An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
n...@kornet.net
Message abstract:
Message ID: <v59$b8j$$bzb...@hcq.qk584>
Originating IP address:
222.110.1.217 ()
ASN: 4766
ASN Description: KORnet Powered BY Korea Telecom
CIDR: 222.96.0.0/12
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=4766
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
IP 222.110.1.217 () is known to SpamHaus as a source or relay of
spam.
See: http://www.spamhaus.org/
Classification(s):
- Illegal 3rd party exploits, including proxies, worms and trojans.
For more information on this host, see:
http://www.spamhaus.org/query/bl?ip=222.110.1.217
Please address these issues.
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?222.110.1.217
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=222.110.1.217
- DSBL Proxy: http://dsbl.org/listing?222.110.1.217
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=222.1...
http://openrbl.org/lookup?i=222.110.1.217
http://groups.google.com/groups?scoring=d&q=222.110.1.217+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: i...@ns.kornet.net
D:
WI:
AN:
RD:
AA: n...@kornet.net
The following addresses are not reachable per remote query or
local experience:
IG: i...@ns.kornet.net
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: 1.38
Last updated: 2005/04/18 20:00:01
---------------------------------------------------------------------
From lt06v6...@hotmail.com Wed May 18 23:11:46 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1DYa6U-0000mV-00
for <karsten@localhost>; Wed, 18 May 2005 18:45:38 -0700
Status: U
Received: from popd.ix.netcom.com [209.86.93.120]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Wed, 18 May 2005 18:45:38 -0700 (PDT)
Received: from 209.86.93.227 ([222.110.1.217])
by mx-a065a10.pas.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1dysCi2D03NZFpB0
Wed, 18 May 2005 10:45:52 -0700 (PDT)
Received: from (HELO 39sc) [183.224.52.93] by 209.86.93.227 SMTP id Nj6yv9K6j9Z3SQ; Wed, 18 May 2005 16:39:59 -0100
Message-ID: <v59$b8j$$bzb...@hcq.qk584>
From: "Beatrice Carr" <lt06v6...@hotmail.com>
Reply-To: "Beatrice Carr" <lt06v6...@hotmail.com>
To: kimwool<at>12074.ix.netcom.com
Subject: SkyLife, ÈÁúÀÌ ³¡³»Áà¿ä! (SBS,KBS,MBC) °³Åë!
Date: Wed, 18 May 2005 16:39:59 -0100
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="B48A_2_F_E__..5C.E_228"
X-Priority: 3
X-ELNK-AV: 0
Lines: 60
X-SenderIP: 222.110.1.217
X-ASN: ASN-4766
X-CIDR: 222.96.0.0/12
--B48A_2_F_E__..5C.E_228
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"content-type" content=3D"text/html; charset=3Deuc-kr">=
<title>=BD=BA=C4=AB=C0=CC=B6=F3=C0=CC=C7=C1</title>
<meta name=3D"generator" content=3D"Namo WebEditor v5.0">
</head>
<body oncontextmenu=3D"return false">
<body bgcolor=3D"white" text=3D"black" link=3D"blue" vlink=3D"purple" alin=
k=3D"red">
<p align=3D"center"> </p>
<table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"126" alig=
n=3D"center">
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/codmain.html?prod_num=3D54&pt_code=3Dpanox" onfocu=
s=3D"this.blur()"><img src=3D"http://7gijuk.co.kr/PR_imge/new_sky/sky1.gif=
" border=3D"0"></a></p>
</td>
</tr>
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/codmain.html?prod_num=3D54&pt_code=3Dpanox" onfocu=
s=3D"this.blur()"><img src=3D"http://7gijuk.co.kr/PR_imge/new_sky/sky2.jpg=
" border=3D"0"></a></p>
</td>
</tr>
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/codmain.html?prod_num=3D54&pt_code=3Dpanox" onfocu=
s=3D"this.blur()"><img src=3D"http://7gijuk.co.kr/PR_imge/new_sky/sky3.jpg=
" border=3D"0"></a></p>
</td>
</tr>
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/m_reject.html" onfocus=3D"this.blur()"><img src=3D=
"http://7gijuk.co.kr/PR_imge/new_sky/sky4.jpg" border=3D"0"></a></p>
</td>
</tr>
</table>
</body>
</html>
--B48A_2_F_E__..5C.E_228--
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/
