🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.test
Article #74

Re: Getting tons of Spam from a BS account in my Hotmail - any suggestions?

#74
From: John McGaw
Date: Fri, 11 Apr 2003 16:25
102 lines
4435 bytes
"nooneyouknow" <nukeEmDano@bellsouth.net> wrote in message
news:uXAla.20614$eo4.3964@fe10.atl2.webusenet.com...
> Humm Ok lemme try again --
> This is the header that appears in the blue part of the email:
>
> From : "Your Health" <mZI4N29dfh@bellsouth.net>
> To : ----------@hotmail.com
> Subject :  Tried It All to Lose Fat?
>
> Date :  Friday, 11 Apr 2003 00:41:34 -0200
>
>   MIME-Version: 1.0
> Received: from bellsouth.net ([67.37.192.26]) by mc9-f25.bay6.hotmail.com
> with Microsoft SMTPSVC(5.0.2195.5600); Fri, 11 Apr 2003 03:24:55 -0700
> X-Message-Info: JGTYoYF78jEHjJx36Oi8+Q1OJDRSDidP
> Message-ID: <LClaefdnbVGp$NSJ5RtsG$hNAasnaA@localhost>
> X-Mailer: Internet Mail Service (5.5.2650.21)
> Return-Path: Your_Health-return-basicdsl=hotmail.com@bellsouth.net
> X-OriginalArrivalTime: 11 Apr 2003 10:24:57.0890 (UTC)
> FILETIME=[99F63020:01C30014]

snip..
If  I do a who-is query on the originator of the message, i.e. 67.37.192.26,
I come up with:

Query 67.37.192.26 at whois.thur.de
Process query: '67.37.192.26'
Query recognized as IP.
Match found in /etc/gwhois/pattern line 364
Querying whois.arin.net:43 with whois.


OrgName:    Ameritech Electronic Commerce
OrgID:      AMER
Address:    2701 W 15th ST
City:       Plano
StateProv:  TX
PostalCode: 75075
Country:    US

NetRange:   67.36.0.0 - 67.39.255.255
CIDR:       67.36.0.0/14
NetName:    AIT-ADSL4
NetHandle:  NET-67-36-0-0-1
Parent:     NET-67-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.AMERITECH.NET
NameServer: NS2.AMERITECH.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2001-08-30
Updated:    2002-03-18

TechHandle: ZS44-ARIN
TechName:   IPAdmin-SBIS
TechPhone:  +1-888-212-5411
TechEmail:  IPAdmin-SBIS@sbis.sbc.com

OrgAbuseHandle: ABUSE7-ARIN
OrgAbuseName:   abuse
OrgAbusePhone:  +1-888-212-5411
OrgAbuseEmail:  abuse@ameritech.net

OrgNOCHandle: SUPPO-ARIN
OrgNOCName:   Support - Southwestern Bell Internet Services
OrgNOCPhone:  +1-888-212-5411
OrgNOCEmail:  support@swbell.net

OrgTechHandle: IPADM4-ARIN
OrgTechName:   IPAdmin-Ameritech
OrgTechPhone:  +1-888-212-5411
OrgTechEmail:  IPAdmin-Ameritech@sbis.sbc.com

CustName:   CDS COMMUNICATIONS
Address:    2701 West 15th Street PMB 236
City:       Plano
StateProv:  TX
PostalCode: 75075
Country:    US
RegDate:    2002-03-01
Updated:    2002-03-01

NetRange:   67.37.192.24 - 67.37.192.31
CIDR:       67.37.192.24/29
NetName:    SBC067037192024020228
NetHandle:  NET-67-37-192-24-1
Parent:     NET-67-36-0-0-1
NetType:    Reassigned
Comment:
RegDate:    2002-03-01
Updated:    2002-03-01

# ARIN WHOIS database, last updated 2003-04-10 20:10
# Enter ? for additional hints on searching ARIN's WHOIS database.



--
  To resolve one of the above handles: whois -h whois.arin.net HANDLE
  OTOH offical handles should be recognised directly.
  Please report errors or misfits via the debian bug tracking system.

Query done.
Technical Details
Message-ID: <bTBla.72392$qC3.58882@fe06.atl2.webusenet.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-06!sn-xit-09!supernews.com!news.maxwell.syr.edu!c03.atl99!news.webusenet.com!pc01.webusenet.com!fe06.atl2.webusenet.com.POSTED!not-for-mail
References: <zPxla.46350$pO.43784@fe09.atl2.webusenet.com> <slrnb9deb7.h7k.hal@feenix.burgiss.net> <uXAla.20614$eo4.3964@fe10.atl2.webusenet.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: ff7a5,5f21a8f2ace06e2
X-Google-Attributes: gidff7a5,public
X-Google-Thread: 1122a6,451d8912dc57146
X-Google-Attributes: gid1122a6,public
X-Google-ArrivalTime: 2003-04-11 09:23:35 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-06!sn-xit-09!supernews.com!news.maxwell.syr.edu!c03.atl99!news.webusenet.com!pc01.webusenet.com!fe06.atl2.webusenet.com.POSTED!not-for-mail
Reply-To: "John McGaw" <nowhere@all.xyz>
From: "John McGaw" <jmcgaw@bellsouth.net>
Newsgroups: comp.test,bellsouth.net.support.adsl
References: <zPxla.46350$pO.43784@fe09.atl2.webusenet.com> <slrnb9deb7.h7k.hal@feenix.burgiss.net> <uXAla.20614$eo4.3964@fe10.atl2.webusenet.com>
Subject: Re: Getting tons of Spam from a BS account in my Hotmail - any suggestions?
Lines: 103
MIME-Version: 1.0
Content-Type: text/plain;
 charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <bTBla.72392$qC3.58882@fe06.atl2.webusenet.com>
X-Complaints-To: abuse@usenetserver.com
X-Abuse-Info: Please be sure to forward a copy of ALL headers
X-Abuse-Info: Otherwise we will be unable to process your complaint properly.
NNTP-Posting-Date: Fri, 11 Apr 2003 12:16:07 EDT
Date: Fri, 11 Apr 2003 12:25:26 -0400