North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: zombienet spam fingerprint

  • From: E.B. Dreger
  • Date: Sat Jun 01 13:44:47 2002 
ED> Date: Sat, 1 Jun 2002 17:31:35 +0000 (GMT)
ED> From: E.B. Dreger


ED> 	Received: from $crackedvictimfqhn$ ([$crackedvictimip$] helo=compuserve.com)
ED> 		by $destinationmx$ with smtp (Exim 3.03 #41)
ED> 		id 17DZf2-0004m5-00
ED> 		for $addr; Fri, 31 May 2002 00:48:52 +0100

ED> The interesting things are X-Mailer, Subject, and the fact

...and "helo=compuserve.com".

Sorry to reply to my own post.  Got distracted and omitted that.


--
Eddy

Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <[email protected]>
To: [email protected]
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <[email protected]>, or you are likely to
be blocked.