спам-флуд, 13.11.2011

[sid@merlin]

отметил сегодня необычную активность спама

сперва прошла волна несколько тыс. писем с мусором для загаживания баесов

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from forward2.mail.yandex.net (forward2.mail.yandex.net [77.88.46.7])
        by main.merlin.com.ua (Postmaster) with ESMTP id 488375DEBB7
        for <[email protected]>; Sun, 13 Nov 2011 01:20:50 +0200 (EET)
Received: from smtp3.mail.yandex.net (smtp3.mail.yandex.net [77.88.46.103])
        by forward2.mail.yandex.net (Yandex) with ESMTP id E217812A38AB
        for <[email protected]>; Sun, 13 Nov 2011 03:20:44 +0400 (MSK)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
        t=1321140044; bh=OgdjHSHrViTky0d9a3lhGlFcf7vEyg3Mk0QHij87z2M=;
        h=From:Date:Sender:To:Message-ID:Subject:MIME-Version:Content-Type:
         Content-Transfer-Encoding;
        b=tu1oS9o4a1DFTiqKkWywCUVe6F4dxuI10oQLCR+pEkywL8YB8ZtgWanwnqivFlQ6R
         VsB0qaAhZ5x2cl7IapDbO5QMSAsDZ6bSSAzYDjhY7IEwVcrdtVC2MTvxVH2mxwAv0H
         4yfDrv7tFAxgB0HyjyOhzqO1C7EU/tRdZqlplyM4=
Received: from smtp3.mail.yandex.net (localhost [127.0.0.1])
        by smtp3.mail.yandex.net (Yandex) with ESMTP id C0AF91BA05DB
        for <[email protected]>; Sun, 13 Nov 2011 03:20:44 +0400 (MSK)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
        t=1321140044; bh=OgdjHSHrViTky0d9a3lhGlFcf7vEyg3Mk0QHij87z2M=;
        h=From:Date:Sender:To:Message-ID:Subject:MIME-Version:Content-Type:
         Content-Transfer-Encoding;
        b=tu1oS9o4a1DFTiqKkWywCUVe6F4dxuI10oQLCR+pEkywL8YB8ZtgWanwnqivFlQ6R
         VsB0qaAhZ5x2cl7IapDbO5QMSAsDZ6bSSAzYDjhY7IEwVcrdtVC2MTvxVH2mxwAv0H
         4yfDrv7tFAxgB0HyjyOhzqO1C7EU/tRdZqlplyM4=
Received: from pro1962.startdedicated.com (pro1962.startdedicated.com [188.138.109.22])
        by smtp3.mail.yandex.net (nwsmtp/Yandex) with ESMTP id KhV0VALm-KiVao0YQ;
        Sun, 13 Nov 2011 03:20:44 +0400
From: MAILER-DAEMON
X-Yandex-Spam: 1
Date: Sat, 12 Nov 2011 23:20:43 +0000 (UTC)
Sender: [email protected]
To: [email protected]
Message-ID: <280870479.301.1321140044528.JavaMail.u@pro1962.startdedicated.com>
Subject:  YQZ2O2PNI2DR03WV TYNBRDMZZOLXOWX1 QKODNNEZLL68EGTG L3E1
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

2) везде участвует хост pro1962.startdedicated.com
3) его спокойно принимает Яндекс! как релей
4) отправитель проставлен (не является а проставлен) [email protected]
5) В сабже второй волны - "Отчёт Алексея Костусева: что сделано за год"

на сейчас (за 4 часа этих суток)
cat /var/log/maillog |grep pro1962.startdedicated.com |wc -l
2245