Subject:     Re: complainant filed with Inter-linc.net.abuse
Date:        1/8/2001 13:12
To:          dean davis, dfd132@hotmail.com

On 1/8/2001 20:47, dean davis sent the following ASCII stream:

>  Dear Mr. Pickett
>  My name is Dean Davis and I am a Detective with the Stone County Sheriff's 
>Department in Galena, Mo. On December 15th, 2000 you e-mailed Inter-linc.net 
>in reference to a spam e-mail you received.  I have been assigned to this 
>case and need to speak with you, please call me at 417-357-6116.
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com
>

Please provide a badge number and your supervisor's name and phone number. I will 
confirm your identity and then proceed should it be necessary. There are too many 
people using identity fraud and I confirm everything. I'm also going to want a LOT 
more details in regards to what this exactly is in regards to. I find it very odd 
that a police department would have to resort to using Hotmail for their email rather 
than a domain of their own. Please be aware, I am now extremely suspicious of this 
entire situation as a lot of things do not ring well with me. Based on the originating 
IP from your Hotmail headers:

$ nslookup 207.3.70.235
Server:  ns2.host4u.net
Address:  209.150.128.15

*** ns2.host4u.net can't find 207.3.70.235: Non-existent host/domain
$ whois 207.3.70.235@whois.arin.net
[whois.arin.net]
Cable & Wireless USA (NETBLK-CW-08BLK) CW-08BLK      207.0.0.0 - 207.3.255.255
Tri-Lakes Net, Inc. (NETBLK-CW-207-3-70) CW-207-3-70 207.3.70.0 - 207.3.70.255

To single out one record, look it up with "!xxx", where xxx is the
handle, shown in parenthesis following the name, which comes first.

$ whois NETBLK-CW-207-3-70@whois.arin.net
[whois.arin.net]
Tri-Lakes Net, Inc. (NETBLK-CW-207-3-70)
   703 S. COMMERCIAL ST.
   BRANSON, MO 65616
   US

   Netname: CW-207-3-70
   Netblock: 207.3.70.0 - 207.3.70.255
   Maintainer: TLAK

   Coordinator:
      Arend, Robert  (RA1138-ARIN)  arend@TRI-LAKES.NET
      417-335-7889 (FAX) 417-337-7084

   Record last updated on 18-Feb-1999.
   Database last updated on 8-Jan-2001 06:20:22 EDT.

No reverse DNS, Cable and Wireless(a known spam-friendly upstream). Not sounding very 
good to me. I see lots of irresponsibility. Nothing to warrant any trust whatsoever. I 
hope this is not an attempt of impersonating a law officer as if this is, I will be 
immediately filing the appropriate complaints there as well as I know law enfocement 
agencies strongly frown on this behavior, and I totally agree with that.

However, hased on inter-linc.net's behavior in this situation, I have no cause for forther 
complaint or concern as they handled the situation appropriately by removing their abusive 
user. I consider the matter closed. 

Let me see if I can find appropriate proof of their response. There have been no further 
problems from that ISP since then so as I've said, I consider the matter resolved and I 
don't have the time to continue dealing with this issue. The case is closed.

Note:
The actual number of inappropriate entries is 75. All documented 100% online.
http://www.studio42.com/kill-the-spam/interactive/guestbookabuse/
See the bottom section in regards to the "Guestbook Flooder".
The only editing that is done(none this time) would be the less than and greater than 
symbols used for HTML mark-up being turned into raw ASCI calls for presentability. These 
have been saved as text files to save time and are as a result 100% unedited. Oddly enough, 
they are in reverse order too. I'm not sure how that happened, but hey, I'm only human.

Just to be safe, I'll be posting any of our conversations to the same page as above as well. 
Might as well have an online transcript. I'll start on that beginning with my original 
complaint this evening, followed by Inter-linc's response, your email and this reply.


Return-Path: <info@inter-linc.net>
Received: from mail.inter-linc.net (12.10.101.4) by studio42.com with ESMTP (Eudora Internet 
Mail Server 3.0) for <chris@studio42.com>; Mon, 18 Dec 2000 15:18:59 -0800
Received: from richslaptop (unverified [12.10.101.31]) by mail.inter-linc.net (Vircom SMTPRS 
4.2.181) with SMTP id <B0007342436@mail.inter-linc.net> for <chris@studio42.com>; 
Mon, 18 Dec 2000 17:11:06 -0600
Message-ID: <05d801c06947$626d5220$1f650a0c@interlinc.net>
From: "Inter-linc.net" <info@inter-linc.net>
To: "Chris Pickett" <chris@studio42.com>
References: <1235180121-11689317@studio42.com>
Subject: Re: Blatant abuse: Entry to the Anti-Spam Guestbook
Date: Mon, 18 Dec 2000 17:08:07 -0600
MIME-Version: 1.0
Content-Type: text/plain;	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400

This issue has been addressed.  Please let me know if you have any further
problems.

Inter-linc.net Support

----- Original Message -----
From: "Chris Pickett" <chris@studio42.com>
To: <abuse@inter-linc.com>
Sent: Friday, December 15, 2000 10:39 PM
Subject: Blatant abuse: Entry to the Anti-Spam Guestbook


> Please terminate your lovely little user. I sure have enjoyed playing
> with them, but I've negated their damage with ease. If you see that this
> behavior is acceptable, I'll be more than happy to ensure that your
> domain and network is easily removed from the internet.
>
> This is one of at least 50. If you would like them all, please let me
> know and I'll send them as file attachments. This little pest was rather
> active, going "back" and re-submitting, of course.
>
>
> Return-Path: <studio42@persipina.host4u.net>
> Received: from dfw-smtpin2.email.verio.net ([129.250.38.52]) by
> dfw-spool1.email.verio.net (Netscape Messaging Server 4.15) with
> ESMTP id G5N0YP04.3FL for <cpicket@ns.net>; Sat, 16 Dec 2000
> 01:47:14 +0000
> Received: from [216.71.64.59] (helo=persipina.host4u.net) by
> dfw-smtpin2.email.verio.net with esmtp id 1476RM-0006Ua-00 for
> cpicket@ns.net; Sat, 16 Dec 2000 01:47:13 +0000
> Received: (from studio42@localhost) by persipina.host4u.net (8.8.5/8.8.5)
> id TAA21662 for cpicket@ns.net; Fri, 15 Dec 2000 19:41:59 -0600
> Date: Fri, 15 Dec 2000 19:41:59 -0600
> Message-Id: <200012160141.TAA21662@persipina.host4u.net>
> Reply-to: Your_Mom@My_House.cum (FuckerNuts)
> From: Your_Mom@My_House.cum (FuckerNuts)
> Subject: Entry to the Anti-Spam Guestbook
>
> You have a new entry in your guestbook:
>
> # Entered from 1079145.inter-linc.com (12.10.79.145) with HTTP/1.1.
> ------------------------------------------------------
> You have been spamed hehehehehehehe.!!!!spam spam spam jam spam flam bam
>
cunningham.......fartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
> tinajarfartinajarf!
>
artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin
>
ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf
>
artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin
>
ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf
>
artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin
>
ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf
>
artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin
>
ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf
>
artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin
>
ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf
>
artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin
>
ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf
>
artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin
> ajarfartinajarfa!
>
rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina
>
jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa
>
rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina
>
jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa
>
rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina
>
jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa
>
rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina
>
jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa
>
rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina
>
jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa
>
rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina
>
jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa
>
rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina
> jarfartinajarfar!
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
>
arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar
>
tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj
> arfartinajarfart!
>
inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja
>
rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart
>
inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja
>
rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart
>
inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja
>
rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart
>
inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja
>
rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart
>
inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja
> rfartinajar FART IN A JAR!!!
> FuckerNuts <Your_Mom@My_House.cum>
>  - Friday, December 15, 2000 at 19:41:58 (CST)
> ------------------------------------------------------