[NTISP] Any Info on this Spammer?

JM Foster ( (no email) )
Wed, 5 May 1999 13:14:51 -0600

Hello,

Has anyone had any spam attacks going on
from any headers similar to this? I began by
blocking the last octet and now am blocking
the entire 195.0.0.0. So far I must have done
15 IP numbers. It slows down but just when I
think they've had it down comes another number.

thanks for any information anyone might have.

Cheers
Julie Foster

***********Header Below*************************

The message was submitted on Fri, 30 Apr 1999 03:10:01 -0600
by host [195.164.198.1] [195.164.198.1]

The original message header is below:

-> Received: from klakier.rsw.pl ([195.164.198.1]) by mail.bitterroot.net
-> (Post.Office MTA v3.5 release 215 ID# 0-59196U1000L100S0V35)
-> with SMTP id net; Fri, 30 Apr 1999 03:10:01 -0600
-> Received: from localhost by klakier.rsw.pl (SMI-8.6/SMI-SVR4)
-> id KAA26784; Fri, 30 Apr 1999 10:54:52 +0200
-> Date: Fri, 30 Apr 1999 10:54:52 +0200
-> To: hoho57@mail.jinro.co.kr
-> From: hoho57@mail.jinro.co.kr (tyreorn)
-> Comments: Authenticated sender is <hoho57@mail.jinro.co.kr>
-> Subject: $$$ One Year Guarantee!! $$$ L@@K NOW $$$
-> Message-Id: <19990430450TAA4449@guncerso.verthu.rsw.pl>