As a sample look at this message part (from hotmail.com)
look after the ************* for more info
From:
sdf435@ydtldmun.yahoo.com Reply-To:
343c@gmx.net
To:
v_dawn_long@mwsvny.hotmail.com
Subject: Where will your business be in 2001? -ngfgvckmy
Date: Thu, 20 Jul 2000 05:29:08 -0500
Received: from [165.95.70.100] by hotmail.com (3.2) with ESMTP id MHotMailBB4012410057D820F3AEA55F4664AD3F0; Thu Jul 20 02:32:58 2000
Received: from 4w6q8q2.compuserve.com by ttisan1. (SMI-8.6/SMI-SVR4)id EAA12138; Thu, 20 Jul 2000 04:20:58 -0500
From
oklfgp@hotbot.com Thu Jul 20 02:36:00 2000
Message-Id: <stx85y8w1q3u.4e5epjt0bh@4w6q8q2.compuserve.com>
View Email Message Source
Reply Reply All Forward Previous Next Close
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8BIT
PRE-APPROVED MERCHANT ACCOUNT INCREASE SALES UP TO 250% ACCEPT CREDIT CARDS
*************
Received: from [165.95.70.100] by hotmail.com
The program TRACERT can help track the ip address down
But I use a program called NEO TRACE
http://www.neoworx.com/
http://www.neoworx.com/download/download.asp?product=NeoTrace
for shareware version
this is just part of a sample trace (from above IP #)
23 tamuswan-ttvn-amcs-1-ge-1.tamu.edu 165.91.254.8 30.608N, 96.317W 325 325 325 325 1 0
24 tamu-teexsanantonio.ttvn.tamus.edu 165.95.252.6 Unknown 613 613 613 613 1 0
25 ttis-1.ttvn.tamus.edu 165.95.252.142 Unknown 439 439 439 439 1 0
26 ttisan1.tamu.edu 165.95.70.100 30.608N, 96.317W- 0 0 0 2 2
This spammer got shut down from my complaints to abuse@----
sometimes you have to use webmaser@----
hope this helps you
michael J. champlin
ussrover@mail.com