Spam .. Find the sender !

Jan Czmok czmok at ipf.de
Sun May 10 09:00:27 UTC 1998


Hi!

We got some spam mail from
> Received: from 1cust151.tnt1.tampa.fl.da.uu.net (HELO byte007)
(153.37.184.151)
>   by relay.ipf.net with SMTP; 10 May 1998 04:47:58 -0000

and i cannot query the database (arin , ripe or radb) for the owner of
this network.
Any hints ?

If we can find the sender, then we go for a hunt against this spammers.

So far...

Greetings


Jan Czmok
IPF.NET NOC

more headers :

 Return-Path: hioqibua38 at msn.com
> Delivery-Date: Sun May 10 04:48:03 1998
> Received: (qmail 26693 invoked from network); 10 May 1998 04:48:03
-0000
> Received: from claven.cse.psu.edu (HELO cse.psu.edu) (130.203.3.50)
>   by finch.cse.psu.edu with SMTP; 10 May 1998 04:48:03 -0000
> Received: from relay.ipf.net (relay.ipf.net [195.88.0.13]) by
cse.psu.edu (8.8.8/8.7.3) with SMTP id AAA21505 for
<0000 at 0000.cs.psu.edu>; Sun, 10 May 1998 00:48:02 -0400 (EDT)
> Date: Sun, 10 May 1998 00:48:02 -0400 (EDT)
> From: hioqibua38 at msn.com
> Received: (qmail 13706 invoked from network); 10 May 1998 04:47:58
-0000
> Received: from 1cust151.tnt1.tampa.fl.da.uu.net (HELO byte007)
(153.37.184.151)
>   by relay.ipf.net with SMTP; 10 May 1998 04:47:58 -0000
> To: hioqibua38 at msn.com
> Comments: Authenticated sender is <hioqibua38 at msn.com>
> Errors-To: shadow007 at hotmail.com
> Subject: DO YOU KNOW HIS OR HER BACKGROUND???
> Message-Id: <199805103688SAA3125 at post.ipf.net>




More information about the NANOG mailing list