http://netreport.virginmedia.com and

Assuming they haven't diddled the headers...

Louis Ohland wrote:
http://netreport.virginmedia.com and

Assuming they haven't diddled the headers...

I think they are sending from cracked machines. Over in
sci.engr.joining.welding and comp.robotics.misc this has been going on
for a while. They send a mess of messages from one site and then
another. It has floated around from a few US ISP's, a university in
Italy, a couple of northern European universities that I have forgotten
the specifics of...

Some of the header information is obviously garbage in the messages but
several of the header fields get stuck on by the outgoing nntp server
and are probably correct, at least for whatever ISP the cracked machine
is living on.

BobH

On Sun, 09 Dec 2007 16:58:18 -0600, Louis Ohland
wrote:

http://netreport.virginmedia.com and

Assuming they haven't diddled the headers...

About the only thing that is pretty reliable is that they are posting
from (at least in this flood):

NNTP-Posting-Host: 72.174.50.186

Another recent flood came from:

NNTP-Posting-Host: 82.35.108.103

--
+--------------------------------------------+
| Scott Logan - ssl "at" lathe.com |
| Logan Actuator Co. http://www.lathe.com |
| Harvard, IL |
|++++++++++++++++++++++++++++++++++++++++++++|
| Parts and Accessories for Logan Lathes and |
| Montgomery Wards Lathes |
| Logan-Lilly Mine Hoist Safety Controllers |
+--------------------------------------------+
"Measure Twice, Cut Once"

RCM FAQ - http://w3.uwyo.edu/~metal
Metal Web News - http://www.metalwebnews.com/
Help squash SPAM: http://www.cauce.org/