sxip...@shanxitele.com chinafriends
Message abstract:
Message ID: <97689523.10708@gvmpadnyarai@huhmail.com>
Originating IP address:
59.49.1.240 ()
ASN: 4134
ASN Description: China Telecom
CIDR: 59.49.0.0/17
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=4134
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
IP 59.49.1.240 () is known to SpamHaus as a source or relay of spam.
See: http://www.spamhaus.org/
Classification(s):
- Illegal 3rd party exploits, including proxies, worms and trojans.
For more information on this host, see:
http://www.spamhaus.org/query/bl?ip=59.49.1.240
Please address these issues.
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?59.49.1.240
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=59.49.1.240
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=59.49.1.240
http://openrbl.org/lookup?i=59.49.1.240
http://groups.google.com/groups?scoring=d&q=59.49.1.240+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: anti...@ns.chinanet.cn.net, sxip...@shanxitele.com
D:
WI:
AN:
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG: anti...@ns.chinanet.cn.net
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.
Chris Pollock <cpol...@earthlink.net>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: : 1.41 $
Last updated: : 2005/06/06 21:36:51 $
---------------------------------------------------------------------
From gvmpad...@huhmail.com Wed Jun 14 21:26:54 2006
X-RocketYMUMID: AIsmvs4AALsZRJAhRwFjISoyMDk
X-Apparently-To: chris_...@yahoo.com via 206.190.38.139; Wed, 14 Jun 2006 07:46:30 -0700
X-YahooFilteredBulk: 59.49.1.240
X-Originating-IP: [59.49.1.240]
Return-Path: <gvmpad...@huhmail.com>
Authentication-Results: mta279.mail.re4.yahoo.com from=huhmail.com; domainkeys=neutral (no sig)
Received: from 59.49.1.240 (HELO 67.28.113.72) (59.49.1.240) by mta279.mail.re4.yahoo.com with SMTP; Wed, 14 Jun 2006 07:46:29 -0700
X-Message-Info: h/X+34/H/bsy+888/81194282091002
Received: from cress369.gravit...@huhmail.com (woeful544.g...@huhmail.com [59.49.1.240]) by smtp-bustle.imme...@huhmail.com (Postfix) with SMTP id 075BS18B68GE for <chris_...@yahoo.com>; Wed, 14 Jun 2006 13:40:37 -0200
Received: from smtp-chungking.sa...@huhmail.com ([59.49.1.240]) by q48-uo7.gv...@huhmail.com with Microsoft SMTPSVC(5.0.9655.4349); Wed, 14 Jun 2006 12:38:37 -0300
Received: from smtp-dim.mart...@huhmail.com ([59.49.1.240]) by z9-w35.gv...@huhmail.com with Microsoft SMTPSVC(5.0.9987.5845); Wed, 14 Jun 2006 16:41:37 +0100
X-Message-Info: NTCEV+%ND_LC_CHAR[1-3]0+wnt+GA+8/3248711765054
Received: from propelled.g...@huhmail.com ([28.37.230.50]) by erskine.gv...@huhmail.com with MailEnable ESMTP; Wed, 14 Jun 2006 09:40:37 -0600
Date: Wed, 14 Jun 2006 14:42:37 -0100
Message-Id: <97689523.10708@gvmpadnyarai@huhmail.com>
From: Leonardo Shaver <gvmpad...@huhmail.com>
To: Chris_pika33 <chris_pika33<at>6195.yahoo.com>
Subject: : :Viagra/Valium/Ambien: :
MIME-Version: 1.0 (produced by nairobicurlew 0.5)
Content-Type: multipart/alternative; boundary="--756346795368021353"
X-FetchYahoo: version 2.10.0 MsgId 3176_884354_70866_2026_439_0_192654_-1_0
X-SenderIP: 59.49.1.240
X-ASN: ASN-4134
X-CIDR: 59.49.0.0/17
----756346795368021353
Content-Type: text/plain;
charset="iso-6019-2"
Content-Transfer-Encoding: quoted-printable
Content-Description: buggy christendom blink
VI_A~GR.A_ at $1.56 per. dose!
Ci~ali.s, at $1.90 per. dose!
X@na'x. at $1.17 per. dose!
Va|i'um. at $1.30 per. dose!
& many others!
http://nauakb.sandrush.info/?76418381
Grab this now at the above web link
----756346795368021353--
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: