Received: by 10.68.191.97 with SMTP id gx1mr243578pbc.4.1352984758407;
        Thu, 15 Nov 2012 05:05:58 -0800 (PST)
Path: 6ni83002pbd.1!nntp.google.com!news.glorb.com!weretis.net!feeder1.news.weretis.net!news.albasani.net!.POSTED!not-for-mail
From: "R. Scott" <w7...@yahoo.com>
Newsgroups: news.admin.net-abuse.email
Subject: Re: Tiffany Jones - DREAMHOST flood
Date: Thu, 15 Nov 2012 05:05:56 -0800
Organization: albasani.net
Lines: 24
Message-ID: <50A4E8B4.6060902@yahoo.com>
References: <k7onr9$o02$1@news.albasani.net> <6e4bfeb9-7662-4256-b570-4dfec1445ba3@googlegroups.com>
Mime-Version: 1.0
X-Trace: news.albasani.net LOWfc2ipNPn7p1NjpcKHxvFZrY2gH5PLj/Uqzk0Ur6fGMZEFyC5cxgdASKT2vBXerY/LjOFOAAKodk8e0+KzutbapgMNzO9RE3xu2pzddD/6WzDes4/1xQhAstdIPjmW
NNTP-Posting-Date: Thu, 15 Nov 2012 13:05:57 +0000 (UTC)
Injection-Info: news.albasani.net; logging-data="RbYd5IBDz5XZRjX74c5JhHo0LsTof6sbxD3i2rpDU0/TmbaLPNGitKj81iR0jz5+V2oywHinWFbeiZnNqFZFQZBcVDTmzyVZzrckH/fqG2RbpF0oyqLkcT7D5IZ/q0vx"; mail-complaints-to="ab...@albasani.net"
User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:16.0) Gecko/20121026 Thunderbird/16.0.2
To: Ellice S <ellice.soli...@dreamhost.com>
In-Reply-To: <6e4bfeb9-7662-4256-b570-4dfec1445ba3@googlegroups.com>
Cancel-Lock: sha1:CcOeFj1B1Cw79/QICAKna7vHshE=
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

On 11/14/2012 5:13 PM, Ellice S wrote:
> Looks like you all have a pretty good idea of what's going on. Here at DreamHost, we have a very strict spam policy. I can assure you this spam is not coming directly from us, but through spammers who have posted their target links on our customers' sites via exploits.
>
> Our abuse team would be happy to look into the target links and find the exploits so we can notify the hacked customers and work with them on the cleanup. Please send any reports of this to ab...@dreamhost.com -- make sure to include the full headers and text of such messages with links to sites we host, and we will investigate and take the links in the spam messages offline.
>
>
>
> -Ellice S
> DreamHost Staff
>

Ive sent reports of everyone, so far it doesnt appear to be stopping. 
Ive gotten one just his morning.

http://apscaswell.org/wp-content/themes/twentyten/images/plcby2yp.php

a few more

http://dialoguedirect.us/img/partners/e02oogih.php
http://warmsilence.org/core/wp-content/themes/roundflow/g47ay8m2.php
http://ob.noxio.us/gaston2/images/hqmn6kpg.php
http://tchlibrary.com/wp-content/themes/clean-home/exephcoz.php
http://www.himalayan.hr/includes/Archive/wdu4ilas.php
http://www.kevinwoodesigns.com/apsa/wp-content/themes/regulus/4y8w5yrw.php