blogx
musings of mark since 2001

   Everyone has noticed the increase in spam since the beginning of this year, and as I generally send out a notice to the ISP to report spammers, the one in my Inbox this am was interesting; when I ran the whois on the originating IP and it came back as Halliburton Company, from Texas. Yep, that’s the same one with the Whitehouse in it’s back pocket as it makes a fortune from the cost+ no competition contracts to rebuild the country that they just wrecked. The email header:
Received: from xuyd.v58×4.org [34.187.194.95] by 216.171.238.69; Thu, 19 Jun 2003 20:44:23 +0600 and if you search (Arin)on the IP address (34.187.194.95) in the first “Received: from” you’ll get the output form the whois at Arin.
I’ve found that sending a little hello to the ISP stops ‘em pretty good, but it does take some time to do the whois lookup and copy the email headers into a message for the administrator. A nice boiler plate Helo:

• Hello. The spammer below is either using your resources to send out bulk unsolicited commercial e-mail (“spam”) or is deceptively trying to make it look like he is. In either case, a legitimate company like yours probably would not approve. The information below should be all you need.
  -begin full headers-

This is the reply I get from AT&T from another abuse report sent in and it’s got some links to good information:

• DO NOT REPLY TO THIS MESSAGE **
• AT&T WILL NOT SEE ANY REPLY SENT TO THIS MESSAGE **

Thank you for your report to the AT&T Internet Investigations and Security Services Team. We are not able to respond personally to each message received, but wish to assure you that we investigate each and every abuse report we receive, and will take the appropriate action. In the future, forward any complaints you have with the original E-mail you received. Please send them one at a time while keeping the subject line intact and include the entire, EXPANDED header information to the following address:
abuse@att.net

If you’ve already included the above information please disregard these instructions.

If you need help in reading the headers visit the following URL’s,

For specific instructions on how to view headers in different E-mail
clients please go to:
http://www.wurd.com/eng/ABCs/spamfight.htm

For general information on reading E-mail headers go to:
http://www.stopspam.org/email/headers/headers.html

These URLs will give you an idea of what we are looking for.

If we can be of further service, feel free to contact us
at this email address:

abuse@att.net

Thank you!

AT&T Internet Investigations and Security Services Team

This entry was posted on Thursday, June 19th, 2003 at 7:28 am and is filed under Web Development. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.