Re: Recent SPAM sources

[Rubywand <rubywand@swbell.net>]

Simon Biber writes ...
> 
 ....

> Looking at the header:
> 
> Path:
> news-server.bigpond.net.au!intgwlon.nntp.telstra.net!newsfeed.mathworks.com!
> europa.netcrusader.net!208.184.7.66!newsfeed.skycache.com!Cidera!news-hub.ca
> bleinet.net!easynet-quince!easynet.net!colt.net!news-x.support.nl!News-Servi
> ce!not-for-mail
> From: tewejc@sdfsdf.com
> Newsgroups: comp.sys.apple2,comp.sys.apple2.gno
> Subject: F.R,E;E .C,A.BL;E,... ;B,U.I;LD. ,Y;OU.R, ;OW,N. ;Ll;EG;AL.
> ,C;AB.L,E;
> .D,E;SC.R,A.M;BL,E.R........................................................
> ..  9795
> Date: 30 Oct 2000 19:46:34 GMT
> Organization: News Service (http://www.news-service.com/)
> Lines: 228
> Sender: clyde74@64.30.68.124
> Message-ID: <8tkj6q$ebc$488@news.news-service.com>
> NNTP-Posting-Host: 64.30.68.124
> Xref: news-server.bigpond.net.au comp.sys.apple2:16921
> comp.sys.apple2.gno:132
> 
> Apart from the bash path at the top you notice two servers that this message
> could have gone through:
> 64.30.68.124 which is ip-64-30-68-124.ips.avana.net
> and news.news-service.com
> 
> So I would recommend emailing abuse@avana.net as the spammer used one of
> their customers (or is one of their customers).
> 
> And also email abuse@news-service.com
> 
> Possibly also abuse@news-x.support.nl (next in the path)
> 
> Simon.


     Very neat! Thanks. I've sent the abuse emails.



Rubywand