nanog mailing list archives

Spam .. Find the sender !


From: Jan Czmok <czmok () ipf de>
Date: Sun, 10 May 1998 11:00:27 +0200

Hi!

We got some spam mail from
Received: from 1cust151.tnt1.tampa.fl.da.uu.net (HELO byte007)
(153.37.184.151)
  by relay.ipf.net with SMTP; 10 May 1998 04:47:58 -0000

and i cannot query the database (arin , ripe or radb) for the owner of
this network.
Any hints ?

If we can find the sender, then we go for a hunt against this spammers.

So far...

Greetings


Jan Czmok
IPF.NET NOC

more headers :

 Return-Path: hioqibua38 () msn com
Delivery-Date: Sun May 10 04:48:03 1998
Received: (qmail 26693 invoked from network); 10 May 1998 04:48:03
-0000
Received: from claven.cse.psu.edu (HELO cse.psu.edu) (130.203.3.50)
  by finch.cse.psu.edu with SMTP; 10 May 1998 04:48:03 -0000
Received: from relay.ipf.net (relay.ipf.net [195.88.0.13]) by
cse.psu.edu (8.8.8/8.7.3) with SMTP id AAA21505 for
<0000 () 0000 cs psu edu>; Sun, 10 May 1998 00:48:02 -0400 (EDT)
Date: Sun, 10 May 1998 00:48:02 -0400 (EDT)
From: hioqibua38 () msn com
Received: (qmail 13706 invoked from network); 10 May 1998 04:47:58
-0000
Received: from 1cust151.tnt1.tampa.fl.da.uu.net (HELO byte007)
(153.37.184.151)
  by relay.ipf.net with SMTP; 10 May 1998 04:47:58 -0000
To: hioqibua38 () msn com
Comments: Authenticated sender is <hioqibua38 () msn com>
Errors-To: shadow007 () hotmail com
Subject: DO YOU KNOW HIS OR HER BACKGROUND???
Message-Id: <199805103688SAA3125 () post ipf net>



Current thread: