[Dshield] Broken spammer

Ed Truitt ed.truitt at etee2k.net
Mon Oct 17 20:53:40 GMT 2005


I have been seeing a bunch of these, too - spamm relayed through an open reverse proxy, maybe?

-EdTr.
-----Original Message-----
From: "Paul Marsh" <pmarsh at nmefdn.org>
Date: Mon, 17 Oct 2005 11:16:37 
To:"General DShield Discussion List" <list at lists.dshield.org>
Subject: [Dshield] Broken spammer



This morning while weeding through the plethora of MyTob.LP (trend),
Mytob.ku (symantec), CME-??? (it's not working)
my gateway has been filling up with the following.  Don't know if it's
one of the above mentioned infected system that's corrupt or something
new.

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>404 Not Found</TITLE>
</HEAD><BODY>
<H1>Not Found</H1>
The requested URL was not found on this server.<P>
<HR>
<ADDRESS>Apache/1.3.31</ADDRESS>
</BODY></HTML>


Thanx, Paul



The information in this transmittal (including attachments, if any) is privileged and confidential and is intended only for the recipient(s) listed above. Any review, use, disclosure, distribution or copying of this transmittal is prohibited except by or on behalf of the intended recipient. If you have received this transmittal in error, please notify me immediately by reply email and destroy all copies of the transmittal. Thank you.

_________________________________________
Using .Net? Need to know more about .Net Security?
http://isc.sans.org/banner_count.php?dest=dotnet

_______________________________________________
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list

Cheers,
-E D Truitt

Sent via my BlackBerry from Cingular Wireless


More information about the list mailing list