Return-Path: <euromillerss2008@libero.it>
Received: from smtp-out4.libero.it (212.52.84.46) by studio42.com with ESMTP 
(Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Tue, 19 Feb 2008 08:47:57 -0800
Received: from mailrelay11.libero.it (192.168.32.128) by smtp-out4.libero.it (7.3.120)
        id 4628C883064F4ED0 for chris@studio42.com; Tue, 19 Feb 2008 15:35:06 +0100
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AtYjAC94ukdTJUSh/2dsb2JhbAAIkVs/nGE
Received: from unknown (HELO libero.it) ([192.168.17.7])  by outrelay11.libero.it 
with ESMTP; 19 Feb 2008 15:24:25 +0100
Date: Tue, 19 Feb 2008 15:24:25 +0100
Message-Id: <JWHPCP$7AB4594E1147D0B234D1724D5833B8DE@libero.it>
Subject: info
MIME-Version: 1.0
X-Sensitivity: 3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
From: "euromillerss2008" <euromillerss2008@libero.it>
X-XaM3-API-Version: 4.3 (R1) (B3pl25)
X-SenderIP: 83.37.68.161
To: undisclosed-recipients:;

Mapfre Atlanticos Espa–a S.A.
Madrid, Spain

The euromillion espana has awarded your email a cash of six hundred and fifty five thousand euro in a random email world progamme,attached to qualification number/reference nummber LSLUK/2031/8161/07.The objectives is to make a notable changes in the standard of living world wide.To claim your awardemail your full names and telephone numbers,to the agent below.

MapfreAtlanticos Seguridad Espa–a S.A.
Officer in charge:Dr.PAUL ANDERSON
Email to:(claimsp@yahoo.pl)

congratulations in advance!!!
Mrs. Finela Transofa







[studio42@flatus studio42]$ host 212.52.84.46
46.84.52.212.in-addr.arpa domain name pointer smtp-out4.libero.it.
[studio42@flatus studio42]$ whois 212.52.84.46@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '212.52.79.0 - 212.52.88.255'

inetnum:      212.52.79.0 - 212.52.88.255
netname:      IOL-5
descr:        Italia OnLine S.P.A
descr:        Via Lorenteggio 257 - 20152 Milano
country:      IT
admin-c:      IHM1-RIPE
tech-c:       IHM1-RIPE
rev-srv:      ns1.libero.it
rev-srv:      ns2.libero.it
status:       ASSIGNED PA
mnt-by:       AS1267-MNT
mnt-routes:   AS1267-MNT
source:       RIPE # Filtered

person:       IOL Host Master
address:      Italia Online S.p.A.
address:      Via Lorenteggio, 257
address:      I-20153 Milano
address:      Italy
phone:        +39 02 30111
fax-no:       +39 02 30114182
e-mail:       hostmaster@iol.it
nic-hdl:      IHM1-RIPE
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

% Information related to '212.52.64.0/19AS1267'

route:        212.52.64.0/19
descr:        IOL
origin:       AS1267
remarks:      removed cross-mnt:    AS1267-MNT
mnt-lower:    AS1267-MNT
mnt-routes:   AS1267-MNT
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

% Information related to '212.52.64.0/18AS1267'

route:        212.52.64.0/18
descr:        IOL
origin:       AS1267
remarks:      removed cross-mnt:    AS1267-MNT
mnt-lower:    AS1267-MNT
mnt-routes:   AS1267-MNT
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

Idiot ISP located. I am better off blacklisting.

Onto the spammer:

[studio42@flatus studio42]$ host 83.37.68.161
161.68.37.83.in-addr.arpa domain name pointer 161.Red-83-37-68.dynamicIP.rima-td
e.net.
[studio42@flatus studio42]$ whois 83.37.68.161@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag

% Information related to '83.37.0.0 - 83.39.255.255'

inetnum:        83.37.0.0 - 83.39.255.255
netname:        RIMA
descr:          TELEFONICA DE ESPANA
descr:          Provider Local Registry
country:        ES
admin-c:        ATDE1-RIPE
tech-c:         TTDE1-RIPE
status:         ASSIGNED PA
mnt-by:         MAINT-TdE
mnt-lower:      MAINT-TdE
mnt-routes:     MAINT-TdE
source:         RIPE # Filtered

role:           Administradores Telefonica de Espana
address:        Ronda de la Comunicaci n s/n
address:        Edificio Norte 1, planta 6"
address:        28050 Madrid
address:        SPAIN
org:            ORG-TDE1-RIPE
admin-c:        ADT89-RIPE
tech-c:         TTE2-RIPE
nic-hdl:        ATdE1-RIPE
mnt-by:         MAINT-TdE
abuse-mailbox:  nemesys@telefonica.es
source:         RIPE # Filtered

role:           Tecnicos Telefonica de Espana
address:        Emilio Vargas, 4
address:        28043-MADRID
address:        SPAIN
org:            ORG-TDE1-RIPE
admin-c:        TTE2-RIPE
tech-c:         TTE2-RIPE
nic-hdl:        TTdE1-RIPE
mnt-by:         MAINT-TdE
abuse-mailbox:  nemesys@telefonica.es
source:         RIPE # Filtered

% Information related to '83.37.0.0/16AS3352'

route:        83.37.0.0/16
descr:        RIMA (Red IP Multi Acceso)
origin:       AS3352
mnt-by:       MAINT-TdE
source:       RIPE # Filtered