At 08:43 AM 12/4/2004, George Buckner wrote:
>Some of our subscribers, mainly the ones in Germany, are complaining that
>their messages are taking several days for delivery.  The header from one
>of these, after it was finally delivered, is appended below.  The problem
>has persisted for the past few days.  Does anyone know if there is
>anything to do here besides wait?
>
>
>George Buckner
>Owner, ASSC-*@LISTSERV.UH.EDU
>
>=====
>
>From: David Chalmers <[log in to unmask]>
>Date: 1 December 2004 12:32:29 GMT+01:00
>To: [log in to unmask]
>Subject: Re: ASSC8 Book
>Reply-To: ASSC Executive Committee <[log in to unmask]>
>Return-Path: <[log in to unmask]>
>Received: from sunny.urz.uni-magdeburg.de ([unix socket]) by
>sunny.urz.uni-magdeburg.de (Cyrus v2.1.17) with LMTP; Thu, 02 Dec 2004
>15:05:43 +0100
>Received: from mail.uni-magdeburg.de (mail.uni-magdeburg.de
>[141.44.1.10]) by sunny.urz.uni-magdeburg.de (8.12.10/8.12.10) with
>ESMTP id iB2E53Dh018370 for <[log in to unmask]>; Thu,
>2 Dec 2004 15:05:03 +0100
>Received: from fzkmail2.fzk.de ([141.52.27.52]) by
>mail.uni-magdeburg.de with smtp (EXIM Version 4.43) for
><[log in to unmask]> id 1CZrZo-00040P-Kw; Thu, 02 Dec
>2004 15:05:03 +0100
>Received: FROM listserv.fzk.de BY fzkmail2.fzk.de ; Thu Dec 02
>15:04:50 2004 +0100

That coincides with the Lycos roll out of the screen saver that buries
spammer hosts in packet requests.

checking fzk.de on news.admin.net-abuse.* I see that spammers on their
servers:

http://tinyurl.com/62dj6 (source)

spammed some medical database on Nov 30
spammed rolexes on Nov 24
spammed pharms on Nov 22
spammed preapproved mortgages on Nov 22
spammed that medical database on Nov 21
spammed rolexes on Nov 19
spammed fake college degrees on Nov 16
spammed Cialis on Nov 3
spammed Viagra on Oct 19
spammed Regalis on Oct 17

A couple of the uses of the fzk.de domain look like forgeries. Most of the
ones that I checked didn't.

If I were Lycos, I think that I might add fzk.de to my list of spam
friendly hosts, which means that right now they are getting buried in
packet requests.  The netcraft report yesterday said that most hosts that
were targeted by the Lycos counterattack were unreachable. A two day lag is
probably the best anyone can expect trying to reach an ISP that hosts or
otherwise provides bandwidth to spammers.

Apparently so many people are fed up with spam that the lycos server
offering the screen saver attack bot is buried in requests.  I'm hoping
they get some mirrors up soon to spread the load. fzk.de needs to choose
between hosting spammers and hosting the rest of the world.  Your
correspondents on fzk.de can take their business elsewhere if fzk.de makes
the wrong choice.

Three cheers for Lycos. It's about time the ISPs hosting spammers got a
taste of what they put us through.