Tracking the "Crusader Spammer"


From alt.test Thu Oct  5 01:08:57 1995
Path: panix!news.eecs.umich.edu!newshost.marcam.com!news.mathworks.com!tank.news.pipex.net!pipex!newsxfer.itd.umich.edu!agate!howland.reston.ans.net!news.sprintlink.net!in2.uu.net!news.net99.net!news.netwest.com!usenet
From: somebody@somewhere
Newsgroups: alt.test,misc.test,rec.test,news.test,it.test,fr.test,de.test,uk.test,nyx.test
Subject: Subscribe 
Date: 2 Oct 1995 12:51:23 GMT
Message-ID: <43djhsdfg@ocotillo.netwest.com>
NNTP-Posting-Host: congo2.congo.com
X-Mailer: Mozilla 1.1N (Windows; I; 16bit)
Lines: 4
Xref: panix alt.test:253403 misc.test:107965 fr.test:6447 de.test:13000 uk.test:7628

subscribe dc-sports treborle@netcom.com
subscribe ddeb3-l treborle@netcom.com
subscribe ddsupport-l treborle@netcom.com
subscribe dead-foster treborle@netcom.com


From alt.test Thu Oct 5 01:08:57 1995 Path: panix!news.eecs.umich.edu!newshost.marcam.com!news.mathworks.com!tank.news.pipex.net!pipex!howland.reston.ans.net!news.sprintlink.net!in2.uu.net!news.net99.net!news.netwest.com!usenet From: somebody@somewhere.edu Newsgroups: alt.test,misc.test,rec.test,news.test,it.test,fr.test,de.test,uk.test,nyx.test Subject: Subscribe Date: 2 Oct 1995 12:51:23 GMT Message-ID: <43djhsdfdasadsf@ocotillo.netwest.com> NNTP-Posting-Host: congo2.congo.com X-Mailer: Mozilla 1.1N (Windows; I; 16bit) Lines: 4 Xref: panix alt.test:253404 misc.test:107969 fr.test:6448 de.test:13001 uk.test:7629 subscribe dc-sports treborle@netcom.com subscribe ddeb3-l treborle@netcom.com subscribe ddsupport-l treborle@netcom.com subscribe dead-foster treborle@netcom.com

By: lan@panix.com