Need automatic spam reporting tool



I'm flooded with returned messages from e-mail servers
bouncing spam messages where the spammer uses fake "From:"
tags with random names on my 24by7webstores.com site:
"From: "Mort tikkanen" <Mort-vorhies@xxxxxxxxxxxxxxxxxx>"

In working on this problem, I have developed AWK scripts
that collect the bounced messages by originating IP address into
files:

24 85.97.42.31.collect
239 78.174.242.34.collect
36 212.156.220.69.collect
19 88.235.103.244.collect
18 86.134.238.12.collect
10 86.136.138.121.collect

Where each *.collect file contains all the spam messages
originating from the IP part of the file name (24, 239,
36 messages etc...).

Up to this point I have been manually looking up the IP
addresses on www.samspade.org and manually generating a
report list:

24 85.97.42.31.collect 85.97.40.0 - 85.97.55.255 abuse@xxxxxxxxxxxx
239 78.174.242.34.collect 78.174.0.0 - 78.174.255.255 abuse@xxxxxxxxxxxx
36 212.156.220.69.collect 212.156.220.0 - 212.156.220.255 abuse@xxxxxxxxxxxx
19 88.235.103.244.collect 88.235.0.0 - 88.235.127.255 abuse@xxxxxxxxxxxx

zip spam_abuse_ttnet.zip 85.97.42.31.collect 88.235.103.244.collect 212.156.220.
69.collect 78.174.242.34.collect

18 86.134.238.12.collect 86.128.0.0 - 86.135.255.255 abuse@xxxxxxxxxxxxxxx
10 86.136.138.121.collect 86.136.0.0 - 86.141.255.255 abuse@xxxxxxxxxxxxxxx

zip spam_abuse_btbroadband.zip 86.152.52.171.collect 86.133.98.183.collect 86.1
34.236.155.collect 86.134.238.12.collect 86.136.138.121.collect 86.141.218.48
..collect

Running the zip command line to zip the target collect files into a submission
archives:

-rw-r--r-- 1 smf group 14716 Mar 4 23:46 spam_abuse_arcor-ip.zip
-rw-r--r-- 1 smf group 39321 Mar 4 23:46 spam_abuse_btbroadband.zip

-rw-r--r-- 1 smf group 961695 Mar 4 23:46 spam_abuse_charter.zip
-rw-r--r-- 1 smf group 52350 Mar 4 23:46 spam_abuse_merit.zip
-rw-r--r-- 1 smf group 11390 Mar 4 23:46 spam_abuse_nextra.zip
-rw-r--r-- 1 smf group 45832 Mar 4 23:46 spam_abuse_postini.zip
-rw-r--r-- 1 smf group 10961 Mar 4 23:46 spam_abuse_tpnet.pl.zip
-rw-r--r-- 1 smf group 212194 Mar 4 23:46 spam_abuse_ttnet.zip

And manually compose an e-mail to the abuse@ address and attaching
the corresponding zip archive.

Now I'd like to automate the reverse IP look-up so that I can
script the whole reporting process.

Unfortunately, whois on SCO does not provide the necessary information.

Any suggestions on how to lookup the information I need
automatically with tools on the SCO 5.0.7 system?

Or is there an open source tool that can be compiled for SCO
that will provide the information I need?


--
Steve Fabac
S.M. Fabac & Associates
816/765-1670
.