Being abused by a spammer.. Need help - AOL/swbell/adelphia.net

Nicole nmh at daemontech.com
Mon Jun 21 23:36:56 UTC 2004




 Below are several examples of spam apperantly being sent out forging both my
from address domain and Received from server information. Obviously this could
become problematic. Fortunatly it's inaccurate.
 
 Any help on how I can do something about this or find ouy who and how they are
doing it would be greatly appreciated. 

 Also I would share that this started after i started notifying upstream ISP's
of spam violations. Who apparently shared my information to earn myself
retaliation. The ISP's were most likely Media Dreamland and UUNET/MCI but I
cannot be certain of course. 


 Nicole

----------------

Return-Path: <catcall at unixgirl.com>
Received: (qmail 18818 invoked from network); 21 Jun 2004 14:20:10 -0000
Received: from exprod6mx50.postini.com (HELO psmtp.com) (12.158.35.194)
  by adams.net with SMTP; 21 Jun 2004 14:20:10 -0000
Received: from source ([67.23.190.129]) by exprod6mx50.postini.com
([12.158.35.251]) with SMTP;
        Mon, 21 Jun 2004 07:20:08 PDT
Received: from unixgirl.com (mx20.webweaver.net [64.124.90.17])
        by 67-23-190-129.bflony.adelphia.net (Postfix) with ESMTP id 8F0CC0C0CB
        for <sgrigsby at adams.net>; Mon, 21 Jun 2004 10:19:38 -0500
Message-ID: <100101c457a3$8c0bf833$a4cff4cf at unixgirl.com>
From: "Denier I. Hobbs" <catcall at unixgirl.com>
To: Sgrigsby <sgrigsby at adams.net>
Subject: See the Cutset Chcks  Chick Gaping asloeshs filled with 
Date: Mon, 21 Jun 2004 10:19:38 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0016_C8B1DB09.BE7DF58C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE: 6.20.0.1;
VDF: 6.20.0.46; host: 67-23-190-129.bflony.adelphia.net)

Hlelo, chief :)
Young Cum Wrohe creampie vidoes ready to dlownoad


http://hO7paPqK.u.shoppostfalls.org/acfe22eeddf82266e32f/47XHt4LTK/FQUcOgkUBRsmA
woyAxRJDAMW.htm
-----------------------------


Return-Path: <nodding at unixgirl.com>
Received: from 61-27-138-9.home.ne.jp (61-27-138-9.home.ne.jp [61.27.138.9])
        by theta.nas.net (8.11.6/8.10.1) with SMTP id i5L4VbK20918
        for <awilbur at netaccess.on.ca>; Mon, 21 Jun 2004 00:31:38 -0400 (EDT)
Received: from unixgirl.com (mx20.webweaver.net [64.124.90.17])
        by 61-27-138-9.home.ne.jp (Postfix) with ESMTP id A5F4DC0886
        for <awilbur at netaccess.on.ca>; Mon, 21 Jun 2004 00:31:11 -0500
Message-ID: <110101c45750$2fe5a1a8$ccbc5795 at unixgirl.com>
From: "Selfsame R. Routinizing" <nodding at unixgirl.com>
To: Awilbur <awilbur at netaccess.on.ca>
Subject: Hot Chick Gteting Jizezd Inetrnally in her Ass
Date: Mon, 21 Jun 2004 00:31:11 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0003_1BC6E4BE.73348A74"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)

Hlelo teerh!
Hot Chick Fileld with Cum



http://oitjl.pMkOx1kQ.0kzP5jE.shoppostfalls.org/acfe22eeddf82266e32f/2wFjk/BxUHP
wwSFSIIBxoyDQQCERVMAT1ABAY=.htm
----------------------------------

Received: from bm9.sec.tds.net ([216.170.230.79]) by mta02.mail.tds.net
          with ESMTP
          id <20040621021413.JVNC3320.mta02.mail.tds.net at bm9.sec.tds.net>
          for <becky at tctc.com>; Sun, 20 Jun 2004 21:14:13 -0500
Received: from adsl-209-30-158-163.dsl.rcsntx.swbell.net
(adsl-209-30-158-163.dsl.rcsntx.swbell.net [209.30.158.163])
        by bm9.sec.tds.net (8.12.10/8.12.2) with SMTP id i5L2E8qt001719
        for <becky at tctc.com>; Sun, 20 Jun 2004 21:14:10 -0500 (CDT)
Received: from unixgirl.com (mx20.webweaver.net [64.124.90.17])
        by adsl-209-30-158-163.dsl.rcsntx.swbell.net (Postfix) with ESMTP id
3F39723BDF
        for <becky at tctc.com>; Sun, 20 Jun 2004 22:13:44 -0500
Message-ID: <010001c4573d$5e9cbbbd$6867fa4a at unixgirl.com>
From: "Frazzled F. Restrains" <Cornelia at unixgirl.com>
To: Becky <becky at tctc.com>
Subject: The Httseot Chick gteting their asses fileld with cum
Date: Sun, 20 Jun 2004 22:13:44 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0035_D46F3F18.B5679917"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.5; AVE: 6.17.0.2; VDF:
6.17.0.5; host: adsl-209-30-158-163.dsl.rcsntx.swbell.net)

Good day.
Spam explicatives deleted.
http://tvLvT.shoppostfalls.org/acfe22eeddf82266e32f/PAmrZy9Yi/o1DBZY/6Cyo18y/BAc
NOBcnEwESAUAwAQo=.htm
-------------------------

Received: from  smtp-dtc01.proxy.aol.com (smtp-dtc01.proxy.aol.com
[205.188.118.17]) by rly-ip04.mx.aol.com (v98.19) with ESMTP id
RELAYIN10-b40d62f2867; Sun, 20 Jun 2004 20:43:20 -0400
Received: from AC9935A8.ipt.aol.com (AC9935A8.ipt.aol.com [172.153.53.168])
        by smtp-dtc01.proxy.aol.com (8.12.11/8.12.11) with SMTP id
i5L0hCtZ013596
        for <vpr87 at militaryop.com>; Mon, 21 Jun 2004 00:43:15 GMT
Received: from unixgirl.com (mail.webweaver.net [64.124.90.12])
        by AC9935A8.ipt.aol.com (Postfix) with ESMTP id C98E8D4C19
        for <vpr87 at militaryop.com>; Sun, 20 Jun 2004 20:42:49 -0500
Message-ID: <000101c45731$462f4644$46a3ec11 at unixgirl.com>
From: "Bolero J. Amalgam" <captivation at unixgirl.com>
To: Vpr <vpr87 at militaryop.com>
Subject: Nice Amateur Tenes on webcam
Date: Sun, 20 Jun 2004 20:42:49 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0018_CC18E230.C1D2B726"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
X-Virus-Scanned: Norton
X-Scanned-By: MIMEDefang 2.40
X-Apparently-From: HeyJudebag at aol.com
X-AOL-IP: 205.188.118.17











--
                     |\ __ /|   (`\            
                     | o_o  |__  ) )           
                    //      \\                 
  -  nmh at daemontech.com  -  Powered by FreeBSD  -
------------------------------------------------------
 "The term "daemons" is a Judeo-Christian pejorative.
 Such processes will now be known as "spiritual guides"
  -Politicaly Correct UNIX Page

     http://www.nonsenseband.com

*** Spam Sucks and I get tons of it. So I have some tight spam filters.
     If any email to me bounces, please use your secret decoder ring
     and please send to blabgoo at yahoo dot com  :)




More information about the NANOG mailing list