Re: Machine Used by Spammers

Ludovic Joly wrote: 
Dave - Dr. Kirkby?


Yes, that is me.

Sorry but your crap sounds poor and sick to me.

I can't belive how stupid you, and several others are. A view from the sever logs.

82.228.134.153 - - [27/Dec/2005:15:08:42 +0000] "GET /send-loads-email.exe HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727) AdsFilter/1.0.0.15"
213.65.253.212 - - [27/Dec/2005:15:24:44 +0000] "GET /send-loads-email.exe HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.0 (like Gecko)"
86.132.253.139 - - [27/Dec/2005:15:54:31 +0000] "GET /send-loads-email.exe HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5"
195.92.67.73 - - [27/Dec/2005:17:10:33 +0000] "GET /send-loads-email.exe HTTP/1.1" 200 - "http://www.southminster-branch-line.org.uk/send-loads-email.exe"; "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
195.92.67.74 - - [27/Dec/2005:17:14:39 +0000] "GET /send-loads-email.exe HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
82.225.78.80 - - [28/Dec/2005:08:42:22 +0000] "GET /send-loads-email.exe HTTP/1.1" 200 196938752 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
82.225.78.80 - - [28/Dec/2005:08:49:42 +0000] "GET /send-loads-email.exe HTTP/1.1" 206 196937320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
62.61.78.131 - - [28/Dec/2005:09:46:35 +0000] "GET /send-loads-email.exe HTTP/1.0" 200 196938752 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461; .NET CLR 1.1.4322)"
82.225.78.80 - - [28/Dec/2005:08:49:47 +0000] "GET /send-loads-email.exe HTTP/1.1" 206 196937320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
82.225.78.80 - - [28/Dec/2005:12:03:57 +0000] "GET /send-loads-email-2.01.exe HTTP/1.1" 200 1000000016 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
82.225.78.80 - - [28/Dec/2005:12:04:02 +0000] "GET /send-loads-email-2.01.exe HTTP/1.1" 206 999998584 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"



--
Dave K

http://www.southminster-branch-line.org.uk/

Please note my email address changes periodically to avoid spam.
It is always of the form: month-year@domain. Hitting reply will work
for a couple of months only. Later set it manually. The month is
always written in 3 letters (e.g. Jan, not January etc)
.