The report for this spam can be found at: 1998 Deadbeats Page 12.
Return-Path: <tay3@msn.com>
Received: from svc.slc.uen.org (root@svc.slc.uen.org [205.124.33.11])
by tomcat.ns.net (8.8.5/8.8.5) with ESMTP id AAA06689 for <cpicket@ns.net>;
Wed, 12 Aug 1998 00:47:36 -0700 (PDT)
From: tay3@msn.com
Received: from ADMIN.WXHS.DAVIS.K12.UT.US (admin.wxhs.davis.k12.ut.us [163.6.135.2])
by svc.slc.uen.org (8.8.5/8.8.5) with ESMTP id BAA20121;
Wed, 12 Aug 1998 01:46:47 -0600 (MDT)
Date: Wed, 12 Aug 1998 01:46:47 -0600 (MDT)
Received: from US-UT-K12-DAVIS-WXHS-ADMIN/SpoolDir by ADMIN.WXHS.DAVIS.K12.UT.US (Mercury 1.21);
12 Aug 98 01:46:59 MDT
Received: from SpoolDir by US-UT-K12-DAVIS-WXHS-ADMIN (Mercury 1.21);
12 Aug 98 01:46:34 MDT
Received: from GREGKAPPAS by ADMIN.WXHS.DAVIS.K12.UT.US (Mercury 1.21);
12 Aug 98 01:46:26 MDT
To: tay3@msn.com
Comments: Authenticated sender is <tay3@msn.com>
Reply-to: 110732.620@compuserve.com
Subject: ONE WAY TO MAKE IT!
Message-Id: <199808122690ZAA7025@GREGSSA.wxhs.davis.k12.ut.us>
X-UIDL: 72911260d5926eafbe2b370d22f1774a
>nslookup 205.124.33.11
Server: ns.mediacity.com
Address: 205.216.172.10
Name: svc.slc.uen.org
Address: 205.124.33.11
Relaying server located.
>nslookup 163.6.135.2
Server: ns.mediacity.com
Address: 205.216.172.10
*** ns.mediacity.com can't find 163.6.135.2: Server failed
>nslookup admin.wxhs.davis.k12.ut.us
Server: ns.mediacity.com
Address: 205.216.172.10
Name: admin.wxhs.davis.k12.ut.us
Address: 163.6.135.2
Hijacked server located. This server FAILS to show the originating point. Let's prove it:
>telnet admin.wxhs.davis.k12.ut.us 25
Trying 163.6.135.2...
Connected to admin.wxhs.davis.k12.ut.us.
Escape character is '^]'.
220 ADMIN.WXHS.DAVIS.K12.UT.US Mercury 1.21 SMTP server ready.
helo hell.org
250 ADMIN.WXHS.DAVIS.K12.UT.US Hi there, hell.org.
mail from:satan@hell.org
250 Sender OK - send RCPTs.
rcpt to:abuse@studio42.com
250 Recipient OK - send RCPT or DATA.
DATA
354 OK, send data, end with CRLF.CRLF
Subject: admin.wxhs.davis.k12.ut.us misconfigured.
Yet another poorly configured server. Plenty of proof.
.
250 Data received OK.
quit
221 ADMIN.WXHS.DAVIS.K12.UT.US Service closing channel.
Connection closed by foreign host.
Now the results of that session:
currently waiting for this session to be delivered.
|