Re: NANOG Spam?

[Gregory Hicks <ghicks () cadence com>]

> Subject: NANOG Spam?
> Date: Wed, 5 Jul 2006 12:56:19 -0500
> From: "Joe Johnson" <joe () sendjoeanemail com>
> To: <nanog () merit edu>
>
>
> Am I the only one to get this email?  Headers say merit.edu sent it.  
I
> have NANOG whitelisted, though, so it came to my mailbox.
[...snip spam...]

No, I got it as well but Postini caught it for me.  So I hadn't seen
it...

Just a "joe-job" though.  The headers are forged.  See the IP address
in thi FIRST "Received-by:" header.  Came from Spain.

[...snip later headers...]
Received: from trapdoor.merit.edu (unknown [84.232.124.32])
        by trapdoor.merit.edu (Postfix) with SMTP id AD0CF91265
        for <nanog () trapdoor merit edu>; Wed,  5 Jul 2006 13:39:15 -0400 
(EDT)
From: "nanog () enterzone net" <nanog () enterzone net>
To: nanog () trapdoor merit edu
Content-type: text/html;
 Charset=Windows-1251
-------------------------------

% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '84.232.124.0 - 84.232.125.255'

inetnum:        84.232.124.0 - 84.232.125.255
netname:        TELELEPE-NET
descr:          Television Por Cable
descr:          Hermanos Ponce Garcia S.L.
descr:          Local TV and ISP Provider
country:        es
admin-c:        GPP18-RIPE
tech-c:         GPP18-RIPE
status:         ASSIGNED PA
mnt-by:         SERVIHOSTING-MNT
source:         RIPE
changed:        ripe () servihosting es 20060126

person:         Gregorio Ponce Pozuelo
address:        C/Niña, 31
address:        21440 Lepe (Huelva) SPAIN
phone:          +34 959645086
fax-no:         +34 959158409
e-mail:         cablehnosponcegarcia () hotmail com
nic-hdl:        GPP18-RIPE
notify:         ripe () servihosting es
mnt-by:         SERVIHOSTING-MNT
changed:        ripe () servihosting es 20060126
source:         RIPE

% Information related to '84.232.0.0/17AS29119'

route:          84.232.0.0/17
descr:          ServiHosting Networks S.L.
descr:          First Allocation
remarks:        **********************************************
remarks:        |        For ABUSE/SPAM/SCANS issues         |
remarks:        |    send mail to abuse () servihosting es      |
remarks:        |    or Fax at number +34.966982510          |
remarks:        **********************************************
origin:         AS29119
mnt-by:         SERVIHOSTING-MNT
notify:         m.tecles () servihosting es
changed:        ripe () servihosting es 20060113
source:         RIPE

Regards,
Gregory Hicks

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton