[email] (213.207.150.232) YOU ARE A WINNER
Michael Greb
An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
co...@otenet-telecom.com, p...@otenet-telecom.com
Message abstract:
Message ID: <83D23FEA...@jackpot.com>
Originating IP address:
213.207.150.232 ()
ASN: 15805
ASN Description: HTTP Planitis Communications Ltd
CIDR: 213.207.128.0/18
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=15805
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
IP 213.207.150.232 () is known to SpamHaus as a source or relay of
spam.
See: http://www.spamhaus.org/
Classification(s):
- Illegal 3rd party exploits, including proxies, worms and trojans.
For more information on this host, see:
http://www.spamhaus.org/query/bl?ip=213.207.150.232
Please address these issues.
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?213.207.150.232
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=213.207.150.232
- Dynablock NJABL: open proxy -- 1134264878
- DSBL Proxy: http://dsbl.org/listing?213.207.150.232
- SORBS Open Relay: HTTP Proxy See: http://www.sorbs.net/lookup.shtml?213.207.150.232
- Blitzed Open Proxy: Open proxy - see http://opm.blitzed.org/213.207.150.232
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=213.207.150.232
http://openrbl.org/lookup?i=213.207.150.232
http://groups.google.com/groups?scoring=d&q=213.207.150.232+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: co...@otenet-telecom.com, p...@otenet-telecom.com
D:
WI:
AN:
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG:
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.
Michael Greb <mic...@thegrebs.com>
This report produced via a toolchain based on v1.41 of Karsten Self's
Spam Tools available at this url:
http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz
---------------------------------------------------------------------
From nationall...@jackpot.com Mon Jan 2 23:54:40 2006
Return-path: <nationall...@jackpot.com>
Envelope-to: c61a8463<at>16511.webuser.thegrebs.com
Delivery-date: Sat, 31 Dec 2005 09:13:34 -0600
Received: from [213.207.150.232] (helo=jackpot.com)
by orion.thegrebs.com with smtp (Exim 4.60)
(envelope-from <nationall...@jackpot.com>)
id 1EsiPv-0007Op-8z
for c61a8463<at>32441.webuser.thegrebs.com; Sat, 31 Dec 2005 09:13:28 -0600
Message-ID: <83D23FEA...@jackpot.com>
Date: Sun, 01 Jan 2006 00:12:52 +0800
From: "Mrs Maria J. Chambers " <nationall...@jackpot.com>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-GB; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1
X-Accept-Language: en-us
MIME-Version: 1.0
To: "YOU ARE A WINNER" <c61a8463<at>15603.webuser.thegrebs.com>
Subject: YOU ARE A WINNER
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
The
Suite 179 1007
West/Zuld, L70 1NL
Zwolle Holland
(Customer Services)
Ref: DEUK/9383/8161/99
Batch: GI/SE12-59
Government Accredited Licensed lottery promoters.
International Promotions/Prize Award Department
Login to http://lottery.co.uk/res
We are please to announce you as one of the 10 lucky winners in the
national lottery held on the 28th December, 2005. All 10 winning addresses
were randomly selected from a batch of 50,000,000 international emails. Your
email address emerged alongside 9 others as a category 2 winner in this year
national lotto game draw
Consequently, you have therefore been approved for a total pay out of
£1,000,000 Dollars (one million pounds sterlings) only. In order to avoid
unnecessary delays and complications please remember to quote your reference
number and batch numbers:
1, Batch 7499-4206-5876
2, Ref: 739801527-Nll
3, lucky numbers 94-1-537-97-31-809
Please note that your lucky winning number falls within our European
booklet representative office in Europe as indicated in your play coupon. In
view of this, your £1,000,000 would be released to you by any of our
payment offices in Europe.
To file for your claim, please contact
Advocate Patrick cox
Telephone number +31 -6100- 234 82
Fax: +31-847-545-681
Email: bejesb...@netscape.net
Bejes law & Associates
This will enable the office of bejes & asscociates to send the claims
application form (A4) to you the Beneficiary.you can confirm your winnings
when you LOGIN TO http://lottery.co.uk/res
For security reasons, you are advised to keep your winning information
confidential till your claims is processed and your money remitted to
you in whatever manner you deem fit to claim your prize. This is part
of our precautionary measure to avoid double claiming and unwarranted
abuse of this program. Please be warned. Remember, all winnings must be
claim not later than january 5th, 2005, after this date, unclaimed funds
will be returned to the national Lotto
Good luck from me and members of staff of the NATIONAL LOTTERY.
Yours faithfully,
Mrs Maria Rooney
Online coordinator for THE NATIONAL LOTTERY
Sweepstakes International Program.
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
Michael Greb
An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
co...@otenet-telecom.com, p...@otenet-telecom.com
Message abstract:
Message ID: <D6DD2040...@jackpot.com>
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=15805
http://www.spamhaus.org/query/bl?ip=213.207.150.232
Please address these issues.
IG:
Michael Greb <mic...@thegrebs.com>
---------------------------------------------------------------------
From nationall...@jackpot.com Mon Jan 2 23:55:00 2006
Return-path: <nationall...@jackpot.com>
Envelope-to: c3d41de4<at>15623.webuser.thegrebs.com,
c3d4...@webuser.thegrebs.com,
c3d4...@webuser.thegrebs.com,
c3d4...@webuser.thegrebs.com
Delivery-date: Sat, 31 Dec 2005 09:13:43 -0600
Received: from [213.207.150.232] (helo=jackpot.com)
by orion.thegrebs.com with smtp (Exim 4.60)
(envelope-from <nationall...@jackpot.com>)
id 1EsiPz-0007Oo-6F; Sat, 31 Dec 2005 09:13:38 -0600
Message-ID: <D6DD2040...@jackpot.com>
Date: Sat, 31 Dec 2005 20:49:25 +0500
From: "Mrs Maria J. Chambers " <nationall...@jackpot.com>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02
MIME-Version: 1.0
To: "YOU ARE A WINNER" <c3d41de1<at>30644.webuser.thegrebs.com>,
<c3d4...@webuser.thegrebs.com>,
<c3d4...@webuser.thegrebs.com>,
<c3d4...@webuser.thegrebs.com>
Michael Greb
An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
co...@otenet-telecom.com, p...@otenet-telecom.com
Message abstract:
Message ID: <6CC3A308...@jackpot.com>
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=15805
http://www.spamhaus.org/query/bl?ip=213.207.150.232
Please address these issues.
IG:
Michael Greb <mic...@thegrebs.com>
---------------------------------------------------------------------
From nationall...@jackpot.com Mon Jan 2 23:56:48 2006
Return-path: <nationall...@jackpot.com>
Envelope-to: cb631bdb<at>23164.webuser.thegrebs.com
Delivery-date: Sat, 31 Dec 2005 09:32:52 -0600
Received: from [213.207.150.232] (helo=jackpot.com)
by orion.thegrebs.com with smtp (Exim 4.60)
(envelope-from <nationall...@jackpot.com>)
id 1Esiim-0007bZ-Lm
for cb631bdb<at>22255.webuser.thegrebs.com; Sat, 31 Dec 2005 09:32:52 -0600
Message-ID: <6CC3A308...@jackpot.com>
Date: Sat, 31 Dec 2005 05:25:24 -1100
From: "Mrs Maria J. Chambers " <nationall...@jackpot.com>
User-Agent: Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:1.0.2) Gecko/20021120 Netscape/7.01
X-Accept-Language: en-us
MIME-Version: 1.0
To: "YOU ARE A WINNER" <cb631bdb<at>21347.webuser.thegrebs.com>
Michael Greb
An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
co...@otenet-telecom.com, p...@otenet-telecom.com
Message abstract:
Message ID: <1A7C5E84...@jackpot.com>
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=15805
http://www.spamhaus.org/query/bl?ip=213.207.150.232
Please address these issues.
IG:
Michael Greb <mic...@thegrebs.com>
---------------------------------------------------------------------
From nationall...@jackpot.com Tue Jan 3 00:04:04 2006
Return-path: <nationall...@jackpot.com>
Envelope-to: d44e9893<at>11939.webuser.thegrebs.com
Delivery-date: Sat, 31 Dec 2005 11:17:55 -0600
Received: from [213.207.150.232] (helo=jackpot.com)
by orion.thegrebs.com with smtp (Exim 4.60)
(envelope-from <nationall...@jackpot.com>)
id 1EskMX-0000H1-HH
for d44e9893<at>27869.webuser.thegrebs.com; Sat, 31 Dec 2005 11:17:55 -0600
Message-ID: <1A7C5E84...@jackpot.com>
Date: Sat, 31 Dec 2005 17:54:17 +0000
Reply-To: "Mrs Maria J. Chambers " <nationall...@jackpot.com>
From: "Mrs Maria J. Chambers " <nationall...@jackpot.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.6a) Gecko/20031030
MIME-Version: 1.0
To: "YOU ARE A WINNER" <d44e9893<at>26960.webuser.thegrebs.com>