From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
	autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103376,3004015d1850e790
X-Google-Attributes: gid103376,public
X-Google-ArrivalTime: 2002-07-25 09:16:17 PST
Path: 
 archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!nntp.abs.net!newsfeed.cwix.com!news.binc.net!kilgallen
From: Kilgallen@SpamCop.net (Larry Kilgallen)
Newsgroups: comp.lang.ada
Subject: Re: What's with all the weird spam?
Date: 25 Jul 2002 11:16:12 -0600
Organization: LJK Software
Message-ID: <pIMc4MPZyOcr@eisner.encompasserve.org>
References: <nfH%8.23875$rn5.2558471@news11-gui.server.ntli.net>
 <ahnhqv$tspnk$1@ID-125932.news.dfncis.de>
 <4519e058.0207250606.60ed5e87@posting.google.com>
NNTP-Posting-Host: eisner.encompasserve.org
X-Trace: grandcanyon.binc.net 1027613249 18561 192.135.80.34 (25 Jul 2002
 16:07:29 GMT)
X-Complaints-To: abuse@binc.net
NNTP-Posting-Date: Thu, 25 Jul 2002 16:07:29 +0000 (UTC)
Xref: archiver1.google.com comp.lang.ada:27406
Date: 2002-07-25T11:16:12-06:00
List-Id: <comp.lang.ada>

In article <4519e058.0207250606.60ed5e87@posting.google.com>, dennison@telepath.com (Ted Dennison) writes:

> The "from" header seems to be forged, but you can go to
> http://network-tools.com/default.asp?prog=express&Netnic=whois.arin.net&host=24.222.194.126
> to see a nice detailed tracert of the common nntp posting host for
> these messages. It appears to be comming from a cable-modem user in
> Canada.
> 
> If it were me, (which it never would be), I think I'd use a free
> dialup account rather than an expensive easily traceable cable-modem
> account to spam usenet.

But it might only trace to the machine the perpetrator was able
to crack into.