Re: OFFTOPIC: Re: Comment on spam

shalon@interlock.dfw.ibm.com
12 Jun 1998 13:58:04 -0500


Paul Schmidt <paul.schmidt@ssa.crane.navy.mil> writes:

> Mike A. Harris wrote:
> >
> > This seems to be a very good spammer. No way of tracing back...
> > ;o(
>
> <snip>
>
> > Received: by vger.rutgers.edu id <971524-14379>; Fri, 12 Jun 1998 08:26:35 -0400
> > Received: from bbs.aubbs.com ([204.181.190.211]:1186 "HELO verycool.net" ident: "NO-IDENT-SERVICE[2]") by vger.rutgers.edu with SMTP id <971481-14379>; Fri, 12 Jun 1998 08:26:25 -0400
>
> Looks to me like it came from 204.181.190.211, who identified
> itself as verycool.net (which, incidently, has its names served
> by freeyellowpages.com). Obviously lying as usual for a spammer.
>
> 204.181.190 is assigned to Wongs Advance Technology, and the
> entire 204.18[123].x.x space is owned by Sprint.
>
> The real host name in from reverse lookup for 204.181.190.211 is
> bbs.aubbs.com, but a forward lookup of bbs.aubbs.com comes up
> empty. (Misconfigured DNS).
>
> The reverse lookup is provided by ns.accesscom.net, which also
> serves names for aubbs.com. So bbs.aubbs.com is probably right.
>
> I don't think this spammer is very good at all. And if it was
> really from a bbs, I'd bet the sysop can identify the sender.
>
> Kudos, however, to the vger ops who have a mailer that provides
> all the info in the headers needed to track this stuff down.
> They *are* good.
>

Well, I can verify the network assignments. I used to work there. ;)
bbs.aubbs.net is the network address for Adventures Unlimited BBS.
Neworleans.org is also an Accesscom, Inc. customer.
Probably the best person to complain to about this is Bart Colosino,
bcolosi@accesscom.net
Complain, everyone, cause when I was there Bart had a rather relaxed
attitude towards spam.

Shalon Wood

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu