An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
n...@kornet.net
Message abstract:
Message ID: <1-18341363-6fqWAcsAhl5iUZYBoqvw...@vxe4.romancebounty.com>
Originating IP address:
218.147.156.112 ()
ASN: 4766
ASN Description: KORnet Powered BY Korea Telecom
CIDR: 218.144.0.0/12
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=4766
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
IP 218.147.156.112 () is known to SpamHaus as a source or relay of
spam.
See: http://www.spamhaus.org/
Classification(s):
- Illegal 3rd party exploits, including proxies, worms and trojans.
For more information on this host, see:
http://www.spamhaus.org/query/bl?ip=218.147.156.112
Please address these issues.
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?218.147.156.112
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=218.147.156.112
- SORBS Open Relay: Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?218.147.156.112
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=218.1...
http://openrbl.org/lookup?i=218.147.156.112
http://groups.google.com/groups?scoring=d&q=218.147.156.112+group:*ab...
Among potential contact addresses found for this spam are:
IPW: i...@ns.kornet.net
D:
WI:
AN:
RD:
AA: n...@kornet.net
The following addresses are not reachable per remote query or
local experience:
IG: i...@ns.kornet.net
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.
Chris Pollock <cpoll...@earthlink.net>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: : 1.41 $
Last updated: : 2005/06/06 21:36:51 $
---------------------------------------------------------------------
From tara.p...@comitgrosseto.com Wed Jun 14 21:26:46 2006
X-RocketYMUMID: AIYmvs4AAEGsRJADpQDVCnTaW+Y
X-Apparently-To: chris_poll...@yahoo.com via 206.190.38.134; Wed, 14 Jun 2006 05:40:04 -0700
X-YahooFilteredBulk: 218.147.156.112
X-Originating-IP: [218.147.156.112]
Return-Path: <tara.p...@comitgrosseto.com>
Authentication-Results: mta305.mail.mud.yahoo.com from=capitolcitymarketing.com; domainkeys=neutral (no sig)
Received: from 218.147.156.112 (HELO 1633990) (218.147.156.112) by mta305.mail.mud.yahoo.com with SMTP; Wed, 14 Jun 2006 05:40:03 -0700
Received: from 63.97.023.28 (xky9.romancebounty.com) (63.97.023.28) by mta140.mail.scd.yahoo.com with SMTP; Wed, 14 Jun 2006 07:39:53 -0600
MIME-Version: 1.0
X-Accept-Language: en
X-Priority: Normal
From: "Jennifer Escobar" <Roger.Hun...@capitolcitymarketing.com>
To: cerc2883<at>11819.yahoo.com
Cc: vwqf<at>28658.yahoo.com, lnblml<at>28658.yahoo.com, bomber_ie<at>28658.yahoo.com, diena21<at>28658.yahoo.com, brassy34<at>28658.yahoo.com, chris_pollock<at>28658.yahoo.com, latincub<at>28658.yahoo.com, gmhw98<at>28658.yahoo.com, vachalj_vachal<at>28658.yahoo.com
Subject: Re:fnance
Date: Wed, 14 Jun 2006 07:39:53 -0600
Message-ID: <1-18341363-6fqWAcsAhl5iUZYBoqvw...@vxe4.romancebounty.com>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-FetchYahoo: version 2.10.0 MsgId 7548_867859_69058_1482_211_0_192649_-1_0
X-SenderIP: 63.97.023.28
X-ASN: ASN-701
X-CIDR: 63.96.0.0/12
Decrease your monthly mortgage payments by more than 1/3.
Junes Prequalified-Rates
______________________
$335,000.00 @ 4.01%
$696,000.00 @ 3.84%
$535,000.00 @ 3.44%
http://mx.geocities.com/carlos_godfrey90
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/