This SPAM was not caught because it was directed specifically to the
list. The relevant received headers:
>Received: from roughboy01 (dyna83.icepr.com [196.12.160.83])
> by mailhost.icepr.com (8.8.8+Sun/8.8.5) with SMTP id SAA00905
> for <mysql@stripped>; Thu, 20 May 1999 18:36:52 -0400 (EDT)
>Date: Thu, 20 May 1999 18:36:52 -0400 (EDT)
>Message-Id: <199905202236.SAA00905@stripped>
>From: Barbie <uramon@stripped>
>To: "mysql@stripped" <mysql@stripped>
From their zone file it appears that they own at least the entire
196.12.160., 196.12.161., and 196.12.162. class C nets. They should be
easy enough to firewall.
Here is some relevant whois info:
Registrant:
Internet Communications Environmental, Inc. (ICEPR-DOM)
252 Avenida Ponce de Leon Suite 603
Hato Rey, PR 00918
Billing Contact:
Casado, Ben (BC881) ben_casado@stripped
809-764-1234
-Sincerely, Fred
(Frederik Lindberg, Infectious Diseases, WashU, St. Louis, MO, USA)