Spam help.

[MGKrebs]

So I was wondering; With the problems the BBV site is having staying "up" because of spamming complaints, I'm thinking I want to complain to some of the ISP's from whom I am getting spam. Does this work?

Here are the some of the "properties" of a recent spam. Who is the ISP here that I would complain to? (I deleted what looked to me like irrelevent stuff):

Return-Path: <[e-mail]>
Received: from hubert.mail.atl.earthlink.net (<207.69.200.45>)
by pickering.mail.mindspring.net (Earthlink Mail Service) with ESMTP id 1acEVJ1Jh3Nl3p20
Received: from watson.mail.atl.earthlink.net (<207.69.200.154>)
by hubert.mail.atl.earthlink.net with smtp (Exim 3.33 #1)
id 1ACev5-0003t7-00
for ...

Received: from 68.184.242.183.charter-stl.com (<68.184.242.183>)
by watson.mail.atl.earthlink.net (Earthlink Mail Service) with SMTP id 1acEV451h3Nl3qW0
Thu, 23 Oct 2003 08:50:24 -0400 (EDT)
Received: from <68.27.195.244> by 68.184.242.183.charter-stl.com with ESMTP id 64881397; Thu, 23 Oct 2003 16:47:49 +0300
Message-ID: <fs$62t495qss$35d2l$9gf-l$$uxyfb@j03af3u>
From: "Aron Sams" <[e-mail]>
Reply-To: "Aron Sams" <[e-mail]>
To: ...
Subject: FW: I get my Vicodin here nipxylsm
Date: Thu, 23 Oct 03 16:47:49 GMT
X-Mailer: The Bat! (v1.52f) Business
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="2EE5E0A._E_EBDC60"
X-Priority: 3
X-MSMail-Priority: Normal

[dweller]

1. i'd advise starting with your own isp

and seeing what system wide filters they have, or that you can implement in your account.
i'd be wary of contacting the senders isp, that may just result in making your address even more known to the spammers there.

good luck
dp

[TreasonousBastard]

2. I report scams...

but not all that much spam. A lot of spam spoofs headers or hijacks isp's as relays, and is tough to trace. There are also mail senders that bypass isp's altogether and are tougher to trace. Replyto's and such can be easily spoofed.

Anyway, here's a quick tutorial on how to interpret email headers:

http://support.earthlink.net/support/TUTORIALS/email/mbx_interpret_headers.jsp


Note the number 68.184.242.183 that seems to be from charter-stl.com. That could be the originating IP address.

Plug that number into the search box at:

http://www.iks-jena.de/cgi-bin/whois (don't worry-- the important stuff is in English)

And you get Charter Communications in St. Louis, and a complaint address of [e-mail]

If you are going to make a complaint to them, make sure that ALL the headers are in the email you forward to them.

on edit:

Doh! Spoke too soon.

Charter got it from-- 68.27.195.244 which is a Sprint IP. Somebody else may know enough to tell if this is a dedicated IP for this guy.