nanog mailing list archives

Being abused by a spammer.. Need help - AOL/swbell/adelphia.net


From: Nicole <nmh () daemontech com>
Date: Mon, 21 Jun 2004 16:36:56 -0700 (PDT)




 Below are several examples of spam apperantly being sent out forging both my
from address domain and Received from server information. Obviously this could
become problematic. Fortunatly it's inaccurate.
 
 Any help on how I can do something about this or find ouy who and how they are
doing it would be greatly appreciated. 

 Also I would share that this started after i started notifying upstream ISP's
of spam violations. Who apparently shared my information to earn myself
retaliation. The ISP's were most likely Media Dreamland and UUNET/MCI but I
cannot be certain of course. 


 Nicole

----------------

Return-Path: <catcall () unixgirl com>
Received: (qmail 18818 invoked from network); 21 Jun 2004 14:20:10 -0000
Received: from exprod6mx50.postini.com (HELO psmtp.com) (12.158.35.194)
  by adams.net with SMTP; 21 Jun 2004 14:20:10 -0000
Received: from source ([67.23.190.129]) by exprod6mx50.postini.com
([12.158.35.251]) with SMTP;
        Mon, 21 Jun 2004 07:20:08 PDT
Received: from unixgirl.com (mx20.webweaver.net [64.124.90.17])
        by 67-23-190-129.bflony.adelphia.net (Postfix) with ESMTP id 8F0CC0C0CB
        for <sgrigsby () adams net>; Mon, 21 Jun 2004 10:19:38 -0500
Message-ID: <100101c457a3$8c0bf833$a4cff4cf () unixgirl com>
From: "Denier I. Hobbs" <catcall () unixgirl com>
To: Sgrigsby <sgrigsby () adams net>
Subject: See the Cutset Chcks  Chick Gaping asloeshs filled with 
Date: Mon, 21 Jun 2004 10:19:38 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0016_C8B1DB09.BE7DF58C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE: 6.20.0.1;
VDF: 6.20.0.46; host: 67-23-190-129.bflony.adelphia.net)

Hlelo, chief :)
Young Cum Wrohe creampie vidoes ready to dlownoad


http://hO7paPqK.u.shoppostfalls.org/acfe22eeddf82266e32f/47XHt4LTK/FQUcOgkUBRsmA
woyAxRJDAMW.htm
-----------------------------


Return-Path: <nodding () unixgirl com>
Received: from 61-27-138-9.home.ne.jp (61-27-138-9.home.ne.jp [61.27.138.9])
        by theta.nas.net (8.11.6/8.10.1) with SMTP id i5L4VbK20918
        for <awilbur () netaccess on ca>; Mon, 21 Jun 2004 00:31:38 -0400 (EDT)
Received: from unixgirl.com (mx20.webweaver.net [64.124.90.17])
        by 61-27-138-9.home.ne.jp (Postfix) with ESMTP id A5F4DC0886
        for <awilbur () netaccess on ca>; Mon, 21 Jun 2004 00:31:11 -0500
Message-ID: <110101c45750$2fe5a1a8$ccbc5795 () unixgirl com>
From: "Selfsame R. Routinizing" <nodding () unixgirl com>
To: Awilbur <awilbur () netaccess on ca>
Subject: Hot Chick Gteting Jizezd Inetrnally in her Ass
Date: Mon, 21 Jun 2004 00:31:11 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0003_1BC6E4BE.73348A74"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)

Hlelo teerh!
Hot Chick Fileld with Cum



http://oitjl.pMkOx1kQ.0kzP5jE.shoppostfalls.org/acfe22eeddf82266e32f/2wFjk/BxUHP
wwSFSIIBxoyDQQCERVMAT1ABAY=.htm
----------------------------------

Received: from bm9.sec.tds.net ([216.170.230.79]) by mta02.mail.tds.net
          with ESMTP
          id <20040621021413.JVNC3320.mta02.mail.tds.net () bm9 sec tds net>
          for <becky () tctc com>; Sun, 20 Jun 2004 21:14:13 -0500
Received: from adsl-209-30-158-163.dsl.rcsntx.swbell.net
(adsl-209-30-158-163.dsl.rcsntx.swbell.net [209.30.158.163])
        by bm9.sec.tds.net (8.12.10/8.12.2) with SMTP id i5L2E8qt001719
        for <becky () tctc com>; Sun, 20 Jun 2004 21:14:10 -0500 (CDT)
Received: from unixgirl.com (mx20.webweaver.net [64.124.90.17])
        by adsl-209-30-158-163.dsl.rcsntx.swbell.net (Postfix) with ESMTP id
3F39723BDF
        for <becky () tctc com>; Sun, 20 Jun 2004 22:13:44 -0500
Message-ID: <010001c4573d$5e9cbbbd$6867fa4a () unixgirl com>
From: "Frazzled F. Restrains" <Cornelia () unixgirl com>
To: Becky <becky () tctc com>
Subject: The Httseot Chick gteting their asses fileld with cum
Date: Sun, 20 Jun 2004 22:13:44 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0035_D46F3F18.B5679917"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.5; AVE: 6.17.0.2; VDF:
6.17.0.5; host: adsl-209-30-158-163.dsl.rcsntx.swbell.net)

Good day.
Spam explicatives deleted.
http://tvLvT.shoppostfalls.org/acfe22eeddf82266e32f/PAmrZy9Yi/o1DBZY/6Cyo18y/BAc
NOBcnEwESAUAwAQo=.htm
-------------------------

Received: from  smtp-dtc01.proxy.aol.com (smtp-dtc01.proxy.aol.com
[205.188.118.17]) by rly-ip04.mx.aol.com (v98.19) with ESMTP id
RELAYIN10-b40d62f2867; Sun, 20 Jun 2004 20:43:20 -0400
Received: from AC9935A8.ipt.aol.com (AC9935A8.ipt.aol.com [172.153.53.168])
        by smtp-dtc01.proxy.aol.com (8.12.11/8.12.11) with SMTP id
i5L0hCtZ013596
        for <vpr87 () militaryop com>; Mon, 21 Jun 2004 00:43:15 GMT
Received: from unixgirl.com (mail.webweaver.net [64.124.90.12])
        by AC9935A8.ipt.aol.com (Postfix) with ESMTP id C98E8D4C19
        for <vpr87 () militaryop com>; Sun, 20 Jun 2004 20:42:49 -0500
Message-ID: <000101c45731$462f4644$46a3ec11 () unixgirl com>
From: "Bolero J. Amalgam" <captivation () unixgirl com>
To: Vpr <vpr87 () militaryop com>
Subject: Nice Amateur Tenes on webcam
Date: Sun, 20 Jun 2004 20:42:49 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0018_CC18E230.C1D2B726"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-Virus-Scanned: Norton
X-Scanned-By: MIMEDefang 2.40
X-Apparently-From: HeyJudebag () aol com
X-AOL-IP: 205.188.118.17











--
                     |\ __ /|   (`\            
                     | o_o  |__  ) )           
                    //      \\                 
  -  nmh () daemontech com  -  Powered by FreeBSD  -
------------------------------------------------------
 "The term "daemons" is a Judeo-Christian pejorative.
 Such processes will now be known as "spiritual guides"
  -Politicaly Correct UNIX Page

     http://www.nonsenseband.com

*** Spam Sucks and I get tons of it. So I have some tight spam filters.
     If any email to me bounces, please use your secret decoder ring
     and please send to blabgoo at yahoo dot com  :)


Current thread: