How do you read a spam header?

[Son Nguyen]

For example:
---
From willw197a@acon.nl Sun Oct 22 19:48:59 2000
Received: from [155.229.129.89] by hotmail.com (3.2) with ESMTP id MHotMailBBBCE05D000DD821EEE29BE581590FFA145; Sun Oct 22 19:47:03 2000
From: <willw197a@acon.nl>
Subject: Offshore Credit Card Offer - Guaranteed Approval!
Date: Sun, 22 Oct 2000 21:49:19
Message-Id: <325.329651.266956@zuko.to>
Mime-Version: 1.0
Content-Type: text/html; charset="us-ascii"
---
Is that right they from zuko.to? or forged!

[Son Nguyen]

Hello, the post is getting old!!

[aspen]

The best way to go after spammers is to go after the site they are advertising, chances are any email address you actually find is going to be a redirection or a hack anyways.

[Son Nguyen]

Yes, but it's quite time-consuming!
And I try to understand more about the email header through a technical viewpoint.

[jamesglewisf]

I agree with aspen, go after the site.

Check out:

• junkbusters.com.
• Yahoo!'s Junk eMail page

That ought to help you get started.

[Annette]

Spamcop (at http://www.spamcop.net ) is also an excellent place to go for email spam. Here's part of the output for the headers you posted, for instance:

"nslookup 155.229.129.89" (getting name) [show] 155.229.129.89 = 89.dal-aus900.pool.eni.net
"nslookup 89.dal-aus900.pool.eni.net" (checking ip) [show] ip = 155.229.129.89
abuse.net 89.dal-aus900.pool.eni.net=abuse@eni.net

Spamcop will process the spam and then send out abuse reports if you tell it to do so. You do have to register, but registration is free.

[jamesglewisf]

Annette - Thanks for the excellent post. I'll bookmark that site.

It's great to see you here.

[Annette]

This is actually a return (although fairly limited) for me to these fora. Thanks for the (re)welcome, though.

[jamesglewisf]

Yeah. I knew that. You have almost as many posts as I do. Since I spend most of my time in the General forum, my post count doesn't go up much.

Actually, the story I'm telling is that my post count got to 5,000, and I asked Wayne to reset it to zero.

[Annette]

Well, now - we wouldn't want to have a core dump or anything, would we?

[James]

I always report my spam messages to SpamCop, it usually has a good result. I've got 4 accounts closed, and another 6 that no action has been taken on yet.