Jump to content

Someone used our email to spam


leathersmt

Recommended Posts

We just got an email from someone claiming to be us. I can copy the headers and what I found to see if anyone can verify if what I found is right. Please advise.

Return-Path: <leathersbymt[at]leathersbymaryterry.com>

Received: from ovenbird.mail.pas.earthlink.net ([207.217.120.247])

by timothy.mail.atl.earthlink.net (EarthLink SMTP Server) with ESMTP id 1bI1yn4jV3Nl3pw0

for <leathersbymt[at]mindspring.com>; Tue, 6 Jul 2004 21:48:55 -0400 (EDT)

Received: from egret-120.pocket ([10.4.120.211] helo=egret)

by ovenbird.mail.pas.earthlink.net with smtp (Exim 3.36 #1)

id 1Bi1YN-0005OJ-00

for leathersbymt[at]mindspring.com; Tue, 06 Jul 2004 18:48:55 -0700

X-MindSpring-Loop: leathersbymt[at]leathersbymaryterry.com

Received: from omt ([67.122.111.124])

by egret (EarthLink Mail Service) with SMTP id 1bI1ym34x3NZFmj0

for <leathersbymt[at]leathersbymaryterry.com>; Tue, 6 Jul 2004 18:48:54 -0700 (PDT)

Message-ID: <051301c463c4$3a4eb46a$d005ea19[at]omt>

CC: <leathersbymt[at]leathersbymaryterry.com>

Subject: Save thousands on your mortgage!

Date: Tue, 6 Jul 2004 18:48:14 -0700

X-Mailer: SMTP

Content-Type: text/html; charset="ISO-8859-1"

MIME-Version: 1.0

X-Priority: 1

From: <leathersbymt[at]leathersbymaryterry.com>

X-ELNK-AV: 0

67.122.111.124

NAME: PBI-NET-10

NUMBER: 67.112.0.0 - 67.123.255.255

CITY: SAN RAMON

STATE: CALIFORNIA

COUNTRY: US

LAT: 37.79

LONG: -122.40

LAT_LONG_GRAN: City

LAST_UPDATED: 16-Oct-2001

NIC: ARIN

LOOKUP_TYPE: Block Allocation

RATING:

DOMAIN_GUESS:

STATUS: OK

___________________________________________________________

route: 67.122.96.0/19

descr: San Francisco, CA

SBC Internet Services

origin: AS7132

mnt-by: MAINT-AS7132

changed: *********[at]sbc.com 20030317

source: RADB

_________________________________________________________________________

Pac Bell Internet Services PBI-NET-10 (NET-67-112-0-0-1)

67.112.0.0 - 67.127.255.255

rback7.sntc01 SBC067122108000021030 (NET-67-122-108-0-1)

67.122.108.0 - 67.122.111.255

____________________________________________________________________

Country: Unknown

Looking up !NET-67-112-0-0-1 at whois.arin.net.

NOTE: More information appears to be available at PIA2-ORG-ARIN.

Using cached answer (or, you can get fresh results).

Hiding E-mail address (you can get results with the E-mail address).

OrgName: Pac Bell Internet Services

OrgID: PACB

Address: 208 Bush St. #5000

City: San Ramon

StateProv: CA

PostalCode: 94104

Country: US

NetRange: 67.112.0.0 - 67.127.255.255

CIDR: 67.112.0.0/12

NetName: PBI-NET-10

NetHandle: NET-67-112-0-0-1

Parent: NET-67-0-0-0-0

NetType: Direct Allocation

NameServer: NS1.PBI.NET

NameServer: NS2.PBI.NET

Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE

RegDate: 2001-10-16

Updated: 2003-03-07

TechHandle: PIA2-ORG-ARIN

TechName: IPAdmin-PBI

TechPhone: +1-877-722-3755

TechEmail: ************[at]sbis.sbc.com

OrgAbuseHandle: APB2-ARIN

OrgAbuseName: Abuse - Pacific Bell

OrgAbusePhone: +1-877-722-3755

OrgAbuseEmail: ******[at]pacbell.net

OrgNOCHandle: SPBI-ARIN

OrgNOCName: Support - Pacific Bell Internet

OrgNOCPhone: +1-877-722-3755

OrgNOCEmail: ********[at]pacbell.net

OrgTechHandle: PIA2-ORG-ARIN

OrgTechName: IPAdmin-PBI

OrgTechPhone: +1-877-722-3755

OrgTechEmail: ************[at]sbis.sbc.com

# ARIN WHOIS database, last updated 2004-06-15 19:10

# Enter ? for additional hints on searching ARIN's WHOIS database.

[if E-mail address(es) were hidden on this page, you can click here to get the results with the E-mail address.

Link to comment
Share on other sites

Sadly you are the victim of a very common spam technique where your Email address is inserted in the from line - presumably to try and make the Email more plausible to you, the recipient.

Another possible issue is that your Email address has been randomly selected as the from address for a bunch of Email spam. This is quite common, exceedingly annoying but with little possibility of getting the practice stopped. Many folk who hang around here have had a similar experience. It generally goes away as quickly as it arrives and causes little or only momentary hassle.

Only if it causes you more than a small amount of hassle would it be worthwhile taking legal action (IMO) ;)

Andrew

Link to comment
Share on other sites

Sadly you are the victim of a very common spam technique where your Email address is inserted in the from line - presumably to try and make the Email more plausible to you, the recipient.

If that makes no sense whatsoever to you, remember Rule #3.

Sorry, there's not much you can do about this (other than report the email as usual through SpamCop, making sure you don't complain to your own, completely innocent ISP). The random "bounced spam" messages I get from ISPs (where spam is forged from my address to third parties) are far more annoying - it's got so bad that I have to ignore every bounce message these days, and have no way of knowing if one of my own emails isn't getting through. Another example of what spammers have ruined.

Still, I would urge you to be philosophical about this. You will still have the use of your email address when the spammers are all hiding or in jail... :)

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...