYj+VexdINSC2AmHa4WIctJEwcvhZoKSkSFlay1FUsXUFPFab3OaG2qsg1mFrP7AwnTJG9nRTM= ;
- In-reply-to: <20060309102201.16dd3b6a.jh@brainiac.com>
- Reply-to: tft@brainiac.com
- Sender: tft-owner@brainiac.com
Joe, thanks for the confidence and diligence.
I'm not in Egypt. I _am_ incensed.
You should be made aware that none of my other lists or contacts are reporting anything. So that makes me think somebody sold some spammer my address and your list as some sort of matched pair, or perhaps the victim at .80 had a message with those two factors that the bug found.
Sometimes, I think we're losing.
----- Original Message ----
From: Joe Hartley <jh@brainiac.com>
To: tft@brainiac.com
Sent: Thursday, March 9, 2006 10:22:01 AM
Subject: (TFT) Spam / virus info
On Thu, 9 Mar 2006 09:53:30 -0500
Joe Hartley <jh@brainiac.com> wrote:
> On Thu, 9 Mar 2006 06:07:31 -0800 (PST)
> Tim <rebl@swbell.net> wrote:
>
> > John, this 'prophesor' could be a bot. If it is, whoever moderates our list will need to unsub it (and ban if possible).
>
> Done. It looks like someone's PC has been infected with a virus rather than
> a deliberate spamming. More to come.
This looks like it was coming from Egypt; at least the IP address it
came from, 196.218.38.80, is assigned to an Egyptian ISP. This address
has been blocked from sending any email to my server. If I see anything else
come from this subnet, I'll block the whole thing.
I know who prophesor@yahoo.com is, and it's highly unlikely that this was
done on purpose.
Prophesor (Ed), you're back on the list with post privs. I'd check your
IP address to make sure it's not your machine that's infected. If you are
in Egypt now, then you probably are infected, and the best way to post would
be using the Yahoo mail web interface.
--
======================================================================
Joe Hartley - UNIX/network Consultant - jh@brainiac.com
Without deviation from the norm, "progress" is not possible. - FZappa
=====
Post to the entire list by writing to tft@brainiac.com.
Unsubscribe by mailing to majordomo@brainiac.com with the message body
"unsubscribe tft"
=====
Post to the entire list by writing to tft@brainiac.com.
Unsubscribe by mailing to majordomo@brainiac.com with the message body
"unsubscribe tft"