A look of the full header indicates that these spams come from gtei.net . The "X-Complaints-To:" line shows "abuse@gte.net". Maybe gtei.net is some part of gte.net (maybe not). So, it looks likes abuse complaints would go to ... abuse@gtei.net abuse@news.gtei.net abuse@gte.net Rubywand