[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Recent SPAM sources



Rubywand wrote:
>       Suspected that might be the case. Maybe you could look at the header
> and suggest one that would be on-target.
>
> Rubywand

Looking at the header:

Path:
news-server.bigpond.net.au!intgwlon.nntp.telstra.net!newsfeed.mathworks.com!
europa.netcrusader.net!208.184.7.66!newsfeed.skycache.com!Cidera!news-hub.ca
bleinet.net!easynet-quince!easynet.net!colt.net!news-x.support.nl!News-Servi
ce!not-for-mail
From: tewejc@sdfsdf.com
Newsgroups: comp.sys.apple2,comp.sys.apple2.gno
Subject: F.R,E;E .C,A.BL;E,... ;B,U.I;LD. ,Y;OU.R, ;OW,N. ;Ll;EG;AL.
,C;AB.L,E;
.D,E;SC.R,A.M;BL,E.R........................................................
..  9795
Date: 30 Oct 2000 19:46:34 GMT
Organization: News Service (http://www.news-service.com/)
Lines: 228
Sender: clyde74@64.30.68.124
Message-ID: <8tkj6q$ebc$488@news.news-service.com>
NNTP-Posting-Host: 64.30.68.124
Xref: news-server.bigpond.net.au comp.sys.apple2:16921
comp.sys.apple2.gno:132

Apart from the bash path at the top you notice two servers that this message
could have gone through:
64.30.68.124 which is ip-64-30-68-124.ips.avana.net
and news.news-service.com

So I would recommend emailing abuse@avana.net as the spammer used one of
their customers (or is one of their customers).

And also email abuse@news-service.com

Possibly also abuse@news-x.support.nl (next in the path)

Simon.