Need Help Tracking an Email (Kind of Vanity-Possible Hate Email from CNN's Aaron Brown)

My email | 10-3-29-04 | Lance Romance

[Lance Romance]

I posted everything that was in the header. What I found interesting was the aaron.atl.earthlink.... section of it.

I will admit my email to Aaron was quite saucy and also mentioned Fox News. I would love to be able to track this.

[draino]

Hey Draino, Why not post the headeers from ONE of YOUR Aaron Brown emails?

Huh? Sorry, I don't follow.

[montanajoe]

Blocking is somewhat satisfying but it would be more fun to make their lives miserable in some small way, whoever they are.

I would depend on your firewall/virus software. It sems to me you should always reject anything you are not familier with (butyou may need to unreject as lots of links here upset my little firewall hehe)

[MrBambaLaMamba]

Got the exact same spam twice today from 2 different sources.
The socialists and apologists for terrorism are busy, obviously nervous.

[sbMKE]

RR usually assigns IPs on a rotating dynamic basis. A user shows multiple IPs per connection/session.

If this is your sender it's a home user. Likely not in VA.


Search results for: 68.206.59.156

OrgName: Road Runner
OrgID: RRSW
Address: 13241 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US

ReferralServer: rwhois://ipmt.rr.com:4321

NetRange: 68.200.0.0 - 68.207.255.255
CIDR: 68.200.0.0/13
NetName: RR-SOUTHEAST-BLK3
NetHandle: NET-68-200-0-0-1
Parent: NET-68-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:
RegDate: 2003-01-31
Updated: 2004-09-17

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-345-3416
OrgAbuseEmail: abuse@rr.com

OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: +1-703-345-3416
OrgTechEmail: abuse@rr.com

[gorio]

If we match the header from one of your "confirmed" Aaron Brown emails to the "suspected fake" Aaron Brown email, then it will confirm or deny authenticy.

Gorio

[L`enn]

I would think an email addy with Aaron with an Atlanta ISP would be quite common as Hank Aaron would be a icon there. Like there probably is a lots of Favre@xxx.wisc.com's out there.

[montanajoe]

There is a site out there called samspade..I cant remember exact address but tat might help

[eddiebear]

misleader was an ad moveon.org was running in 2003. Just a thought

[Arkinsaw]

aaron is just the name of one of earthlink's atlanta mail servers. If its on the right side of the AT sign then its really probably not a person's name.

[Xenalyte]

houston.rr.com is the local RoadRunner address.

[Mr. Bird]

C'mon, Lance. You've been around here long enough. It's just some spam. Even if you found the "original" sender, it's likely some dupe.

[Lance Romance]

Thanks everyone. My nerdiness was not enough to decipher the header. I appreciate your help.

I was intrigued by the aaron.atl... The return email was obviously a fake. I thought it was somehow connected to my salty email to Aaron Brown.

I guess this is a spam email, becuase others have received it as well.

[draino]

I can assure you (him) that Aaron Brown does not use an "earthlink" email address.

For thoughtfulness reasons I would not put Aaron Brown's email on an open forum. Though, he is open to private email me and I will confirm for him what is Aaron's real email.

Also, I am sure if any others on here email at all with Aaron they will "get" my "blueberry" comment.

[El Gran Salseron]

It's spam. My IP is 68.xxx.xxx.xxx and I'm in Houston.

The problem is that the spammer can "change" his/her IP address by changing his/her network card or going offline by unplugging his cable modem for awhile then plug it back in with the hope that his IP address will change.....assuming that he has a dynamic IP.

If he has a static IP then you can nail him. :-)

[Lance Romance]

My apologies to everyone, I thought that it was too much of a coincidence that a day after a blistering email to Aaron Brown, I would get a reply email from a mailserver with aaron in it.

Thanks for the help and I hope we can track this crap down and stop it.

[Dave S]

Somehow I think a network anchor has better things to do than spam you with hate mail.