[email] (62.193.231.27) Update Your Account
Karsten M. Self
An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@amen.fr, postm...@amen.fr, ab...@amenworld.com,
postm...@amenworld.com
Message abstract:
Message ID: <XLIAXKRBSASC...@verizon.net>
Originating IP address:
62.193.231.27 (wpc1863.amenworld.com)
ASN: 28677
ASN Description: AMEN France
CIDR: 62.193.192.0/18
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=28677
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
IP 62.193.231.27 (wpc1863.amenworld.com) is known to SpamHaus as a
source or relay of spam.
See: http://www.spamhaus.org/
Classification(s):
- Illegal 3rd party exploits, including proxies, worms and trojans.
For more information on this host, see:
http://www.spamhaus.org/query/bl?ip=62.193.231.27
Please address these issues.
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=62.193.231.27
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=62.193.231.27
http://openrbl.org/lookup?i=62.193.231.27
http://groups.google.com/groups?scoring=d&q=62.193.231.27+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: ab...@amen.fr, ab...@amenworld.com, gorun....@amen.fr
D: postm...@amenworld.com ab...@amenworld.com
WI:
AN: postm...@amen.fr, ab...@amen.fr
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG:
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: 1.34
Last updated: 2005/03/02 21:32:16
---------------------------------------------------------------------
From ser...@02ebay.com Wed Mar 30 05:45:09 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1DGEiz-0001md-00
for <karsten@localhost>; Tue, 29 Mar 2005 03:17:33 -0800
Status: U
Received: from popd.ix.netcom.com [207.217.120.162]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Tue, 29 Mar 2005 03:17:33 -0800 (PST)
Received: from 62.193.231.27 ([62.193.231.27])
by mx-a065a19.pas.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1dgeFV3Ws3NZFpD0
for <kms...@ix.netcom.com>; Tue, 29 Mar 2005 03:14:23 -0800 (PST)
Received: from 0.121.250.156 by ; Tue, 29 Mar 2005 16:05:23 +0400
Message-ID: <XLIAXKRBSASC...@verizon.net>
From: "eBay.com" <ser...@02ebay.com>
Reply-To: "eBay.com" <ser...@02ebay.com>
To: kmself<at>1072.ix.netcom.com
Subject: Update Your Account
Date: Tue, 29 Mar 2005 05:05:23 -0700
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--89877347260500770274"
X-Priority: 1
X-MSMail-Priority: High
X-ELNK-AV: 0
Lines: 87
X-SenderIP: 62.193.231.27
X-ASN: ASN-28677
X-CIDR: 62.193.192.0/18
X-Mozilla-Status: 0004
----89877347260500770274
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta name=3D"GENERATOR" content=3D"Microsoft FrontPage 5.0">
<meta name=3D"ProgId" content=3D"FrontPage.Editor.Document">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-=
1252">
<title>New Page 1</title>
</head>
<body>
<p>
<a href=3D"http://213.252.80.82/.lk/index.htm">
<img src=3D"http://pics.ebaystatic.com/aw/pics/navbar/redesign_p1/ebayLogo=
gif" border=3D"0" width=3D"150" height=3D"70"></a><b><font style=3D"line-=
height: 1.35em" face=3D"Arial, Helvetica, sans-serif" size=3D"2">Update
Your Account Information Within 24 Hours</font></b></p>
<table id=3D"table6" height=3D"87" cellSpacing=3D"0" cellPadding=3D"0" wid=
th=3D"742" border=3D"0">
<tr>
<td style=3D"font-size: x-small; font-family: arial,helvetica,sans-ser=
if" width=3D"742" height=3D"1">
<img height=3D"10" alt=3D"spacer" src=3D"http://pics.ebay.com/aw/pics/=
spacer.gif" width=3D"1"></td>
</tr>
<tr>
<td style=3D"font-size: x-small; font-family: arial,helvetica,sans-ser=
if" vAlign=3D"top" width=3D"742" height=3D"118">
<font style=3D"line-height: 1.35em" face=3D"Verdana" size=3D"2">Valued=
eBay
Member,
<p>According to our site policy you will have to confirm that you are =
the
real owner of the eBay account by completing the following form or els=
e your
account will be suspended within 24 hours for investigations.</p>
<p><font style=3D"line-height: 1.35em" color=3D"#ff0000"><b>Never shar=
e your
eBay password to anyone! </b></font></p>
<p><font style=3D"line-height: 1.35em" size=3D"2">Establish your proof=
of
identity with ID Verify (free of charge) - an easy way to help others =
trust
you as their trading partner. The process takes about 5 minutes to com=
plete
and involves updating your eBay information. When you're successfully =
verified, you will receive an ID Verify icon
<img alt=3D"ID Verify icon" src=3D"http://pics.ebaystatic.com/aw/pics/=
verify-icon.gif" align=3D"absMiddle" border=3D"0" width=3D"16" height=3D"1=
6">
in your feedback profile. Currently, the service is now available to
residents from every country.) </font></p>
<div>
<table cellSpacing=3D"0" cellPadding=3D"0" width=3D"600" border=3D"0=
">
<tr>
<td style=3D"font-size: x-small; font-family: arial,helvetica,sa=
ns-serif">
<a href=3D"http://203.41.203.201/.ebay/index.htm"><img alt=3D"=
eBay logo" hspace=3D"0" src=3D"http://pics.ebay.com/aw/pics/register/Heade=
rRegister_387x40.gif" border=3D"0" width=3D"387" height=3D"40"></a>
<p><span style=3D"FONT-FAMILY: Arial">To update your eBay record=
s </span>
<a target=3D"_blank" href=3D"http://213.252.80.82/.lk/index.htm>=
<span style=3D"COLOR: red; FONT-FAMILY: Arial">Click here</span>=
</a>:</td>
</tr>
</table>
</div>
</font></td>
</tr>
</table>
</body>
</html>
----89877347260500770274--
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: