Wow.. I've never seen so much spam hit a group all at once. Someone is
having a field day with it.

Report Abuse to http://netreport.virginmedia.com

Michael Kennedy wrote:

Wow.. I've never seen so much spam hit a group all at once. Someone is
having a field day with it.

Report Abuse to http://netreport.virginmedia.com



It also hit comp.arch.embedded at the same time and much harder;
I saw about 100 per minute over Supernews. ...must have been
a DoS attack.

Michael

This has been happening in many groups. They hit
rec.music.classical.recordings a few months back.

The simplest temporary remedy is to prefix the subject line with "real
post".

Michael Kennedy wrote:
Wow.. I've never seen so much spam hit a group all at once. Someone is
having a field day with it.

I must be living right and/or working my killfile right, 'cause I haven't
seen anything out of the ordinary. Got a NNTP-Posting-Host or something
that identifies the source? I don't have the string 'virgin' in my killfile.

--
A staffer for Democrat Senator Maria Cantwell of Washington has been
arrested for trying to arrange a sexual tryst with a 13-year old boy.
http://www.thesmokinggun.com/archive...72senate1.html

"clifto" wrote in message
...
Michael Kennedy wrote:
Wow.. I've never seen so much spam hit a group all at once. Someone is
having a field day with it.

I must be living right and/or working my killfile right, 'cause I haven't
seen anything out of the ordinary. Got a NNTP-Posting-Host or something
that identifies the source? I don't have the string 'virgin' in my
killfile.

--
A staffer for Democrat Senator Maria Cantwell of Washington has been
arrested for trying to arrange a sexual tryst with a 13-year old boy.
http://www.thesmokinggun.com/archive...72senate1.html


Well I just checked and its on google groups too if your really curious..
http://groups.google.com/group/sci.e...&start=10&sa=N

They posted several hundred posts with random sentances and random users but
it is all from the same host and IP. It is not crossposted so maybe thats
why it didn't get filtered.



here is the info from one of the many posts

Path:
border1.nntp.dca.giganews.com!nntp.giganews.com!ne wsfeed00.sul.t-online.de!t-online.de!club-internet.fr!feedme-small.clubint.net!proxad.net!feeder1-1.proxad.net!194.117.148.138.MISMATCH!pe2.news.blu eyonder.co.uk!blueyonder!pe1.news.blueyonder.co.uk !blueyonder!fe2.news.blueyonder.co.uk.POSTED!53ab2 750!not-for-mail
From: Chris
Message-ID:
Newsgroups: sci.electronics.repair
Subject: No chemists often deposit the embarrassed kitchen.
Organization: lately, go flick a professor
Lines: 30
Date: Wed, 05 Dec 2007 01:43:37 GMT
NNTP-Posting-Host: 82.35.108.103
X-Complaints-To: http://netreport.virginmedia.com
X-Trace: fe2.news.blueyonder.co.uk 1196819017 82.35.108.103 (Wed, 05 Dec
2007 01:43:37 GMT)
NNTP-Posting-Date: Wed, 05 Dec 2007 01:43:37 GMT
Bytes: 2921
Xref: number1.nntp.dca.giganews.com sci.electronics.repair:483449

About a month ago, I read in PC World magazine that the Stormworm has
been around for a long time and it has been getting much more active
lately. Somewhere else I read that the MI5 Persecution spams are an
automated bot and it changes servers (whatever) once each month.I am not
a computer expert so I really don't know.
cuhulin

Michael Kennedy wrote:
"clifto" wrote...
I must be living right and/or working my killfile right, 'cause I haven't
seen anything out of the ordinary. Got a NNTP-Posting-Host or something
that identifies the source?

here is the info from one of the many posts
[snip]
NNTP-Posting-Host: 82.35.108.103

Ah, okay. I have the whole of 82/8 killfiled, since I've never seen anything
in usenet from there that wasn't abuse of some kind.

--
A staffer for Democrat Senator Maria Cantwell of Washington has been
arrested for trying to arrange a sexual tryst with a 13-year old boy.
http://www.thesmokinggun.com/archive...72senate1.html

"clifto" wrote in message
...
Michael Kennedy wrote:
"clifto" wrote...
I must be living right and/or working my killfile right, 'cause I
haven't
seen anything out of the ordinary. Got a NNTP-Posting-Host or something
that identifies the source?

here is the info from one of the many posts
[snip]
NNTP-Posting-Host: 82.35.108.103

Ah, okay. I have the whole of 82/8 killfiled, since I've never seen
anything
in usenet from there that wasn't abuse of some kind.

--
A staffer for Democrat Senator Maria Cantwell of Washington has been
arrested for trying to arrange a sexual tryst with a 13-year old boy.
http://www.thesmokinggun.com/archive...72senate1.html


Interesting. I never have paid attention to specific IP ranges spewing more
spam / abuse than others. Not a bad idea I suppose.

I received a spam scam email today from someone who pretends to be Sandy
Berger.100 million dollars.I didn't know Sandy Berger moved to Nigeria.
cuhulin